last executing test programs: 1m4.211555831s ago: executing program 0 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setfsuid(0xee00) (async) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000e1ffffff00020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0xe, @tick, {}, {}, @raw32={[0x7]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x40, 0x0, @tick, {0x10}, {0x0, 0x10}}], 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800002001000029e2e30c93878088be0f1eb2000040f7ff000000000000009c7aab8e9af75ec740df4796ce21c900008ddb63f353c67ad2b6f162714786e0678cc5c5ad49225886bfa8ef539fccfed97c88adcccbc86bd16bea7406cd4f73370374b3251284986bcac5cc137b20274f781a8fecbaee5bcf43edfb5a3f67d3adc4bb0ecb4df0756ccdb0d69c24a7989fd392564ab59d54d6479ad4bd86c103d0fc3a995219aff6f6802d3658"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}}, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="93e1b79e467f7f5b63099415633f203f17fef2648c8598fe46e270f1628b0e24fa3b6a7eebb787823d492fa3c09fb344d5aa", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) 1m4.211298948s ago: executing program 0 (id=288): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x4005) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x20, 0xc, 0x101, 0xfffd, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r7) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r3], 0xc8}, 0x1, 0x0, 0x0, 0x48040}, 0x24000001) 1m4.15185174s ago: executing program 0 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c0002800800054000000003080002400000000208000140000000010900010073797a30000000000900020073797a3200000000140000051100010000000000000000000000000a"], 0xa4}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac141433000000000000000000000000fc00000000000000000000000000000100000800000000000200ef6002c50000431c4c1eb290ce5015d588d74cc2343f49d0885b9de2cdbf58e51c8c645ca16fda0ee04a901c5dd92cfeb76666267cad1ef4922dc48a49cffd00e91cbfd5b95b840fb87cb827aeb12071aaf70b58ce2757e2c4ae5a47e8cfec104f375100391daa8d01fe7083502c0ee62d3f03c60ab374c06a9aea0a6e2a370a96ab694431c0f67c15507428e1533fc00c1314bf62cd0c", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000009000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d900000000"], 0xb8}}, 0x4000080) 1m4.150564375s ago: executing program 0 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x9}}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) ioctl(r3, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000002600)={&(0x7f00000025c0), 0x0, 0x9b8, 0x0, 0x1, 0xc855, 0x3, 0x3, 0x8}) (async) r6 = socket(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x4800, 0x5c07, {0x6, 0x1}, {0x17, 0x2}, @rumble={0x81, 0xd}}) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) (async) recvmmsg$unix(r6, &(0x7f00000024c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/42, 0x2a}, {&(0x7f0000000480)=""/254, 0xfe}], 0x6, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000000780)=""/25, 0x19}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/55, 0x37}, {&(0x7f00000009c0)=""/1, 0x1}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/100, 0x64}, {&(0x7f0000000b80)=""/107, 0x6b}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0xa, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001d80)=""/78, 0x4e}, {&(0x7f0000001e00)=""/179, 0xb3}, {&(0x7f0000001ec0)=""/225, 0xe1}, {&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002080)=""/52, 0x34}, {&(0x7f00000020c0)=""/92, 0x5c}, {&(0x7f0000002140)=""/208, 0xd0}, {&(0x7f0000002240)=""/78, 0x4e}, {&(0x7f00000022c0)=""/152, 0x98}], 0x9, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x3, 0x40012003, &(0x7f0000002580)) 1m4.089120258s ago: executing program 0 (id=293): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r0, 0xc008644e, &(0x7f00000001c0)={0x7}) syz_emit_ethernet(0x171, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x2f, 0x4, 0x2, 0x2, 0x15b, 0x68, 0x0, 0x3, 0x21, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x40, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@remote, 0x6}, {@remote}, {@local}, {@local, 0x2}, {@rand_addr=0x3ff, 0x9}, {@private=0xa010101}]}, @timestamp_addr={0x44, 0x4c, 0x45, 0x1, 0x0, [{@loopback, 0x1}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff0b}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast2, 0x9}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x2}, {@broadcast, 0x6}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x84, [@multicast1, @loopback, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, "1c56e3", 0x7, "1d5e7e"}, "6f30cf6c8ee6c5cf5f4a5ab4d6526a702ac1b6bd51177b24e21d306853316ed342b7ec3a9088a2f40d5a204aefd0f28f3ee21a8cb8a4c762252fc004f806e7b4e19ed2f7352ee974e6470ba02b104f84747954e1a95fffc73633fddb1343ca109a605f299fc7373d6968cfc25aa65e7d4b79308173f480aa9ae6cf7eb6ac25c223184f155be7198f7da66fbc1c8722"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xbc, 0x30, 0x48b, 0x1, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x80000001, 0x0, 0x9, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @multicast2, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000300), &(0x7f0000000280)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c20000000000fc00000008004500001c0000060000009078ac1e0001e0000001167c9078d2000001092b508d05feb7"], 0x0) ioctl$CDROMRESUME(r5, 0x324) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x4, 0x7, 0x5}}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m3.210666875s ago: executing program 0 (id=302): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x8001, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x7, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x4, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0x367, 0x6, 0x8, 0x63, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x6, 0x20000005, 0x3, 0xd7, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x3, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x7, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x7, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x2086, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x10, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) 47.871346264s ago: executing program 32 (id=302): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x8001, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x7, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x4, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0x367, 0x6, 0x8, 0x63, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x6, 0x20000005, 0x3, 0xd7, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x3, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x7, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x7, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x2086, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x10, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) 11.880674471s ago: executing program 4 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x82) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x2c, r2, 0xd76df63585d8493b, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0xc010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x2d, 0x9, 0x200004, 0x1, 0xf, 0xb313, 0x2, 0x0, 0x0, 0x100, 0x3}}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="60d6b068fc45"}) open_tree(r8, &(0x7f0000000280)='./file0/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0x6, {0x0, 0x0, 0x0, 0x6e, 0x80002, 0x5, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x80, 0x0, 0x2000, 0xb, 0x0, r6, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x402}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x8, 0x1002}, {0xb, 0x10002}, {0xb, 0x2}, {0x3, 0x3}, {0xd, 0x1}, {0xb}, {0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x4f223888}}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x8c, 0x0, 0x0, 0xca0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x21}, 0xfffffffffffffe5f}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0xd0009411, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) dup(r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="010328bd70e3ffffffff33"], 0x14}}, 0x0) 11.030667788s ago: executing program 4 (id=1028): r0 = socket$kcm(0x29, 0x5, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000000)=""/199, 0xc7}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/200, 0xc8}, {&(0x7f0000001340)=""/165, 0xa5}, {&(0x7f0000001400)=""/57, 0x39}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)}], 0x9, 0xdd70, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002540)={r0}) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000027c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002780)={&(0x7f00000025c0)={0x1b0, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_PAYLOAD={0x8d, 0xa, "c1de4bbc4c06475c0665ddcf652900cb967f94af37fe20f4b91511ade2c8b4268b4ee315d13ff8af3b02e282f8da6ea5648141f4d9cd5bba6e8ad2e85cc295133c26e77e8fe7e960ca081b96cf7ab35d541f900d4ef0ac162716f719160397d745d094c9e185b518e122495b2625518ac277dd9edd1e50b71e08c5253a7730f048054338389e4b029b"}, @NFQA_PAYLOAD={0x71, 0xa, "fae500247ac0e110307a111b7aa7cae24eb0ea1b4c419ac52dad5c295f1a9f74b59e09e60a537f2766f0456e0e4c38a1e635ebac67e97bd552379bbce1b0fb8927f54323d3d144c891ac56ebed210efb24e8fc0fb942595e4d20477a1b2292ca83ed7cdc28c2d2dcce0b4c128d"}, @NFQA_PAYLOAD={0x1b, 0xa, "e7dc37f19d4475bbfc2906414410158dbe7509dd1c1e23"}, @NFQA_PAYLOAD={0x7b, 0xa, "6e4494c5e01a16a35c40bde53974485d01499f83f23ab8487665550e02a4f3fb7c4e3dbdd323187717e87b0ebc1580006cabce2186d82c7754594accd800dfe95291b7452b3cb89da22518907b1dec082c7b49bc7379119f9a6be28612f8301d888678c0e4dcd1fdd77f60cd3e5849ff179dae0f222e73"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000002800), 0x200, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000002880)={0x5, "c53874b2e1cbb157b0a49aa1238af67412c54ea03f97cc5d34a679973c2f62a2", 0x4, 0xffff8001, 0x7f, 0x2, 0x5}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(r3, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002900)="de", 0x1}, {&(0x7f0000002940)="44ea1fb64fed5fab090721bbc426ae2f53a9833add5148c1fd88301d00823f3b3671babba85123f53577352a326db834de362f8d22dd481ab5776058c7e094ca116e6ab072b97b0d09c14af78b6e8c20897eba361a320201ab", 0x59}, {&(0x7f00000029c0)="677d2a5cad57b837c57243d213937a5f5e8eb271c0da9c4d647eec66d5820ac86c99b2378b", 0x25}, {&(0x7f0000002a00)="492a00ee5c3b3e842c9e0a17d4b180029228241db875fafec9e6ddfa50a2bca2ea1507bfcde1f69a5174bd50f81d89d7917b568dba613b53e1d07fe1fbe4413ad71c42e148f8aaddd95b284176aee8dcd65b", 0x52}, {&(0x7f0000002a80)="19a69d11fd1073d3c223c52f3432cc729720135ddccabeb6069e5cad450072234d9296987229e111549bc51bcf05696913a55269c7778eac7b85db9800e8e8d2ff4a448e956b76c100ff6f28fe5f43e5e68540d743db9d", 0x57}, {&(0x7f0000002b00)="35d7cae4ed7823f31153f4409502e982411b7a4eb460ad8e4834fed1310f862967da79fac01e1f4f096c944ba83ead5a57da089d796fef1497068293ceb9ed149d7039baa1d35c33fe529947fbe82630aa500972e8e324bfc79b8fb22a4f74e7700f5eaa005a080a5f0a05cb816b2dfb4ddb93070d70492d3f2a059e7a9d76ba4d1d08010feb482bb20ecb865ceb63ff0fe98aab741540d9fb37bda17cb87b450f78306542f9e5a7b90008cf0fb95da9418640b58414c5d53e", 0xb9}], 0x6, &(0x7f0000002c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf0}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa148}}], 0x30}}, {{&(0x7f0000002c80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000002cc0)="b60d03b5c8dc5f3c8953fa1bc573645d1d8e4c968774f138b3886ab58cd71223467addf71f70cf", 0x27}, {&(0x7f0000002d00)="bba5e496d438937628b111bc0da0a4ea59f6060fe3fc2c6e06af6c43ec58151b2e3d7954392504c73fdb132f1bc49f51c2e737a822c99b02a00c151945bec93f73a8bdef942ff0180887656c0bcd253118b452889823285f447c86a7305ac398b9255a2a8a6cb3c2a50095cd962554ff26631680dd94b38e426e95bc55624bd155ad80bf60da14a366a88940c13d473787b0638ed6f080f61f094695eaf42de81acd8e39791ec27e376ad3570a1fa3c03a5f3c6aaa5e6df90ec49f246859872ed6207e37d016f7b0e8147128084ab423ad1bcd6de2762e0071ec7155760ab1d35cc0de99d3ae70afb7e18f2404a1b2373bd6f220d79eb53734eaa78485650b76ac2fe4c00adf96dd9bf155fb3a8e823a7e17532a97465ce109bf4983e6efb1f9861e12d6144c664014581934ba7a0490a10ad5793d22f70411846aa99a92859f513110360866af8287e0e458f5e24721f9a97f87d381a7130b1adb5aaca0d00fb459cfccd74d84d6ed8db1857861694ac22000d4244a8ad312ae6d2a193f64015a7d3e1e1d5604a2a3d974174f231b39e6f21eba7a02ad71d664fb2388bc256d6732006d01bed4a5b5e6a4d6471444a2d08bdcede37a79cb899775d9228b8bd0bc883acf72b8ceb7274defa5c3e3f6fde9233d8739df013fdb9a223cae65351723bc055718578b6fda6d242ef7f3c32c186b390fff15a8565671e197f3135b10e17d5d32d65cb27a0d737506bb117e890acff83bead9d10ffd4f3c4eb741b2c67671a43c9e367cf6718eb77239d50a370002aedffeca5a69f5dd34797044ceffac677e3ad65ab0449a98f85be14d1bf054dd0923594ee08d79a751b42429c203c6dd3f54c067f8d0c51dd6e8fa508b2a06bb69b2c903bb8a855ad09ddd8e7d97873c7539f92912caae26de88eeb89126e9912561e8b959a5afb8f3bad619638fe2a3e2b3e96a1bb6f93cd006f1aded3d21babb9990291e19223c8ed4300bacfec72bb56759973c1fcb1f640bff778bb134d208176425471025bc0a44080fb54bab6ae29e614e8367e865dbe379f69dbdc8874bdc48994daa7820020f2225dbddfaa7a5b22dc294dfc02ac9ebb696d4956f1de707914456c13fad98de5f433f54aa8906c951e18ab9236e7745996c6560e243df87b2cd36ede3e2e42d7ceaa966f8df9c818e6e7a124a8401391a237b0ad69e8756d88c92e52f421c7dc0ecc3c820389e1302f02c7c7ecea38c42a763411a1907d69b1d4802900ea1bdd8ac4a114919917dff2f44d0e39e8f8b18e21e1fa25db5b25bf02e234f19cf791b7458e258fac82dc7973be1859311e99c1e3a5c38622bb634917e26d1d4967da7c2bda297f08792e614ff0ca6d3c2073699556f1fc7ffdab2e46b4fcd38497e4b6379e52e73f1266e68c7eaea9ad3596824499c3eca245ca10fbf59cce389639f9f6305f0c8f44c9b1d3f03911df74a2367c7ac68d694892da78d1d763503eb774267901daaed59c060fb7d0e2e525bc155402978e7103fa85221665446ab26aace83881de79bf8de3d3d105a0810db203f17c2d232ef9b9737c4d0832c1bf54c75335d8733d15eb28b069f59a449d88f3f76ce97197488edd4ff29cbba1d5bcdf56edab3be55a60c1814ba904780db93e2e44b14f7f88f48599939ad181800cfe7e2cb8620988c0d0c35c8bc4874b0c73765acc0611d227ca824b488d64736135f21003a78b7ec1d2d624344a8bd91cd32edc35d00a35196a29f85667771a095b431ddab9401f803c4af1a75acc13737dc89637754d4d9dfc70d77a2de54aa72cbb32b3f207d0ec7bcc6b9959de97b118ddc85bfac628475b937613f20f22755d0658fd81d3dee2069c6593cdb41026302f39c6325c1517f0771213918735b6b77a1ec935b86728d2bba09cb2f29251c478c4b1068c3e3922ce8b6315d173300fc1c116a77e51c5d2c1784fa4c18d28c210ba37a6f3b63a3084c464cf182a91bcf9420579ee2c56a778d23984200b6c73255501d934508744305f79c7475fcc53d49dd2ab07987fdc26be4beae5132234bf1b86a0e7670189ff2640bd9c6359d8b0085e55f752012a824a3832c6389dd76a13b1a414f5209662ff252e665963e184436dcef7ea281db728224f6038a82b4d3d43b61465de931e8ff334425ddac8fbfe15d3f829c711aa8930ab4c8f1c8ad27ec8e6bd6b19f45e3978e2c1a903ecf307475473f499975c5dd35022728c1ab3f8457d7f7f0d38bb99492865a8d65dce7220f554c30ba46f25cbb0d72db7fb413dfb6b8b727824d8586ed5593c9c4804c7d1404b45e01d22f7ad328a73a9ac7a985e8ff0012c4eb4a8ebafd389014f3b2294d67c9fbc49e855b749f4d44fe5cf80c0868dd8b178bdde1694369aa854abb7337b98b2445b15460ffac50953cddff1b0f194c11bfc292ef10daa49ea857a978eb3c6c29fc1f3f4b0954b255751359979f59e862f412d2f05ea088307e4c5054fa6fe85b6a1e20c03ad2c1f8782263582dd57ec7fc1a15209b3cf6d37164805af4d3ee546a1efaa447a7f5ed15113c80437b62fe4496cf316a51eadb50e9ae62654557f4df0289273f4cbee8c32b928d741998d6eb38fb2c55a6a2bcddf389eb1859d0fbb482a52e4153be9169ef405f76e32f2bf7c8be953a10b7e5a633e053ff33c77fe448071b23d6d0a557a0050c2a76882a1838336f9ac650fd0b005781a326ed217c8b448769fc009b920790154e0fb9480335c0bf74e7fab8bba0488c678fda6bb7d295a911936986f21296cbdbfb9c1e502e6785be17e0509259ef6a93f436aa3ed6468d3b29ac30bfb4fa23e826a00f3149658b3c8cfdce250934b135811e52d982366a335e574f63d49c6ee740785c9f7015bd34afcf8635c2ff8e09a75d7c8967ffd3ceec6f1a1e621dea686b4406f35c83057e0ddd9278159721dfb89b75a7693a525ecddbc852f224c8a4b497615b0ef4dc0da5e2fc0007616f7df2bc1ab15ebb1f2258312570b0c7c44c5fb6b92d9d81d97267316a2129d19e9ff87fa045a05bc84903017f92ce206ebed6e567c5c7e095473d670e7487147b5369c022a0dd166971c1ee11a94b84ae599a16c0ad351fd60dc48966787a2a9f6a9a3f738ff6917ccce6c3796dcf7ffe451fb75cb83c5882fea45d2d063f8faacf905a9ef07fa83bad66517a183bded7699406fb958864018a73b9c02471dd488bb12264aeb7a4da2a89d0fc2a1d163c19130d36deb664a0ae9c09dc9a1e47d4277364be0ef3d1156a85440b6435dd0fa856b91c3e1c560fad738b1771c8db0827d594402632a88c5a306353a6d2ad377bc71a9087795998f3e6fd5a14a2461f388c10027f7cce2eaecf9d5b1e64608f44fbb9b834c67e565b182ca28af00bbc973ab321d82742c9816754467c5da9141901f6c43714d1c61a34de5268403085b316cbc4694fef1fe206252a3906158994ec40ac5a9b096b10137ecc0532369d072996cb435363612acb56f356b9d9a08399c6363b4d8bcc8c83cc69ad4d227f320d9e9ba5bf577c59cf49b4ce0c4cba2158ba72d624ef4301fd645d7a70bd81fd56b68386da0fcefd8a0f4bc8b4872c5745f9269a6f7719c225428c9c73aa7dccf37ec408745f75331723fbef30ea22cfc491b5ec75788f2c4ad6d764539f7103df00f7f285a9923859a34bcc6cecc42ec7e5c68a8cbee51858fe885cda83e2b89a1af412bee48df64a35612eb1112e5fb0e9b073953903de7e55d31d1ef26a36a278432034994d43ca324b05a7db7328dc41a77e5c2dc0d75efacd5b147f89cdb4769e2e71673093f5fc30448d09d53a4b7726d25d2bfdc4c40226329b75927c5106f10a15ba2cc44139ef7ccdf683fdbee3c368c42cd6c85b36771c27577899023a0bd79715d4cf8d035e38cdbbe0561774646285559fb9c0debd3be387a023e17a5a50ec8d6005f00f0da8ff1e161c141763b8a6b11d9286f188c6f253f2c796b8881c2ceb4300859faf5b1c72f09d8350370061f65e1a9045293b7edbb9b32962813495b126f67ec4ef13432a08060ada968056863406f11ac7bda9b47775512c947e2f66e86ee95429a672179cf6c6d1f8aa765e9229ff27d07f758539a2c46ef7a344aaa388228aba08fb2d9ac1f0beb660764447c0cee2a413e1af0249bd1d68da26e888f13ab1a09f084bfb50e744fe17880a5b16915011d38bad41614b4ef7a2a18cd9cc6220218a932aba8e36093bb8896b1644f0e3c3e087898ebeb1dfbbebaa8ead3e1ca1b2d5c63c707a90c77220a85d3008aee06c9f69536ff621dbddb351a537a5dfeb18c4506c1c8c638dd5f659589d7483bc1440df9c2640b3df5ab71c07dbe8e8794741a093d78c8dcdf4d5a7f977c7ccef4cfc7e9ba4fd3c1ef5f658dd502e644513368738fc126d9c39a524d8b2235adb3f5fd0c5285fbc8e60708f2484bf163de27b45d50bbd6e77c603f548290eb176f19d51f0e390758ada6c0aec92aa4cfb1601699855fd33795b6d1cd4d7ed5ffaef0da86d3179c1e8b13c0a097ca1641aae10ffa5deca2e83a7f4980b01e0f0c30e7a22eb04966adb57bcfb1500a54cf27ec2e4ba0cf24bfbc18cdca46a5822353e3f7cfd615d067a296f51d7afe0773be96abcfbb26a00585d17196b650c38eafdc755500925f02ef6e488d8f02505de24faa93e8dbb6e47ae3bde4f6afca8061eb33ae3e96d935598ebb0861ddfad7339e136629ae42376481fe3f2cf371f60966e98192cdac799a48beb7cc805cb2a281ab85ef1bb71a0817b4bf897110c2180f6bd275cde8dc8ec263385dda23367833f7ee7e13d7620460621acb70bb09e04d5cf379ca276f794f2ee3948afad60d20d0f428e66e0ac8b3b63690623f0763795dc234b7f60b5aef01e42ca55b24e0d3238b1733c53586808c33f0f6ebb2bd758c5771a2ff6c202d65b817aeb35196a8191bfe1ca676386ce1a8e3f00cd1c72f4471d5cd061439e05377f2d8de2dc3e3a6d17be511cbddaa0b399987ec31b4eca19bf446f8768338300a15ca0bed889051251a0f16aef457eeee3ef827516b1b0a7eaa0d80965ea4fc8b81bcc1cc990b1ddf5711f77cf0d2256c6ca0dc27153c16bc5214bc4df62f2ad9130ecd9d2365dab0993bca139ba4de91b8577e637ca926d285513974f54d320839e77fc25e6d163dab4c06b63be467ed1f9615e47a863dca427951dd1d7620efd95a085f7e0a468a6c4296f6acd3beb6600149ef95d50a9b43fca85d6a2e419b3976a6803acbfced936b91b9a5bd2c9d1652530f2adddf7611030cab4c9f72d47fe26ac9ea71d2dd03489a7bcc6f71e848f2b6126b6bc727550565441d091baac398bfce31edc8d9c1b8f4abcb1bada0e6d8c87d1eae6a79f918039cdf9e5aa303afc98722b4e70f88973f32e5dcb8f02824c64cc53acf117e70bcdc2ab4194ef893b75f4d9966ab4ddecd4caf2c6f433103d025a090dae3f527799a03f5ff906a74249acdb0fbc1e3021a421f77c5e139d69d6d6998cadb52f84ea971e4226da418a550b3273d0fbe3c35a458b32228a7f467d1bd820b44c484815044e6fcc9bb0a7d49729dec576894a0c65f1bb55dd34b4001b6679bd94808bc313f6b8b7b46ccb3fc71415af9b6fb16b0651eeddb0c5a48ce8fa6ae62bb7c48107c08e57a773988cb4312bc4d99e875011bbeba4e453afc4b0747754ca73aa803bafb43166333c8c3334c6fe00dc3103e07d33fac0d029023379fa00d91b7c45f8acd0fca46320da950422971bdbe5d8a1d5bc24ba9ff62870caf0c58a28", 0x1000}, {&(0x7f0000003d00)="05b84c09edb766ce4ee56cd3e14f6f5490c6cfd3ef5658e7e921b4c6853e2f72cf294621c0f31a409476246d906e357441f3f891846a5d9876f5ce018db78ad7a5f71dbab35c4260dcacde4ea699732f160d26155cb7a107bbd95e71d4ec29459453ea3d579c100eccb616256bbf172326a53597a97318275995a4e6c14d2a6e589f4c85ca0e8737781182515022c57d61dfd43c2b52030959813d04ae0701bfda71727b27c2c972b95d459beb2327404d3e5f5108d2e034170dcfec6ebb592773cae83a84d8a6a555dc1e19f4e2154d779a1b317bd236e984dd7a3ecb6107a5c496e7912b382caff247d436923717a0cb76a162c9", 0xf5}, {&(0x7f0000003e00)="72fb83a84ba699a299020422e04c95d08df8c1f914cf3dfced233ddc354fde1c8bc05abc2a36903fe54a73095feb3a76c476bed056cffae02daa37b3ae48c504273c15b5eeca3c2e59eb23338e1cdd89e6e7ed587580e6e7a235faa0071829950ccec3c559745b1f71aafcb050d1ac7a9e268e3b5da8b61b0c8986fb7b59f6191b7bf5689d056056", 0x88}, {&(0x7f0000003ec0)="ddd9f21ff43715b3d408656f21eab6b2eaefa0e520c426c7b2d63bbae4c087b915c7815d357d297c21c8084c8cf2fcfcf1c2a5dda1936eaa8de3012775af1ada10f9dc6a0a13dd8459377a204ae2c8a71def85f30d1e12719fa4b7f60c062f4f87fdba994aff3378eaef37685894a146ad36b7202719d9728bfb143fd72f231d15fb564944b337d522309cb7558d3ee757d2a5fc0947e2c235a4940becb11e8a7119c18312e289c136ed2d", 0xab}], 0x5}}], 0x2, 0x80) connect$bt_l2cap(r1, &(0x7f0000004080)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000004340)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004300)={&(0x7f0000004100)={0x1e0, 0x3d, 0x401, 0x70bd26, 0x25dfdbff, {0xd}, [@generic="86d6d379a1497bb22f47368a96e90517418c923d1419087066463100c1cca2746e4b496bd0f1e69c16cd6889190fdc9b510df14ee1dfdd3a548dd2b3a958a994154cfa244e1ae5b183831204c39fb8c446a661e978ea2f4e722b76bd6c1fa164c1c26a3457ebda6c7ada01c4f2cc3d3726f1f0f742ca061d6e6fff2ada845f745eaf22558c158f7425e7dc8b6152832444dd89c32a1f76786b2f784a51e666fbb618b9e28287cc5005434faa07f05dc78d98f4d3dba45b71367b5f1011fb45fbe211643c931d528d182fe61151c5aa67a39734690614f0a0860fc0871a9f3ca586e515a8630fdccb74", @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@empty}, @generic="411f7d0c5a2344e2756e48307c065990b499c2c8a5f6d7511202d38d6daf404c25c0717dd75d8cc17379df4913a8777e6fc60d8f8f68cee2a769dc7aed96ede879e3273f9d18f9f9c40c5a6a66d8b6ad84ecce254e12311bad51a66ec5c28a75a2063cd9538dccac1582d42e9d193d1310968192e6533afd7c4ef5dea5f033fc3737421c495eff2f3d7de93fc7f8e0134ca0bd482eec585fd79804a7ef9f6e0252e69f3ed6dc5bbefed4a6f3c79367f12386686457059f6e0ec5e8b1d6544dc0dd9aaa3b6947b7c4004d677deb08a7ed9c862aea6ed1f6f7"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000004380)={r6}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000043c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$dvb_frontend(&(0x7f0000004400), 0x8001, 0x4000) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f00000045c0)={0x3a, &(0x7f0000004440)=[{0x30, '\x00', @buffer={"4e1df8da9d96a10e807a2cb09286144b51ac15aec74b48107b0f0ed4e804944f", 0x20}, 0x80000000}, {0xd, '\x00', @buffer={"9bdc9f035f6e14d2632306549f84684c3fdc7bbbbd9c8550471eb89a6cf17d1f", 0x20}, 0x59a4}, {0x42, '\x00', @data=0x691e, 0x8}, {0x27, '\x00', @data=0x9, 0x3dc0}, {0x36, '\x00', @data=0x8}]}) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f0000004600)={""/4, 0x4}) r8 = syz_open_dev$vivid(&(0x7f0000004640), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000004680)={0xfffffb9c, 0xa, 0x8, "fd738826d19f9134e0c339cac487a517cbcc58d7ff7717dc4e08f0d73d3e45d4", 0x4c47504a}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000046c0)={'batadv_slave_0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r9, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000004780)={0xff, @empty, 0x4e21, 0x0, 'wrr\x00', 0x2e, 0x6, 0xd}, 0x2c) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0485661, &(0x7f00000047c0)={0x0, 0x2}) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000004840), 0xc81, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r11, 0x40046104, &(0x7f0000004880)) r12 = openat$incfs(0xffffffffffffff9c, &(0x7f0000004a40)='.pending_reads\x00', 0x80000, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004d00)={0x11, 0x0, &(0x7f00000048c0), &(0x7f0000004900)='syzkaller\x00', 0x7, 0xc2, &(0x7f0000004940)=""/194, 0x40f00, 0x10, '\x00', r9, 0x0, r12, 0x8, &(0x7f0000004a80)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[r10, r10, r10, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x708}, 0x94) 11.030009716s ago: executing program 4 (id=1029): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/206, 0xce}], 0x1}, 0x12002) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="4700000001003f", 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(0x0) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dffbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x24000010) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r8, &(0x7f0000002b40)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000002a00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/45, 0x2d}], 0x2, &(0x7f0000002a40)=""/197, 0xc5}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 10.1307789s ago: executing program 4 (id=1036): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c0000000000050009000100000008000a00", @ANYRES32=r2, @ANYBLOB="ff41bd91c8655e4011235091"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010700000000000000001600000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf2507000000", @ANYRES32=r12, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)={0x583240, 0x91, 0x10}, 0x18) mkdirat(r13, &(0x7f00000002c0)='./file0\x00', 0x30) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0xc) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 10.058315663s ago: executing program 4 (id=1039): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x2, 0x101001) 9.779893432s ago: executing program 4 (id=1048): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x600042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000036402, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="0380c2000000ffffffffffff0800470000800000000000019000ac1e8001ac1414aa441c7491e0000001fffffffcac1414380000000aac141430fffffbb3892b5cac1e0101ac14142cac1414bb7f0000017f000001e0000000007f00000101050190781200183f25000000fffe000000210000ffffffffb5252b90cebce599874f2723ec467444d7bc6e1d877f208382ac4fea06f325318286fbd8705827a02394f97b1283d8d28d730800bacde898f2eea23ba8d932b173b028eeb4383cd10480e3058cdeaa2d009d00"/212], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_LABELS_MASK={0x18, 0x17, [0x192, 0x2, 0x1, 0x4, 0xb9]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3962}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x2000004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) getsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) ppoll(&(0x7f0000000080)=[{r8, 0x20}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r9 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x3554000) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000100)={0x5c, "632072a874119494ec94eca16d167600a40a60b9dd5453dfacbb6f8e3864885be1994cadbda57ae84c965c6189bb1dc3b71ceaf44f2dfb3ede1690d4fda23d50d7a2d7b6e10b6c7ba3d934c427b3454f3c9e94016065279511ca6bab6fb6c64ff15dc03d93954a9ac608faac7ac0b4aa0ccaf3c40ce8c122bcb5caf83a69e796"}) ioctl$XFS_IOC_GETVERSION(r9, 0x80087601, &(0x7f00000000c0)) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x400}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 9.709923927s ago: executing program 33 (id=1048): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x600042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000036402, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="0380c2000000ffffffffffff0800470000800000000000019000ac1e8001ac1414aa441c7491e0000001fffffffcac1414380000000aac141430fffffbb3892b5cac1e0101ac14142cac1414bb7f0000017f000001e0000000007f00000101050190781200183f25000000fffe000000210000ffffffffb5252b90cebce599874f2723ec467444d7bc6e1d877f208382ac4fea06f325318286fbd8705827a02394f97b1283d8d28d730800bacde898f2eea23ba8d932b173b028eeb4383cd10480e3058cdeaa2d009d00"/212], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_LABELS_MASK={0x18, 0x17, [0x192, 0x2, 0x1, 0x4, 0xb9]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3962}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x2000004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) getsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) ppoll(&(0x7f0000000080)=[{r8, 0x20}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r9 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x3554000) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000100)={0x5c, "632072a874119494ec94eca16d167600a40a60b9dd5453dfacbb6f8e3864885be1994cadbda57ae84c965c6189bb1dc3b71ceaf44f2dfb3ede1690d4fda23d50d7a2d7b6e10b6c7ba3d934c427b3454f3c9e94016065279511ca6bab6fb6c64ff15dc03d93954a9ac608faac7ac0b4aa0ccaf3c40ce8c122bcb5caf83a69e796"}) ioctl$XFS_IOC_GETVERSION(r9, 0x80087601, &(0x7f00000000c0)) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x400}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 4.760880528s ago: executing program 2 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {}, {0x2, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xeb, 0xd2, 0x8}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x6, 0x2}, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 4.749786635s ago: executing program 5 (id=1050): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x41, 0x0, 0x60000000000000, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200202}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.607134981s ago: executing program 2 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x15}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a32000000002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a31"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x15}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a32000000002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a31"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) (async) 4.509509088s ago: executing program 2 (id=1105): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x0, 0x10, 0x48, {0x48, 0x23, "252c8c345bcea726f39fe96c927ea0fc0d320a269ce91c268a67b34de75318cbc5855531a36bc7b31d07bf6384ed8bc5003e5256530dc16ba688f9ca355cc1ced5242a0dde7c"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0xb, 0x16, "208325fe4c7abf7be440e64913ece9cd88d3b4b47307"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0xd}, &(0x7f0000000540)={0x40, 0xa0, 0x4}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "b1cdfa34b2a2140f9afc04ee1846287569ad50e0dae893bb305512ceb2e6a93769e18d1d4cb3bbc96463048ec3da64"}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b00fdd8744a3c7e451e8fd600000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = signalfd4(r2, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000100)='syzkaller\x00', 0x0, r2) 1.220823488s ago: executing program 2 (id=1128): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x70000, 0xf8, &(0x7f0000000180)=""/248}, {0xf000, 0xf0, &(0x7f0000000280)=""/240}, {0xb000, 0xb8, &(0x7f0000000380)=""/184}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000000) close(0x3) 515.108055ms ago: executing program 1 (id=1133): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) (async, rerun: 32) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={[{@memory_localevents}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (rerun: 64) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) (async) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000440)=0x4) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x6c, 0x7fffffff, 0x9, 0x0, 0x1, 0xac76, 0x2, 0x4, 0x3, 0x0, 0x200000000, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) (async) fcntl$addseals(r2, 0x409, 0xe) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x7fffffff, 0x800, 0x84, 0x0, 0x3, 0x81, 0x75b6, 0x100000001, 0x6, 0x6, 0xa, 0x2, 0x5, 0x80, 0xfffffffffffffe00], 0xe000, 0x4ec00}) (async) r5 = memfd_create(&(0x7f0000000380)='xts(aes)\x00', 0xa) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000003c0)={r5, 0x1, 0x4000, 0xffffffffffffb000}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async, rerun: 32) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fb1add96e95c4cee3df251747b4c22fa290df0c7cd1b6eab480fa42a29053cae3a2da924b6ad658823ad74d39e06000e302491a36c399bd3cc138ead8c6717998275c984a3b42ee462870395df76ecf3e9a3cc39872a93a3af11e326db88074e419b00d30796422dc1ad68238ed1e8b25a7b8fc39d217613279a865527c29d8f36", 0x81}], 0x1, 0x0, 0x0, 0x20000800}], 0x1, 0x4000800) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r8, &(0x7f0000000040)=""/169, 0xa9) recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0xab, 0x9) (rerun: 64) 460.776156ms ago: executing program 1 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) close(0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r5 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) shutdown(r1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000002c0)={{0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'dh\x00', 0x20, 0x9, 0x2}, {@remote, 0x4e20, 0x10000, 0x7, 0x0, 0x4}}, 0x44) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRESDEC=r9, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRESOCT=r10], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x4000800) 410.003879ms ago: executing program 1 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'veth1_to_batadv\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x96, 0x3ff}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000000)={{@host, 0x6}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000000)={{@host, 0x6}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) socket(0x1e, 0x0, 0x5) (async) socket(0x1e, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000180a05000000000000000000020066840900010073797a30000000000900220073797a31000000001400000011"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000180a05000000000000000000020066840900010073797a30000000000900220073797a31000000001400000011"], 0x54}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) 358.924208ms ago: executing program 2 (id=1138): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x120c42) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54a6beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000300)=[0xe2a, 0x9541]) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) (async) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9ba}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x1, {0x0, 0x1, 0x1}}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x1, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(r1) (async) r8 = dup(r1) read$FUSE(r8, &(0x7f0000003c40)={0x2020}, 0xffffff0a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r11, 0x80045300, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x8, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7a}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x5c, &(0x7f0000000280)=""/92, 0x40f00, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x2, 0x6, 0x6}, 0x10, 0x2824e, r8, 0x6, &(0x7f00000004c0)=[r8, r8, r8, r9, r8, r10, r8, r8], &(0x7f0000000500)=[{0x5, 0x2, 0x6, 0xb}, {0x3, 0x2, 0x6, 0x6}, {0x3, 0x2, 0x4, 0x2}, {0x4, 0x5, 0xb, 0x1}, {0x3, 0x2, 0xd, 0xb}, {0x5, 0x4, 0x5, 0xa}], 0x10, 0xc0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x480480, 0x40, 0x2}, 0x18) (async) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x480480, 0x40, 0x2}, 0x18) splice(r1, &(0x7f00000000c0)=0x1, r12, &(0x7f0000000180)=0x5, 0x2, 0x8) 290.797263ms ago: executing program 3 (id=1140): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@netfilter={0xa, 0x0, 0xff}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000020c0), 0x42000, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x40080) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000002200)={0xfffffffffffffffb, 0xa4, 0x2, 0xa680, 0x3, 0x0, [{0x100000000, 0x10000, 0x1, '\x00', 0x4}, {0x4ec5b591, 0x6, 0xe1b, '\x00', 0x1400}, {0x2000000000000000, 0x9, 0xc, '\x00', 0x160e}]}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000002300)={0x80}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0xa8, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40068810}, 0xc000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002580)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002600)={'gre0\x00', &(0x7f00000025c0)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x80, 0x3, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0x3, 0x2b, 0x0, @rand_addr=0x64010101, @remote, {[@end]}}}}}) sendmsg$nl_route(r3, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)=@getnexthop={0x38, 0x6a, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044855}, 0xc814) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000002700)={0x3, 0x7, "bc431648ea2662"}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000002800)={&(0x7f0000002740), 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x200000c1) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000002840)=0x4, 0x4) syz_open_procfs$namespace(r2, &(0x7f0000002880)='ns/uts\x00') r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002900), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x28, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x840) close(r5) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000002bc0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x3c, r9, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000002cc0)=@req={0xe, 0x6, 0x0, 0x6000}, 0x10) connect$inet6(r3, &(0x7f0000002d00)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xced2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 290.600097ms ago: executing program 3 (id=1141): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x3a, 0x5, 0x6a}, 0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x707, 0x80, 0x2, 0x5, {{0x21, 0x4, 0x2, 0x21, 0x84, 0x63, 0x0, 0x5, 0x2f, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0x6c, [@empty, @multicast2]}, @rr={0x7, 0x27, 0xf8, [@multicast1, @rand_addr=0x64010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @broadcast, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0xffffffff}, {@empty}]}, @generic={0x0, 0x2}, @rr={0x7, 0xb, 0xd3, [@multicast2, @loopback]}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x4, [0x1, 0x4]}]}}}}}) sendto$packet(r0, 0x0, 0x0, 0x4040, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @random="42b10e6e6fdb"}, 0x14) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) (async) r4 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r4, 0xffffffffffffff73, 0x2) 290.393225ms ago: executing program 3 (id=1142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r3, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 240.82838ms ago: executing program 3 (id=1143): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0xd6400, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d76697274696f2c61666964043078303030303030303030303030343837352c6d73697a25ed038c0d5dfcb8697861636c2c6c6f6f736500000000000000000000000097c027d05de049c4feeca2e1c30b436dc14cd3d2ac7360c396b3fa67cc196adfb73dc2d285207018c359956cb98c364df33637abe9dc60800c714004c51e61073a5480b1ea5a01729a3eaff3a538c8d77cb56289321a2706fa234611dd2280698e51db1b5806aea02d69ad912c2c"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 233.73874ms ago: executing program 2 (id=1144): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000180)={@multicast2, @local, 0xffffffffffffffff, "a3e7f1fa123e2f4cc8bb50bc374fb38f19a4fd334fd401785c811301a78a3d9f", 0x4, 0x10000, 0x5, 0x613e}, 0x3c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) write(0xffffffffffffffff, &(0x7f0000000040)="3a0300001900255107", 0x9) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r8, &(0x7f0000001ac0)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001640)="fd68ed4e843de688dc66209aec1c97272318289b5e995597b3b6923233983629618fc859fd0bf030660071d03bfe8ba25d", 0x31}, {&(0x7f0000001680)="5e0df3075b6eed8dee13ad64ec44012878ef1efe4949df55449b42", 0x1b}, {&(0x7f00000016c0)="feec9dc15e1954edaf5bb4b5a71e112fbb3cc9fdde2a4b6c6427928123fd199a2d4307bfcd96327eec6249376b268372324820d2ca1eee2b4b015469abf829d24a941c2ccb220a901d8f7305e49fdfa5b8eef15628879829069d00c34aa834eb972b0262b0708f97894200120921e1cec766858dc987e2f7adf5aca501a1cd88efe3a90851479d28a68e60a2eb2c3eb6ecd985c5e169f29b991629dfba4b7736c728516efc71aec9002ee876f8442913101eb4c2babb4e7bb06ff3a247e73fe2a104beecef34b269ca2bcf163f7f96c24751e07e3649005ffe20742d8e93876bcb95951e", 0xe4}, {&(0x7f0000001a40)="b3122f39c4978ec811d3ba393c60d015ffa8f432ec18192b834cb8e03a8ff4b6b4cd7969", 0x24}], 0x4}, 0x20000050) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={r9, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r9, 0xcb}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000001a00)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)="e445f881dd44decd21e07dd6a1acc3ef182f9baf738be968557ce83afa5c4fc547d6c511eb02d4e19beeef7f6675badbf0ab5361a63fdac14f43be0d0c4fc9a2ed5402cdf2087ee31d5e029acb78a3eea6ec7d687fbd74f8fdc8654f700f2a182788de", 0x63}, {&(0x7f0000000400)="3e333294e3896a8e7682169600fa61530fef01241d5305ccf1d007c916a5c00b1a00855f6215b1802b206333ba1aad0971baed5ee94716bdb19fc39fc25bbba8eaf7c4da5ae87fe6008d83211301eb3e281edb438d1d94f47ac520e6ca6322a610c10fef08e1e8c5e51784d90e5c35259ef3bb", 0x73}, {&(0x7f0000000480)="1b1e8f8116540915d2ba56f669b2e38373f983c89e9fec48c7ea9c8e7dc6513892480bedf27a623a04b03d0ed6c98eb4b476d2cce0d4d01f4f0bfc8432562743766b0504d7258706e08ecde870713fd83934fea17d7f896258d612fa5c908af10b7f32a6518d60c8db6da1e482a9794c5e6538", 0x73}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="053b8e9872142dd2dd2a27ee8a3173c4a03cc1fb036afa6152ae9fd809b479fce8ae539756f3cdd874deac9b2921df5930bd517bbd509b09a9e8c63ec8bce7913d51ac9ab2f5ecb2cc595b4e555c304ed553105f66c9549cfa5cf33be45c32bdd09364b242dc0273b7c12b90fad236fd7febeee8fd86df9a61856ea40fc0648fbfeebc50a255ff4ed42d64bee745b3544f2d65c827052bc2e511b95a05", 0x9d}], 0x5, &(0x7f0000001840)=[{0x88, 0x110, 0x10000, "23d6ce81b0bfd8dd4c82db47c3d0907f5acd07572345330d621c0ff28e147641f9bf72c52113e3542fe52463f6a2c9e4e62be60dbaf73026210a03f2265a0541d9d4888cc8d66901b4f0bfe8d6cac81a04e3d7aff36676c0a8cc1b9ec54a04d5787ffa3429e05268c3d1dbec31d799df6cc1"}, {0x90, 0x107, 0xa34, "9103eff0b61b95a8262af2e4f935e089d592c346d348c9424970851c6cbb98b377c5afde3a91a89b15dc91d2f77c383f0d4c8f630f3ac58838ec8fa7639f5642134254d389fb1b3925d625be7028654e3ba2bad1ea39c2e1e85a1d39020ae2fb6035cad49a1d7a460a46e39cae8285a44d31ad76bf4f2132268af1e0f749a1"}, {0xa8, 0x29, 0x1, "396a029a0934de88e37e06bd957fad475649d31a0acd141bd932b9d6b4f9e8c29bb8fb2ebc7ac2155740513de65b2e3977788f4a89bda67e0aeee1d98a579ec82abd3e42c104dccc27e4f2bddd961ee19d3bcc3d25a867e106d2019c7a9a66467a33157c8586faa43f1c774c99fe5b2241564969f74adfb6aed118ce3f29383840588034e86f4bc8432a3624329686230b08f328f1a99a35"}], 0x1c0}, 0x8841) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x38}}, 0x0) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r11, 0x40045612, &(0x7f0000000040)=0x5eb9) 233.546895ms ago: executing program 3 (id=1145): signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x80]}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef0800", @ANYRES32=r0, @ANYBLOB='\b'], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xcb, 0x2ca7}) (rerun: 32) 233.312762ms ago: executing program 3 (id=1146): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000380)={0xffffffffffffffff, 0x101, {0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff9, 0x0, 0x6, 0x6, 0xc, "84e80d93d1ad5f8216cac43d4bd2023f0a875b7f48c362723ce4272b377d128f6e209e4ccf96d7dc93be043c21f7bf4b05dd4290024d38aec6436f73d2c351b4", "dc3fc3fe9d1f0a206ec2f8d0c6547b888d51343d15edfe88974b07784c1139a208f0d88937dbc5134ef444c4fed1395253859c3af258dfcf83dc9ca360d1fd7d", "3e174d2449cd168bce09c04c2316e6918f0322ac802faf6852017ee513da5707", [0x7, 0x6]}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x40000021, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000c00)=ANY=[@ANYBLOB="aa4c52d0941f23e9aaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000009c90780100000006000000f4cb985d86dd6266b5efb88a2c87eda0810400b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8348970c4cc8c41345f8feb1a7a8e23041f8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) 99.607303ms ago: executing program 1 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_dev$video(&(0x7f0000000180), 0x10000, 0x200000) (async, rerun: 64) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000000580)=""/228, 0xe4}], 0x1) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r9, 0xc0285629, &(0x7f0000000380)={0x0, 0xffff, 0x7, '\x00', &(0x7f0000000340)=0x8}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r7, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x6, 0xba6, 0x3005, 0x0, 0x8, 0x7, 0x1}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000040)={0x57f, 0x1}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 829.562µs ago: executing program 1 (id=1148): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') 0s ago: executing program 1 (id=1149): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000200)={0x0, 0x1000, 0xd}}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @random="8a0a43cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) close(0x3) kernel console output (not intermixed with test programs): nterrupt [ 63.565364][ T1040] usb 7-1: config 1 interface 0 has no altsetting 0 [ 63.569335][ T1040] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.572403][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.575020][ T1040] usb 7-1: Manufacturer: ࠐ [ 63.576558][ T1040] usb 7-1: SerialNumber: Ы [ 63.580411][ T6385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.583004][ T6385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.586014][ T6385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.810524][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 63.814814][ T6411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.170'. [ 63.849765][ T6417] fuse: Bad value for 'fd' [ 63.982715][ T6437] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 63.985401][ T6437] netlink: 280 bytes leftover after parsing attributes in process `syz.0.178'. [ 64.036425][ T6450] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 64.041818][ T6452] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.046703][ T6452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.050944][ T6452] IPv6: NLM_F_CREATE should be set when creating new route [ 64.351955][ T5730] Bluetooth: hci3: command 0x0419 tx timeout [ 64.391290][ T6478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 64.391391][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.398794][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 64.461345][ T6483] warning: `syz.0.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.642121][ T1342] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 64.652983][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.658827][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.746696][ T60] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.750689][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.758688][ T60] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.764227][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.768981][ T60] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.773139][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.776627][ T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.779515][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.920157][ T6479] vhci_hcd: connection reset by peer [ 64.923422][ T86] vhci_hcd vhci_hcd.1: stop threads [ 64.925538][ T86] vhci_hcd vhci_hcd.1: release socket [ 64.927906][ T86] vhci_hcd vhci_hcd.1: disconnect device [ 64.931980][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.082104][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 65.087086][ T39] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 65.090736][ T39] usb 5-1: config 0 has no interface number 0 [ 65.095605][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 65.099673][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.103471][ T39] usb 5-1: Product: syz [ 65.105340][ T39] usb 5-1: Manufacturer: syz [ 65.107396][ T39] usb 5-1: SerialNumber: syz [ 65.111613][ T39] usb 5-1: config 0 descriptor?? [ 65.320279][ T39] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 65.322867][ T39] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 65.325952][ T39] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 65.328268][ T39] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 65.334312][ T39] usb 5-1: USB disconnect, device number 3 [ 65.400725][ T6499] loop2: detected capacity change from 0 to 7 [ 65.413882][ T6499] Dev loop2: unable to read RDB block 7 [ 65.415775][ T6499] loop2: unable to read partition table [ 65.422218][ T6499] loop2: partition table beyond EOD, truncated [ 65.429727][ T6499] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 65.540506][ T6507] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.765743][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 65.765754][ T40] audit: type=1400 audit(1778080475.305:409): avc: denied { setcheckreqprot } for pid=6520 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.766749][ T6521] SELinux: syz.3.204 (6521) set checkreqprot to 1. This is no longer supported. [ 65.776901][ T40] audit: type=1400 audit(1778080475.315:410): avc: denied { map } for pid=6520 comm="syz.3.204" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.776950][ T40] audit: type=1400 audit(1778080475.315:411): avc: denied { read write } for pid=6520 comm="syz.3.204" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.880043][ T6527] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 65.884999][ T40] audit: type=1400 audit(1778080475.415:412): avc: denied { load_policy } for pid=6526 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.893741][ T6527] SELinux: failed to load policy [ 65.896861][ T6539] __nla_validate_parse: 2 callbacks suppressed [ 65.896887][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 65.903279][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 65.930108][ T40] audit: type=1400 audit(1778080475.465:413): avc: denied { write } for pid=6542 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.931066][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.211'. [ 65.958619][ T6542] [U]  [ 66.017105][ T1040] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 66.026080][ T1040] usb 7-1: USB disconnect, device number 3 [ 66.200533][ T6561] tmpfs: User quota block hardlimit too large. [ 66.201985][ T40] audit: type=1400 audit(1778080475.735:414): avc: denied { mounton } for pid=6560 comm="syz.1.217" path="/50/file1/file0" dev="autofs" ino=13125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 66.202290][ T5883] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 66.213593][ T6561] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.216109][ T40] audit: type=1400 audit(1778080475.755:415): avc: denied { create } for pid=6562 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.219012][ T6563] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.222480][ T40] audit: type=1400 audit(1778080475.755:416): avc: denied { prog_load } for pid=6562 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.222501][ T40] audit: type=1400 audit(1778080475.755:417): avc: denied { write } for pid=6562 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.232192][ T40] audit: type=1400 audit(1778080475.765:418): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.259847][ T6565] xt_hashlimit: size too large, truncated to 1048576 [ 66.291803][ T6570] faux_driver vkms: [drm] Unknown color mode 32767; guessing buffer size. [ 66.337941][ T6573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 66.340254][ T6573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.343267][ T6573] vhci_hcd vhci_hcd.0: Device attached [ 66.353561][ T5883] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.357325][ T5883] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.360489][ T5883] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.363743][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.369528][ T6548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 66.376273][ T5883] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.457647][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.224'. [ 66.485615][ T6582] input: syz1 as /devices/virtual/input/input6 [ 66.577764][ T844] usb 8-1: USB disconnect, device number 7 [ 66.582111][ T1040] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 66.592011][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.732252][ T5829] usb 7-1: device descriptor read/64, error -71 [ 66.942656][ T5883] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 66.981960][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.072316][ T5883] usb 6-1: device descriptor read/64, error -71 [ 67.111950][ T5829] usb 7-1: device descriptor read/64, error -71 [ 67.223533][ T5829] usb usb7-port1: attempt power cycle [ 67.321952][ T5883] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 67.429731][ T6615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.235'. [ 67.452248][ T5883] usb 6-1: device descriptor read/64, error -71 [ 67.561959][ T5829] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.562861][ T5883] usb usb6-port1: attempt power cycle [ 67.592622][ T5829] usb 7-1: device descriptor read/8, error -71 [ 67.790258][ T6629] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.827141][ T6631] atomic_op ffff88805aaa1198 conn xmit_atomic 0000000000000000 [ 67.831985][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 67.852429][ T5829] usb 7-1: device descriptor read/8, error -71 [ 67.912209][ T5883] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 67.933045][ T5883] usb 6-1: device descriptor read/8, error -71 [ 67.962462][ T5829] usb usb7-port1: unable to enumerate USB device [ 67.967977][ T6641] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 67.980863][ T6641] bond1: entered promiscuous mode [ 67.983491][ T6641] bond1: entered allmulticast mode [ 67.985575][ T6641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.993741][ T6641] erspan1: entered allmulticast mode [ 67.997791][ T6641] bond1: (slave erspan1): making interface the new active one [ 68.000784][ T6641] erspan1: entered promiscuous mode [ 68.004769][ T6641] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 68.036813][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.0.245'. [ 68.196011][ T5883] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 68.223463][ T5883] usb 6-1: device descriptor read/8, error -71 [ 68.333830][ T5883] usb usb6-port1: unable to enumerate USB device [ 68.343212][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 68.347200][ T6662] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 68.896158][ T6673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.253'. [ 69.319274][ T6686] comedi comedi3: no devices specified [ 69.340532][ T6574] vhci_hcd: connection reset by peer [ 69.344645][ T60] vhci_hcd vhci_hcd.2: stop threads [ 69.348085][ T60] vhci_hcd vhci_hcd.2: release socket [ 69.352042][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 69.503300][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 69.515349][ T6696] hsr_slave_1 (unregistering): left promiscuous mode [ 69.792122][ T1342] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 69.815554][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 69.828557][ T6715] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 69.830262][ T6720] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 69.844702][ T6715] bond1: entered promiscuous mode [ 69.846797][ T6715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.938717][ T6720] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 70.142159][ T6754] bond1: option xmit_hash_policy: invalid value (6) [ 70.144727][ T6765] fuse: Bad value for 'group_id' [ 70.147680][ T6765] fuse: Bad value for 'group_id' [ 70.150533][ T6754] bond1 (unregistering): Released all slaves [ 70.291669][ T6783] input: syz1 as /devices/virtual/input/input9 [ 70.302779][ T6784] syzkaller1: entered promiscuous mode [ 70.304736][ T6784] syzkaller1: entered allmulticast mode [ 70.325853][ T6787] dlm: no locking on control device [ 70.411245][ T6799] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=6799 comm=syz.1.290 [ 70.498151][ T6810] kAFS: unable to lookup cell '(,cL' [ 70.654655][ T6815] bond0: entered promiscuous mode [ 70.656398][ T6815] bond_slave_0: entered promiscuous mode [ 70.658320][ T6815] bond_slave_1: entered promiscuous mode [ 70.663497][ T6815] batadv_slave_0: entered promiscuous mode [ 70.665704][ T6815] batadv_slave_0: left promiscuous mode [ 70.667968][ T6815] bond0: left promiscuous mode [ 70.669581][ T6815] bond_slave_0: left promiscuous mode [ 70.671423][ T6815] bond_slave_1: left promiscuous mode [ 71.040323][ T6820] syz.1.296 uses obsolete (PF_INET,SOCK_PACKET) [ 71.162728][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 71.162739][ T40] audit: type=1400 audit(1778080480.705:455): avc: denied { ioctl } for pid=6828 comm="syz.2.299" path="socket:[14212]" dev="sockfs" ino=14212 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.316472][ T40] audit: type=1400 audit(1778080480.855:456): avc: denied { ioctl } for pid=6830 comm="syz.1.300" path="socket:[15619]" dev="sockfs" ino=15619 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.354925][ T40] audit: type=1400 audit(1778080480.895:457): avc: denied { getopt } for pid=6832 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.355156][ T6833] bpf: Bad value for 'gid' [ 71.425253][ T40] audit: type=1400 audit(1778080480.965:458): avc: denied { setopt } for pid=6835 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.435294][ T6833] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 71.553249][ T40] audit: type=1400 audit(1778080481.085:459): avc: denied { create } for pid=6841 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.561177][ T40] audit: type=1400 audit(1778080481.095:460): avc: denied { write } for pid=6841 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.702178][ T1040] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 71.744835][ T6855] __nla_validate_parse: 5 callbacks suppressed [ 71.744845][ T6855] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.309'. [ 71.744874][ T6855] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.309'. [ 71.813249][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 71.834855][ T40] audit: type=1400 audit(1778080481.365:461): avc: denied { append } for pid=6858 comm="syz.3.310" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.835990][ T6859] loop6: detected capacity change from 0 to 2640 [ 71.848879][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.851533][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.864511][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.872872][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.876321][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.879792][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.883354][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.886476][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.889044][ T6859] ldm_validate_partition_table(): Disk read failed. [ 71.891153][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.894436][ T6859] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.897353][ T6859] Dev loop6: unable to read RDB block 0 [ 71.899794][ T6859] loop6: unable to read partition table [ 71.907918][ T6859] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 71.921015][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 72.026919][ T40] audit: type=1400 audit(1778080481.565:462): avc: denied { getopt } for pid=6876 comm="syz.3.317" lport=37717 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.043996][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'. [ 72.047832][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 72.125862][ T6889] netlink: 228 bytes leftover after parsing attributes in process `syz.3.321'. [ 72.136283][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.322'. [ 72.289953][ T6907] netlink: 596 bytes leftover after parsing attributes in process `syz.2.325'. [ 72.347252][ T40] audit: type=1400 audit(1778080481.885:463): avc: denied { create } for pid=6912 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 72.412549][ T40] audit: type=1400 audit(1778080481.955:464): avc: denied { bind } for pid=6916 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.393054][ T5730] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 75.397356][ T5730] Bluetooth: hci2: Injecting HCI hardware error event [ 75.400112][ T5730] Bluetooth: hci2: hardware error 0x00 [ 75.412733][ T6917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.458014][ T6954] FAT-fs (nbd1): unable to read boot sector [ 75.479846][ T6957] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:33792 [ 75.487087][ T6958] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 75.490131][ T6957] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 75.554114][ T6968] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.597057][ T6968] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 75.668786][ T6971] netlink: 'syz.1.343': attribute type 12 has an invalid length. [ 76.341291][ T6974] support for the xor transformation has been removed. [ 76.355828][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.357998][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.492041][ T6963] comedi comedi0: reset error (fatal) [ 76.830731][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 76.830744][ T40] audit: type=1400 audit(1778080486.365:475): avc: denied { getopt } for pid=6994 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.855093][ T40] audit: type=1326 audit(1778080486.395:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.2.350" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb32599cdd9 code=0x0 [ 77.076459][ T7002] bond0: entered allmulticast mode [ 77.078143][ T7002] bond_slave_0: entered allmulticast mode [ 77.080877][ T7002] bond_slave_1: entered allmulticast mode [ 77.372016][ T6117] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.472272][ T5730] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 77.531929][ T6117] usb 8-1: Using ep0 maxpacket: 32 [ 77.535458][ T6117] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.540553][ T6117] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.543544][ T6117] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.546127][ T6117] usb 8-1: Product: syz [ 77.547490][ T6117] usb 8-1: Manufacturer: syz [ 77.549082][ T6117] usb 8-1: SerialNumber: syz [ 77.554403][ T6117] usb 8-1: config 0 descriptor?? [ 77.556504][ T7006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.560625][ T6117] hub 8-1:0.0: bad descriptor, ignoring hub [ 77.562640][ T6117] hub 8-1:0.0: probe with driver hub failed with error -5 [ 77.719991][ T40] audit: type=1400 audit(1778080487.255:477): avc: denied { read } for pid=7007 comm="syz.2.355" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.728633][ T40] audit: type=1400 audit(1778080487.255:478): avc: denied { open } for pid=7007 comm="syz.2.355" path="/dev/usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.736436][ T40] audit: type=1400 audit(1778080487.255:479): avc: denied { write } for pid=7007 comm="syz.2.355" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.872062][ T6117] usb 8-1: USB disconnect, device number 8 [ 77.934943][ T7016] netlink: 'syz.2.357': attribute type 3 has an invalid length. [ 77.965282][ T7019] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 77.971480][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 77.979339][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 77.983536][ T7019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7019 comm=syz.2.358 [ 78.010479][ T40] audit: type=1400 audit(1778080487.545:480): avc: denied { listen } for pid=7020 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.305654][ T40] audit: type=1400 audit(1778080487.845:481): avc: denied { map } for pid=7034 comm="syz.2.363" path="socket:[16971]" dev="sockfs" ino=16971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.313328][ T40] audit: type=1400 audit(1778080487.845:482): avc: denied { read } for pid=7034 comm="syz.2.363" path="socket:[16971]" dev="sockfs" ino=16971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.458369][ T7052] program syz.2.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.507989][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 78.517572][ T7057] bond0: entered promiscuous mode [ 78.519234][ T7057] bond_slave_0: entered promiscuous mode [ 78.521164][ T7057] bond_slave_1: entered promiscuous mode [ 78.524785][ T7057] batadv_slave_0: entered promiscuous mode [ 78.526848][ T7057] batadv_slave_0: left promiscuous mode [ 78.529686][ T7057] bond0: left promiscuous mode [ 78.531296][ T7057] bond_slave_0: left promiscuous mode [ 78.533973][ T7057] bond_slave_1: left promiscuous mode [ 78.540617][ T7059] loop5: detected capacity change from 0 to 2640 [ 78.545968][ T6281] buffer_io_error: 6 callbacks suppressed [ 78.545977][ T6281] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.550836][ T6281] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.553901][ T6281] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.556687][ T6281] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.559478][ T6281] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.571055][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'. [ 78.822014][ T6117] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.971964][ T6117] usb 7-1: Using ep0 maxpacket: 16 [ 78.977253][ T6117] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 78.979955][ T6117] usb 7-1: config 0 has no interface number 0 [ 78.982156][ T6117] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.985618][ T6117] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 78.989961][ T6117] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 78.993344][ T6117] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 78.996243][ T6117] usb 7-1: Product: syz [ 78.997712][ T6117] usb 7-1: SerialNumber: syz [ 78.999431][ T40] audit: type=1400 audit(1778080488.535:483): avc: denied { map } for pid=7089 comm="syz.1.377" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.007278][ T40] audit: type=1400 audit(1778080488.535:484): avc: denied { audit_write } for pid=7089 comm="syz.1.377" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.010509][ T6117] usb 7-1: config 0 descriptor?? [ 79.019434][ T6117] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 79.029435][ T6117] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input10 [ 79.070726][ T7096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16682 sclass=netlink_route_socket pid=7096 comm=syz.1.380 [ 79.222682][ C2] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.225016][ T10] usb 7-1: USB disconnect, device number 8 [ 79.225055][ C2] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 79.238744][ T10] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 79.267645][ T7102] can0: slcan on ttyS3. [ 79.274726][ T5829] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 79.353243][ T7102] can0 (unregistered): slcan off ttyS3. [ 79.445446][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.449168][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.452545][ T5829] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.457339][ T5829] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.460347][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.464617][ T5829] usb 8-1: config 0 descriptor?? [ 79.824903][ T7118] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.892823][ T7092] syz.3.378 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.914836][ T7122] vlan2: entered allmulticast mode [ 79.917332][ T7122] bond0: entered allmulticast mode [ 79.919591][ T7122] bond_slave_0: entered allmulticast mode [ 79.922637][ T7122] bond_slave_1: entered allmulticast mode [ 79.925970][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 79.964757][ T7125] binder: 7124:7125 ioctl c0306201 200000000080 returned -14 [ 79.975252][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 79.991605][ T5829] usbhid 8-1:0.0: can't add hid device: -71 [ 79.993739][ T5829] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 80.004007][ T5829] usb 8-1: USB disconnect, device number 9 [ 80.155318][ T7135] vlan2: entered allmulticast mode [ 80.157162][ T7135] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 80.161677][ T7133] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 80.243305][ T7134] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 80.263800][ T7139] bond2: Removing last ns target with arp_interval on [ 80.316703][ T7147] overlayfs: missing 'lowerdir' [ 80.404947][ T7160] netlink: 'syz.1.399': attribute type 5 has an invalid length. [ 80.747885][ T7190] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.807190][ T7197] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 80.883933][ T7200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.067712][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 81.100467][ T7227] QAT: failed to copy from user cfg_data. [ 81.412081][ T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 81.564876][ T50] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.568607][ T50] usb 7-1: config 0 has no interface number 0 [ 81.573362][ T50] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 81.578464][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.582131][ T50] usb 7-1: Product: syz [ 81.584049][ T50] usb 7-1: Manufacturer: syz [ 81.586112][ T50] usb 7-1: SerialNumber: syz [ 81.591745][ T50] usb 7-1: config 0 descriptor?? [ 81.809896][ T50] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 81.817651][ T50] usb 7-1: USB disconnect, device number 9 [ 82.021239][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 82.021278][ T40] audit: type=1400 audit(1778080491.555:585): avc: denied { read } for pid=7244 comm="syz.1.427" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 82.031301][ T40] audit: type=1400 audit(1778080491.555:586): avc: denied { open } for pid=7244 comm="syz.1.427" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 82.076166][ T7246] net_ratelimit: 56 callbacks suppressed [ 82.076183][ T7246] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 82.081834][ T7246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.352771][ T40] audit: type=1400 audit(1778080491.895:587): avc: denied { create } for pid=7247 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 82.501848][ T40] audit: type=1400 audit(1778080492.035:588): avc: denied { ioctl } for pid=7249 comm="syz.2.429" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.635070][ T40] audit: type=1400 audit(1778080492.175:589): avc: denied { ioctl } for pid=7259 comm="syz.3.433" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.690052][ T7265] tipc: Trying to set illegal importance in message [ 82.897238][ T40] audit: type=1400 audit(1778080492.435:590): avc: denied { write } for pid=7271 comm="syz.1.437" name="/" dev="9p" ino=72876203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.904914][ T40] audit: type=1400 audit(1778080492.435:591): avc: denied { write } for pid=7271 comm="syz.1.437" name="/" dev="9p" ino=72876203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.915045][ T40] audit: type=1400 audit(1778080492.435:592): avc: denied { remove_name } for pid=7271 comm="syz.1.437" name="file0" dev="9p" ino=72876215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.924427][ T40] audit: type=1400 audit(1778080492.435:593): avc: denied { rename } for pid=7271 comm="syz.1.437" name="file0" dev="9p" ino=72876215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.933515][ T40] audit: type=1400 audit(1778080492.435:594): avc: denied { add_name } for pid=7271 comm="syz.1.437" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.187609][ T7287] bridge2: left promiscuous mode [ 83.191234][ T7287] bond1: left promiscuous mode [ 83.197290][ T7287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.204196][ T223] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 83.271447][ T7292] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 83.275460][ T7292] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 83.574960][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 83.808229][ T7339] FAULT_INJECTION: forcing a failure. [ 83.808229][ T7339] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.812593][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.1.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.812610][ T7339] Tainted: [L]=SOFTLOCKUP [ 83.812613][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.812644][ T7339] Call Trace: [ 83.812648][ T7339] [ 83.812652][ T7339] dump_stack_lvl+0x100/0x190 [ 83.812674][ T7339] should_fail_ex.cold+0x5/0xa [ 83.812689][ T7339] _copy_from_iter+0x1f4/0x1690 [ 83.812713][ T7339] ? __pfx__copy_from_iter+0x10/0x10 [ 83.812729][ T7339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.812746][ T7339] copy_page_from_iter+0x238/0x300 [ 83.812763][ T7339] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 83.812781][ T7339] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 83.812795][ T7339] ? unwind_get_return_address+0x59/0xa0 [ 83.812811][ T7339] ? arch_stack_walk+0xa6/0xf0 [ 83.812833][ T7339] ? _kstrtoull+0x13c/0x1f0 [ 83.812843][ T7339] ? __pfx__kstrtoull+0x10/0x10 [ 83.812855][ T7339] tun_get_user+0x16d6/0x3c20 [ 83.812874][ T7339] ? __pfx_tun_get_user+0x10/0x10 [ 83.812888][ T7339] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 83.812904][ T7339] ? find_held_lock+0x2b/0x80 [ 83.812913][ T7339] ? tun_get+0x191/0x370 [ 83.812925][ T7339] ? tun_get+0x191/0x370 [ 83.812940][ T7339] tun_chr_write_iter+0xdc/0x200 [ 83.812954][ T7339] vfs_write+0x6ac/0x1070 [ 83.812970][ T7339] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 83.812985][ T7339] ? __pfx_vfs_write+0x10/0x10 [ 83.812995][ T7339] ? find_held_lock+0x2b/0x80 [ 83.813013][ T7339] ksys_write+0x12a/0x250 [ 83.813024][ T7339] ? __pfx_ksys_write+0x10/0x10 [ 83.813036][ T7339] ? rcu_is_watching+0x12/0xc0 [ 83.813054][ T7339] do_syscall_64+0x10b/0xf80 [ 83.813178][ T7339] ? clear_bhb_loop+0x40/0x90 [ 83.813191][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.813201][ T7339] RIP: 0033:0x7f9b42b5d60e [ 83.813210][ T7339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.813220][ T7339] RSP: 002b:00007f9b43b02fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.813230][ T7339] RAX: ffffffffffffffda RBX: 00007f9b43b036c0 RCX: 00007f9b42b5d60e [ 83.813236][ T7339] RDX: 000000000000003e RSI: 0000200000002340 RDI: 00000000000000c8 [ 83.813242][ T7339] RBP: 00007f9b43b03090 R08: 0000000000000000 R09: 0000000000000000 [ 83.813248][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.813253][ T7339] R13: 00007f9b42e16038 R14: 00007f9b42e15fa0 R15: 00007ffd17dc8908 [ 83.813266][ T7339] [ 84.012771][ T7348] bridge0: port 3(syz_tun) entered blocking state [ 84.015032][ T7348] bridge0: port 3(syz_tun) entered disabled state [ 84.017213][ T7348] syz_tun: entered allmulticast mode [ 84.019977][ T7348] syz_tun: entered promiscuous mode [ 84.022165][ T7348] bridge0: port 3(syz_tun) entered blocking state [ 84.024457][ T7348] bridge0: port 3(syz_tun) entered forwarding state [ 84.058534][ T7352] netlink: 'syz.2.466': attribute type 12 has an invalid length. [ 84.072079][ T6117] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.231960][ T6117] usb 6-1: Using ep0 maxpacket: 8 [ 84.234954][ T6117] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 84.237733][ T6117] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.240923][ T6117] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.246555][ T6117] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.249856][ T6117] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.255823][ T6117] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.258804][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.286820][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 84.334946][ T7365] /dev/nullb0: Can't open blockdev [ 84.364782][ T7367] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 84.390293][ T7367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.469551][ T6117] usb 6-1: usb_control_msg returned -32 [ 84.471492][ T6117] usbtmc 6-1:16.0: can't read capabilities [ 84.522766][ T7375] netlink: 'syz.2.473': attribute type 11 has an invalid length. [ 84.526270][ T7375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 84.532899][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 84.535866][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 84.568018][ T7379] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 84.570523][ T7379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.600698][ T7383] nbd: must specify an index to disconnect [ 84.610523][ T7383] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 84.613531][ T7383] ALSA: mixer_oss: invalid index 1374389 [ 84.664664][ T7389] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.861979][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 84.902008][ T5816] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.992723][ T10] usb 8-1: device descriptor read/64, error -71 [ 85.062939][ T5816] usb 7-1: no configurations [ 85.065071][ T5816] usb 7-1: can't read configurations, error -22 [ 85.192000][ T5816] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 85.242361][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 85.352588][ T5816] usb 7-1: no configurations [ 85.354174][ T5816] usb 7-1: can't read configurations, error -22 [ 85.356491][ T5816] usb usb7-port1: attempt power cycle [ 85.372303][ T10] usb 8-1: device descriptor read/64, error -71 [ 85.482287][ T10] usb usb8-port1: attempt power cycle [ 85.712106][ T5816] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 85.733333][ T5816] usb 7-1: no configurations [ 85.735400][ T5816] usb 7-1: can't read configurations, error -22 [ 85.822030][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 85.842416][ T10] usb 8-1: device descriptor read/8, error -71 [ 85.871957][ T5816] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 85.892821][ T5816] usb 7-1: no configurations [ 85.894380][ T5816] usb 7-1: can't read configurations, error -22 [ 85.896899][ T5816] usb usb7-port1: unable to enumerate USB device [ 86.082241][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 86.102428][ T10] usb 8-1: device descriptor read/8, error -71 [ 86.212343][ T10] usb usb8-port1: unable to enumerate USB device [ 86.597271][ T24] cfg80211: failed to load regulatory.db [ 86.772247][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.777754][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.781412][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.790705][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.794179][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.846500][ T5816] usb 6-1: USB disconnect, device number 8 [ 86.913621][ T7408] netlink: 'syz.1.482': attribute type 63 has an invalid length. [ 86.916207][ T7408] netlink: 5 bytes leftover after parsing attributes in process `syz.1.482'. [ 86.919372][ T7408] gretap0: entered allmulticast mode [ 86.921421][ T7408] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 87.140617][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.143733][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.146953][ T7392] bridge_slave_0: entered allmulticast mode [ 87.150725][ T7392] bridge_slave_0: entered promiscuous mode [ 87.154867][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.157338][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.159758][ T7392] bridge_slave_1: entered allmulticast mode [ 87.162900][ T7392] bridge_slave_1: entered promiscuous mode [ 87.178106][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.184180][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.204455][ T7392] team0: Port device team_slave_0 added [ 87.219255][ T7392] team0: Port device team_slave_1 added [ 87.242676][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.244976][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.253370][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.257670][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.259954][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.268230][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.309848][ T1249] vlan2: left promiscuous mode [ 87.312596][ T1249] vlan1: left promiscuous mode [ 87.317416][ T1249] bridge0: port 3(vlan2) entered disabled state [ 87.322068][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 87.326093][ T1249] bridge_slave_1: left allmulticast mode [ 87.328557][ T1249] bridge_slave_1: left promiscuous mode [ 87.330986][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.335247][ T1249] bridge_slave_0: left allmulticast mode [ 87.337199][ T1249] bridge_slave_0: left promiscuous mode [ 87.339256][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.398012][ T1249] bond1 (unregistering): (slave erspan1): Releasing active interface [ 87.400770][ T1249] erspan1 (unregistering): left promiscuous mode [ 87.526505][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.530525][ T1249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.534363][ T1249] bond0 (unregistering): Released all slaves [ 87.540080][ T1249] bond1 (unregistering): Released all slaves [ 87.549364][ T7392] hsr_slave_0: entered promiscuous mode [ 87.551770][ T7392] hsr_slave_1: entered promiscuous mode [ 87.554472][ T7392] debugfs: 'hsr0' already exists in 'hsr' [ 87.556419][ T7392] Cannot create hsr debugfs directory [ 87.609955][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 87.609968][ T40] audit: type=1400 audit(1778080497.145:614): avc: denied { write } for pid=7425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.647592][ T40] audit: type=1400 audit(1778080497.185:615): avc: denied { write } for pid=7428 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.705299][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.723215][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.726984][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 87.730098][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.738943][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.741993][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.752731][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.758323][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.772422][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.793756][ T40] audit: type=1400 audit(1778080497.335:616): avc: denied { write } for pid=7446 comm="syz.2.490" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 87.803032][ T40] audit: type=1400 audit(1778080497.335:617): avc: denied { setattr } for pid=7446 comm="syz.2.490" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 87.835455][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838070][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.840568][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.842974][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.871570][ T7458] QAT: failed to copy from user cfg_data. [ 87.877268][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.879621][ T40] audit: type=1400 audit(1778080497.415:618): avc: denied { write } for pid=7453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.893344][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.898052][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.926317][ T40] audit: type=1400 audit(1778080497.465:619): avc: denied { write } for pid=7463 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.930669][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.946352][ T1249] hsr_slave_0: left promiscuous mode [ 87.948909][ T1249] hsr_slave_1: left promiscuous mode [ 87.955049][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.964055][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.003629][ T40] audit: type=1400 audit(1778080497.545:620): avc: denied { mount } for pid=7473 comm="syz.1.497" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 88.006116][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 88.021935][ T40] audit: type=1400 audit(1778080497.555:621): avc: denied { append } for pid=7469 comm="syz.3.495" name="pfkey" dev="proc" ino=4026533118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.029376][ T40] audit: type=1400 audit(1778080497.555:622): avc: denied { map } for pid=7469 comm="syz.3.495" path="/proc/409/net/pfkey" dev="proc" ino=4026533118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.038623][ T40] audit: type=1400 audit(1778080497.565:623): avc: denied { read append } for pid=7469 comm="syz.3.495" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.111022][ T1249] team0 (unregistering): Port device team_slave_1 removed [ 88.129884][ T1249] team0 (unregistering): Port device team_slave_0 removed [ 88.204447][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 88.210563][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.213051][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.224178][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.226547][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.384651][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 88.463799][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.512798][ T7490] vivid-000: kernel_thread() failed [ 88.538006][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.596681][ T7392] veth0_vlan: entered promiscuous mode [ 88.601867][ T7392] veth1_vlan: entered promiscuous mode [ 88.615370][ T7392] veth0_macvtap: entered promiscuous mode [ 88.619316][ T7392] veth1_macvtap: entered promiscuous mode [ 88.631479][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.637317][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.648042][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.651083][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.659537][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663579][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.716291][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.719011][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.733502][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.736230][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.832203][ T5740] Bluetooth: hci4: command tx timeout [ 88.865492][ T7529] bond2 (unregistering): Released all slaves [ 88.997803][ T7543] syzkaller0: entered promiscuous mode [ 88.999761][ T7543] syzkaller0: entered allmulticast mode [ 89.004493][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.505'. [ 89.021986][ T6117] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 89.079164][ T7547] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.185604][ T6117] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 89.188274][ T6117] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.192246][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 89.195763][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.199627][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 89.204491][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 89.208155][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.212642][ T6117] usb 9-1: config 168 interface 0 has no altsetting 0 [ 89.218098][ T7557] kernel read not supported for file /policy (pid: 7557 comm: syz.3.512) [ 89.223571][ T6117] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 89.226133][ T6117] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.229987][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 89.233673][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.237590][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 89.241846][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 89.246516][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.247385][ T7542] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.250958][ T6117] usb 9-1: config 168 interface 0 has no altsetting 0 [ 89.256577][ T6117] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 89.259201][ T6117] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 89.259253][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 89.259268][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.259280][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 89.259292][ T6117] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 89.259304][ T6117] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 89.259317][ T6117] usb 9-1: config 168 interface 0 has no altsetting 0 [ 89.261607][ T6117] usb 9-1: string descriptor 0 read error: -22 [ 89.290483][ T6117] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 89.290499][ T6117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.306482][ T6117] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 89.348398][ T7570] : renamed from bond0 (while UP) [ 89.416975][ T7572] netlink: 52 bytes leftover after parsing attributes in process `syz.2.516'. [ 89.504180][ T50] usb 9-1: USB disconnect, device number 2 [ 89.513017][ T7579] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 89.515547][ T7579] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 89.685060][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 89.704143][ T7589] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 89.704186][ T7527] adutux: No device or device unplugged -19 [ 89.734371][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 89.934381][ T7604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.070092][ T7612] wg1: entered promiscuous mode [ 90.072420][ T7612] wg1: entered allmulticast mode [ 90.168207][ T7625] netlink: 184 bytes leftover after parsing attributes in process `syz.3.533'. [ 90.172627][ T7625] netlink: 184 bytes leftover after parsing attributes in process `syz.3.533'. [ 90.254487][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.536'. [ 90.257723][ T7634] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.538'. [ 90.345329][ T7647] binder: 7646:7647 ioctl c0306201 200000000480 returned -14 [ 90.369216][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.543'. [ 90.378485][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 90.405426][ T7651] veth3: entered allmulticast mode [ 90.469287][ T7658] overlayfs: upper fs does not support file handles, falling back to index=off. [ 90.877398][ T7696] cgroup: No subsys list or none specified [ 90.911976][ T5740] Bluetooth: hci4: command tx timeout [ 91.076574][ T7709] ata1.00: invalid multi_count 128 ignored [ 91.565269][ T7749] ip6gretap0: entered promiscuous mode [ 91.948599][ T7764] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 92.004782][ T7765] overlay: ./file0 is not a directory [ 92.114158][ T5740] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 92.120143][ T5740] Bluetooth: hci1: Injecting HCI hardware error event [ 92.125148][ T5740] Bluetooth: hci1: hardware error 0x00 [ 92.242531][ T7767] xt_hl: Unknown Hop Limit match mode: 206 [ 92.313620][ T7769] NILFS (nbd4): device size too small [ 92.557818][ T7774] o2cb: This node has not been configured. [ 92.560425][ T7774] o2cb: Cluster check failed. Fix errors before retrying. [ 92.564478][ T7774] (syz.1.585,7774,0):user_dlm_register:674 ERROR: status = -22 [ 92.566963][ T7774] (syz.1.585,7774,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 92.700511][ T7785] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 92.708612][ T7785] CIFS mount error: No usable UNC path provided in device string! [ 92.708612][ T7785] [ 92.713375][ T7785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.871728][ T10] IPVS: starting estimator thread 0... [ 92.972013][ T7806] IPVS: using max 45 ests per chain, 108000 per kthread [ 92.992269][ T5730] Bluetooth: hci4: command tx timeout [ 93.237736][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 93.237769][ T40] audit: type=1400 audit(1778080502.775:661): avc: denied { map } for pid=7824 comm="syz.4.602" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.258000][ T40] audit: type=1400 audit(1778080502.775:662): avc: denied { execute } for pid=7824 comm="syz.4.602" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.817457][ T7835] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 93.819653][ T7835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.824532][ T7835] vhci_hcd vhci_hcd.0: Device attached [ 93.891457][ T7836] vhci_hcd: connection closed [ 93.898542][ T46] vhci_hcd vhci_hcd.2: stop threads [ 93.903993][ T46] vhci_hcd vhci_hcd.2: release socket [ 93.906451][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 93.931443][ T7848] binder: BINDER_SET_CONTEXT_MGR already set [ 93.934938][ T7848] binder: 7847:7848 ioctl 4018620d 2000000002c0 returned -16 [ 93.989330][ T40] audit: type=1400 audit(1778080503.525:663): avc: denied { accept } for pid=7856 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.019513][ T7857] __nla_validate_parse: 4 callbacks suppressed [ 94.019552][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'. [ 94.092825][ T7854] kvm: kvm [7853]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 94.097140][ T7854] kvm: kvm [7853]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 94.134708][ T7854] kvm: kvm [7853]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 94.160780][ T7864] binder: 7863:7864 ioctl c0306201 200000000080 returned -14 [ 94.165836][ T7854] kvm: kvm [7853]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 94.167719][ T7864] binder: 7863:7864 ioctl c0306201 2000000003c0 returned -14 [ 94.170153][ T7854] kvm: kvm [7853]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 94.194504][ T5740] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 94.238876][ T7871] syz_tun: left allmulticast mode [ 94.241067][ T7871] syz_tun: left promiscuous mode [ 94.246922][ T7871] bridge0: port 3(syz_tun) entered disabled state [ 94.397821][ T7871] bridge_slave_1: left allmulticast mode [ 94.400343][ T7871] bridge_slave_1: left promiscuous mode [ 94.403043][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.408424][ T7871] bridge_slave_0: left allmulticast mode [ 94.410286][ T7871] bridge_slave_0: left promiscuous mode [ 94.416641][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.469500][ T40] audit: type=1400 audit(1778080504.005:664): avc: denied { mounton } for pid=7882 comm="syz.3.618" path="/185/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.469725][ T7883] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 94.695989][ T40] audit: type=1400 audit(1778080504.235:665): avc: denied { ioctl } for pid=7900 comm="syz.3.622" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 94.706585][ T40] audit: type=1400 audit(1778080504.235:666): avc: denied { write } for pid=7900 comm="syz.3.622" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.738260][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.628'. [ 94.790373][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 94.832284][ T7925] comedi comedi2: mpc624: I/O base address or length out of range [ 94.896737][ T40] audit: type=1400 audit(1778080504.435:667): avc: denied { setopt } for pid=7926 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.082010][ T5740] Bluetooth: hci4: command tx timeout [ 95.562188][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 97.747867][ T7919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.796646][ T5740] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 97.801938][ T40] audit: type=1400 audit(1778080507.335:668): avc: denied { watch watch_reads } for pid=7949 comm="syz.3.637" path="pipe:[23015]" dev="pipefs" ino=23015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.811220][ T40] audit: type=1400 audit(1778080507.345:669): avc: denied { relabelfrom } for pid=7949 comm="syz.3.637" name="" dev="pipefs" ino=23016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.826709][ T40] audit: type=1400 audit(1778080507.345:670): avc: denied { read } for pid=7952 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.946181][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'. [ 97.980147][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 97.983641][ T7975] netlink: 'syz.2.644': attribute type 18 has an invalid length. [ 97.986237][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 97.989934][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 97.995921][ T7975] netlink: 'syz.2.644': attribute type 18 has an invalid length. [ 97.998520][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 98.203193][ T7990] bond0: (slave bond_slave_0): Releasing backup interface [ 98.207400][ T7990] bond_slave_0: left allmulticast mode [ 98.221441][ T7990] bond0: (slave bond_slave_1): Releasing backup interface [ 98.221969][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 98.233983][ T7990] bond_slave_1: left allmulticast mode [ 98.240893][ T7990] team0: Port device team_slave_0 removed [ 98.250986][ T7990] team0: Port device team_slave_1 removed [ 98.254101][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.257239][ T7990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.276654][ T7991] team0: Mode changed to "loadbalance" [ 98.391955][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 98.396736][ T24] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.400249][ T24] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.403602][ T24] usb 8-1: Product: syz [ 98.405092][ T24] usb 8-1: Manufacturer: syz [ 98.407290][ T24] usb 8-1: SerialNumber: syz [ 98.411117][ T24] usb 8-1: config 0 descriptor?? [ 98.537662][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 98.537673][ T40] audit: type=1400 audit(1778080508.075:676): avc: denied { mounton } for pid=8005 comm="syz.1.653" path="/167/file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.547648][ T40] audit: type=1800 audit(1778080508.085:677): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.652" name="/" dev="fuse" ino=1 res=0 errno=0 [ 98.588090][ T40] audit: type=1400 audit(1778080508.125:678): avc: denied { checkpoint_restore } for pid=7998 comm="syz.2.652" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.614880][ T24] usb 8-1: USB disconnect, device number 14 [ 98.802736][ T8010] /dev/sr0: Can't open blockdev [ 98.896113][ T8016] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 98.905932][ T8016] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 98.906598][ T223] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.110520][ T40] audit: type=1400 audit(1778080508.645:679): avc: denied { write } for pid=8017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.157671][ T8022] tmpfs: Unknown parameter 'grpquota ' [ 99.165609][ T40] audit: type=1400 audit(1778080508.705:680): avc: denied { write } for pid=8021 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.335848][ T40] audit: type=1400 audit(1778080508.875:681): avc: denied { mount } for pid=8029 comm="syz.2.659" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.348859][ T40] audit: type=1400 audit(1778080508.885:682): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.378677][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 99.402381][ T844] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 99.417040][ T8039] random: crng reseeded on system resumption [ 99.417740][ T40] audit: type=1400 audit(1778080508.955:683): avc: denied { write } for pid=8038 comm="syz.2.662" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.428458][ T40] audit: type=1400 audit(1778080508.955:684): avc: denied { open } for pid=8038 comm="syz.2.662" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.438233][ T8039] Unrecognized hibernate image header format! [ 99.440762][ T8039] PM: hibernation: Image mismatch: architecture specific data [ 99.445701][ T40] audit: type=1400 audit(1778080508.985:685): avc: denied { setattr } for pid=8038 comm="syz.2.662" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.509367][ T8042] geneve2: entered promiscuous mode [ 99.542502][ T8038] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 99.582014][ T844] usb 8-1: Using ep0 maxpacket: 32 [ 99.585502][ T844] usb 8-1: config index 0 descriptor too short (expected 43690, got 27) [ 99.588525][ T844] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.592426][ T844] usb 8-1: config 0 has no interfaces? [ 99.595910][ T844] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 99.600710][ T844] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 99.605127][ T844] usb 8-1: Product: syz [ 99.606954][ T844] usb 8-1: Manufacturer: syz [ 99.608769][ T844] usb 8-1: SerialNumber: syz [ 99.613912][ T844] usb 8-1: config 0 descriptor?? [ 99.738395][ T8059] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.818211][ T844] usb 8-1: USB disconnect, device number 15 [ 100.227862][ T8068] /dev/sg0: Can't lookup blockdev [ 100.342823][ T8073] netlink: 'syz.2.670': attribute type 11 has an invalid length. [ 100.359960][ T8076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8076 comm=syz.3.671 [ 100.667181][ T8107] o2cb: This node has not been configured. [ 100.669168][ T8107] o2cb: Cluster check failed. Fix errors before retrying. [ 100.671538][ T8107] (syz.1.679,8107,1):user_dlm_register:674 ERROR: status = -22 [ 100.677539][ T8107] (syz.1.679,8107,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 100.703850][ T8113] Unsupported ieee802154 address type: 0 [ 100.729542][ T8115] pim6reg: entered allmulticast mode [ 100.806923][ T8130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.684'. [ 100.847420][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 100.850376][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 100.853414][ T8127] netlink: 'syz.3.682': attribute type 7 has an invalid length. [ 100.912322][ T5730] Bluetooth: hci0: command 0x1003 tx timeout [ 100.920560][ T5740] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.923334][ T8139] devpts: Bad value for 'max' [ 101.184766][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.189238][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.191772][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.195262][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.197769][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.200218][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.203006][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.206124][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.209443][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.212149][ T24] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 101.236613][ T24] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 101.285575][ T8166] fido_id[8166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.418485][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 101.462755][ T8186] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 101.494675][ T8194] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 101.580813][ T8206] comedi comedi3: comedi_config --init_data is deprecated [ 102.361986][ T8219] IPv6: sit1: Disabled Multicast RS [ 102.367255][ T8219] sit1: entered allmulticast mode [ 102.432520][ T5837] IPVS: starting estimator thread 0... [ 102.475880][ T8235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 102.509073][ T8237] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 102.542185][ T8230] IPVS: using max 45 ests per chain, 108000 per kthread [ 102.556018][ T8241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8241 comm=syz.1.719 [ 102.556022][ T8242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8242 comm=syz.1.719 [ 102.595082][ T8240] policy can only be matched on NF_INET_PRE_ROUTING [ 102.595100][ T8240] unable to load match [ 102.600457][ T8240] support for the xor transformation has been removed. [ 102.683318][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 102.701124][ T8254] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.783514][ T8263] BIDI support in bsg has been removed. [ 102.853398][ T24] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 102.856260][ T24] usb 7-1: config 0 has no interface number 0 [ 102.858842][ T24] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.871998][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 102.874998][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.877550][ T24] usb 7-1: Product: syz [ 102.879019][ T24] usb 7-1: Manufacturer: syz [ 102.880607][ T24] usb 7-1: SerialNumber: syz [ 102.887788][ T24] usb 7-1: config 0 descriptor?? [ 102.893937][ T24] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 102.897014][ T8277] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 102.923674][ T8286] netlink: 'syz.3.730': attribute type 3 has an invalid length. [ 102.926382][ T8286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.730'. [ 102.972362][ T8289] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.093578][ T50] usb 7-1: USB disconnect, device number 14 [ 103.097283][ T50] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 103.296464][ T8231] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 103.299081][ T8231] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.715'. [ 103.302366][ T8231] netlink: 1 bytes leftover after parsing attributes in process `syz.2.715'. [ 103.305332][ T8229] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 103.307844][ T8229] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.715'. [ 103.627946][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 103.627962][ T40] audit: type=1400 audit(1778080513.165:721): avc: denied { bpf } for pid=8297 comm="syz.1.733" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.638439][ T40] audit: type=1400 audit(1778080513.165:722): avc: denied { perfmon } for pid=8297 comm="syz.1.733" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.797266][ T40] audit: type=1326 audit(1778080513.335:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8302 comm="syz.4.735" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f753399cdd9 code=0x0 [ 103.950374][ T40] audit: type=1400 audit(1778080513.485:724): avc: denied { append } for pid=8302 comm="syz.4.735" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.020026][ T8312] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 104.022897][ T8312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.023915][ T8316] syzkaller1: entered allmulticast mode [ 104.148054][ T46] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x5 [ 104.151308][ T8326] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.164377][ T8318] syzkaller0: entered promiscuous mode [ 104.166506][ T8318] syzkaller0: entered allmulticast mode [ 104.179857][ T40] audit: type=1400 audit(1778080513.715:725): avc: denied { append } for pid=8327 comm="syz.2.742" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.190081][ T40] audit: type=1400 audit(1778080513.725:726): avc: denied { execute } for pid=8327 comm="syz.2.742" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.436499][ T40] audit: type=1400 audit(1778080513.975:727): avc: denied { ioctl } for pid=8341 comm="syz.3.746" path="socket:[26680]" dev="sockfs" ino=26680 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.438930][ T8342] netem: change failed [ 104.451711][ T8343] __nla_validate_parse: 1 callbacks suppressed [ 104.451722][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 104.461304][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 104.556479][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.586870][ T40] audit: type=1400 audit(1778080514.125:728): avc: denied { create } for pid=8361 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.676813][ T40] audit: type=1400 audit(1778080514.215:729): avc: denied { load_policy } for pid=8361 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.677718][ T8368] SELinux: failed to load policy [ 104.687599][ T40] audit: type=1400 audit(1778080514.225:730): avc: denied { block_suspend } for pid=8361 comm="syz.4.753" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.014432][ T8441] comedi comedi0: dac02: I/O base address or length out of range [ 105.108544][ T8443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8443 comm=syz.3.759 [ 105.119938][ T8443] erspan0: entered promiscuous mode [ 105.124227][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 105.153265][ T8450] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.190077][ T8452] syzkaller1: entered promiscuous mode [ 105.192522][ T8452] syzkaller1: entered allmulticast mode [ 105.358008][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 105.390829][ T8466] ip6t_REJECT: ECHOREPLY is not supported [ 105.430592][ T8466] netlink: 'syz.1.766': attribute type 2 has an invalid length. [ 105.435035][ T8466] fuse: Unknown parameter 'grcp_id' [ 105.456443][ T8475] veth1_macvtap: left promiscuous mode [ 105.458357][ T8475] macsec0: entered promiscuous mode [ 105.460117][ T8475] macsec0: entered allmulticast mode [ 105.465646][ T8475] veth1_macvtap: entered promiscuous mode [ 105.467659][ T8475] veth1_macvtap: entered allmulticast mode [ 105.469798][ T8475] macsec0: left promiscuous mode [ 105.471598][ T8475] macsec0: left allmulticast mode [ 105.473316][ T8475] veth1_macvtap: left allmulticast mode [ 105.544993][ T8484] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.568140][ T8486] qnx6: unable to set blocksize [ 105.618096][ T8487] netlink: 666 bytes leftover after parsing attributes in process `syz.4.772'. [ 105.626009][ T8489] xt_hashlimit: size too large, truncated to 1048576 [ 105.633912][ T8486] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 105.687654][ T8493] x_tables: duplicate underflow at hook 1 [ 105.689859][ T8492] Bluetooth: MGMT ver 1.23 [ 105.693325][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 105.814802][ T8513] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 105.849557][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 106.040807][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 106.044002][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 106.047025][ T8527] netlink: 'syz.4.786': attribute type 11 has an invalid length. [ 106.049733][ T8527] netlink: 'syz.4.786': attribute type 7 has an invalid length. [ 106.101832][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'. [ 106.116600][ T8544] nvme_fabrics: unknown parameter or missing value 'FROZEN' in ctrl creation request [ 106.315185][ T8560] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 106.336897][ T8562] x_tables: duplicate underflow at hook 1 [ 106.641977][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 106.795982][ T50] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 106.799084][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.801802][ T50] usb 9-1: Product: syz [ 106.803291][ T50] usb 9-1: Manufacturer: syz [ 106.804872][ T50] usb 9-1: SerialNumber: syz [ 107.009881][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.015688][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.019601][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.024567][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.029205][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.031675][ T8577] can0: slcan on ttynull. [ 107.036074][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.042020][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.046693][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.052279][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.061571][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.123192][ T8576] can0 (unregistered): slcan off ttynull. [ 107.482137][ T5829] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.577220][ T8618] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 107.581411][ T8618] binder: 8617:8618 ioctl 4018620d 200000000100 returned -1 [ 107.585779][ T8621] xt_hashlimit: size too large, truncated to 1048576 [ 107.645230][ T5829] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 107.648264][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.651018][ T5829] usb 6-1: Product: syz [ 107.652504][ T5829] usb 6-1: Manufacturer: syz [ 107.654679][ T5829] usb 6-1: SerialNumber: syz [ 107.899350][ T5829] rtl8150 6-1:1.0: couldn't reset the device [ 107.902653][ T5829] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 107.915507][ T5829] usb 6-1: USB disconnect, device number 9 [ 107.927259][ T50] rtl8150 9-1:1.0: couldn't reset the device [ 107.929484][ T50] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 108.521185][ T8651] SELinux: security_context_str_to_sid (sysadmبF;_ֲ~-\] A<[0BetI4D{0\K5X#/@Sqk) failed with errno=-22 [ 108.598614][ T8656] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.415881][ T844] usb 9-1: USB disconnect, device number 3 [ 109.449831][ T8662] raw_sendmsg: syz.4.825 forgot to set AF_INET. Fix it! [ 109.488321][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.530722][ T8666] __nla_validate_parse: 6 callbacks suppressed [ 109.530734][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 110.052681][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 110.064072][ T8669] tmpfs: Cannot change global quota limit on remount [ 110.067803][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 110.067812][ T40] audit: type=1400 audit(1778080519.605:746): avc: denied { listen } for pid=8667 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.297410][ T40] audit: type=1400 audit(1778080519.835:747): avc: denied { read } for pid=8672 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.321339][ T40] audit: type=1400 audit(1778080519.855:748): avc: denied { read } for pid=8675 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.468677][ T8690] /dev/nullb0: Can't open blockdev [ 110.527864][ T8699] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 110.570503][ T8699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=8699 comm=syz.2.836 [ 110.725809][ T8707] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.912352][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 111.313550][ T8724] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 111.343622][ T40] audit: type=1400 audit(1778080520.885:749): avc: denied { bind } for pid=8725 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.592277][ T8656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.596292][ T8668] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 111.599156][ T8668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.828'. [ 111.607718][ T8668] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 111.610671][ T8668] netlink: 'syz.4.828': attribute type 8 has an invalid length. [ 111.613687][ T8668] netlink: 582 bytes leftover after parsing attributes in process `syz.4.828'. [ 111.617238][ T8668] netlink: 1 bytes leftover after parsing attributes in process `syz.4.828'. [ 111.704613][ T8737] /dev/nullb0: Can't open blockdev [ 111.726576][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.849'. [ 111.916103][ T8753] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.920230][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'. [ 111.920902][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.851'. [ 112.080835][ T8775] netlink: 52 bytes leftover after parsing attributes in process `syz.1.858'. [ 112.326628][ T8809] netlink: 7 bytes leftover after parsing attributes in process `syz.1.864'. [ 112.537841][ T40] audit: type=1400 audit(1778080522.075:750): avc: denied { name_bind } for pid=8816 comm="syz.4.867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 112.559702][ T8832] mmap: syz.1.872 (8832) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.821672][ T10] kernel read not supported for file /728/net/sockstat (pid: 10 comm: kworker/0:1) [ 112.901946][ T50] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 113.032021][ T50] usb 6-1: device descriptor read/64, error -71 [ 113.284140][ T50] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 113.314585][ T8871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8871 comm=syz.4.884 [ 113.412085][ T50] usb 6-1: device descriptor read/64, error -71 [ 113.522728][ T50] usb usb6-port1: attempt power cycle [ 113.551902][ T40] audit: type=1400 audit(1778080523.085:751): avc: denied { append } for pid=8875 comm="syz.4.886" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.882102][ T50] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 113.902583][ T50] usb 6-1: device descriptor read/8, error -71 [ 113.975753][ T8901] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 113.975753][ T8901] The task syz.4.892 (8901) triggered the difference, watch for misbehavior. [ 114.142087][ T50] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 114.162593][ T50] usb 6-1: device descriptor read/8, error -71 [ 114.272992][ T50] usb usb6-port1: unable to enumerate USB device [ 114.677963][ T8903] bridge_slave_0: left allmulticast mode [ 114.679950][ T8903] bridge_slave_0: left promiscuous mode [ 114.681946][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.687281][ T8903] bridge_slave_1: left allmulticast mode [ 114.689276][ T8903] bridge_slave_1: left promiscuous mode [ 114.691366][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.697315][ T8903] bond0: (slave bond_slave_0): Releasing backup interface [ 114.704018][ T8903] bond_slave_0: left allmulticast mode [ 114.709802][ T8903] bond0: (slave bond_slave_1): Releasing backup interface [ 114.714238][ T8903] bond_slave_1: left allmulticast mode [ 114.724223][ T8903] team0: Port device team_slave_0 removed [ 114.729897][ T8908] __nla_validate_parse: 5 callbacks suppressed [ 114.729907][ T8908] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.733548][ T8903] team0: Port device team_slave_1 removed [ 114.738187][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.738821][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.742333][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.746347][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.749365][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.756922][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.758541][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.760091][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.760183][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.760273][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.760362][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.760450][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.4.894'. [ 114.783657][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.788142][ T8903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.797653][ T8910] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 114.815339][ T8905] team0: Mode "activeackup" not found [ 114.870136][ T8914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8914 comm=syz.4.895 [ 114.954995][ T8921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 114.957152][ T8921] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 114.961343][ T8921] vhci_hcd vhci_hcd.0: Device attached [ 114.964140][ T8924] vhci_hcd: unknown pdu 2 [ 114.966808][ T8425] vhci_hcd vhci_hcd.3: stop threads [ 114.968564][ T8425] vhci_hcd vhci_hcd.3: release socket [ 114.970604][ T8425] vhci_hcd vhci_hcd.3: disconnect device [ 114.971956][ T40] audit: type=1400 audit(1778080524.505:752): avc: denied { connect } for pid=8923 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.067707][ T8930] netlink: 'syz.4.902': attribute type 14 has an invalid length. [ 115.193174][ T8934] CIFS mount error: No usable UNC path provided in device string! [ 115.193174][ T8934] [ 115.196609][ T8934] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.200308][ T40] audit: type=1400 audit(1778080524.735:753): avc: denied { append } for pid=8933 comm="syz.4.904" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.209450][ T40] audit: type=1400 audit(1778080524.735:754): avc: denied { map } for pid=8933 comm="syz.4.904" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.505963][ T8946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8946 comm=syz.4.906 [ 115.565655][ T8955] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.708358][ T8974] dns_resolver: Unsupported content type (234) [ 115.754590][ T8982] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.784979][ T40] audit: type=1400 audit(1778080525.325:755): avc: denied { watch watch_reads } for pid=8985 comm="syz.1.921" path="/210/file1" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 115.785692][ T8986] bridge0: port 3(syz_tun) entered blocking state [ 115.796477][ T8986] bridge0: port 3(syz_tun) entered disabled state [ 115.800301][ T8986] syz_tun: entered allmulticast mode [ 115.803120][ T8986] syz_tun: entered promiscuous mode [ 115.805130][ T8986] bridge0: port 3(syz_tun) entered blocking state [ 115.807284][ T8986] bridge0: port 3(syz_tun) entered forwarding state [ 115.922342][ T9002] kernel profiling enabled (shift: 63) [ 115.925870][ T9002] profiling shift: 63 too large [ 116.691415][ T40] audit: type=1400 audit(1778080526.225:756): avc: denied { mount } for pid=9030 comm="syz.2.929" name="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.705199][ T40] audit: type=1400 audit(1778080526.245:757): avc: denied { write } for pid=9030 comm="syz.2.929" name="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.707419][ T9035] team0: No ports can be present during mode change [ 116.736117][ T9038] netlink: 'syz.4.931': attribute type 5 has an invalid length. [ 116.830893][ T40] audit: type=1400 audit(1778080526.365:758): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.871634][ T9049] program syz.4.934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.974945][ T9060] program syz.1.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.036431][ T9070] netlink: 'syz.2.940': attribute type 29 has an invalid length. [ 117.040755][ T9070] netlink: 'syz.2.940': attribute type 29 has an invalid length. [ 117.045835][ T9070] netlink: 'syz.2.940': attribute type 32 has an invalid length. [ 117.057063][ T40] audit: type=1400 audit(1778080526.595:759): avc: denied { ioctl } for pid=9071 comm="syz.1.941" path="socket:[29192]" dev="sockfs" ino=29192 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.315254][ T40] audit: type=1400 audit(1778080526.855:760): avc: denied { write } for pid=9095 comm="syz.1.947" name="/" dev="9p" ino=72876203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.322922][ T40] audit: type=1400 audit(1778080526.855:761): avc: denied { create } for pid=9095 comm="syz.1.947" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.334459][ T40] audit: type=1400 audit(1778080526.875:762): avc: denied { read append } for pid=9095 comm="syz.1.947" path="/219/file0/cpuacct.usage_sys" dev="9p" ino=72876405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.661674][ T9100] netlink: 'syz.1.949': attribute type 29 has an invalid length. [ 117.666031][ T9100] netlink: 'syz.1.949': attribute type 29 has an invalid length. [ 117.669372][ T9100] unsupported nla_type 58 [ 118.266447][ T9114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.284429][ T9114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.912436][ T9127] syz_tun: left allmulticast mode [ 118.914352][ T9127] syz_tun: left promiscuous mode [ 118.916712][ T9127] bridge0: port 3(syz_tun) entered disabled state [ 118.926637][ T9127] bridge_slave_0: left allmulticast mode [ 118.929100][ T9127] bridge_slave_0: left promiscuous mode [ 118.931525][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.937616][ T9127] bridge_slave_1: left promiscuous mode [ 118.955489][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.965241][ T9127] : (slave bond_slave_0): Releasing backup interface [ 118.975071][ T9127] : (slave bond_slave_1): Releasing backup interface [ 118.983886][ T9127] team0: Port device team_slave_0 removed [ 118.989306][ T9127] team0: Port device team_slave_1 removed [ 118.992530][ T9127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.994951][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.998065][ T9127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.000455][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.004627][ T9127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.017581][ T9129] bond2: Unable to set down delay as MII monitoring is disabled [ 119.020915][ T9129] bond2 (unregistering): Released all slaves [ 119.055888][ T9131] team0: Mode "activeackup" not found [ 119.176779][ T9148] overlayfs: regular lower layers cannot follow data lower layers [ 119.181186][ T9144] bond0: option xmit_hash_policy: invalid value (6) [ 119.185556][ T9144] bond0 (unregistering): Released all slaves [ 119.299224][ T9161] syzkaller0: entered promiscuous mode [ 119.301186][ T9161] syzkaller0: entered allmulticast mode [ 119.333067][ T9165] "syz.1.972" (9165) uses obsolete ecb(arc4) skcipher [ 119.412745][ T9172] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.581646][ T9184] IPv4: Oversized IP packet from 127.202.26.0 [ 120.448273][ T9186] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.473559][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 120.473571][ T40] audit: type=1400 audit(1778080530.015:766): avc: denied { create } for pid=9195 comm="syz.3.981" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.490980][ T40] audit: type=1400 audit(1778080530.015:767): avc: denied { mounton } for pid=9195 comm="syz.3.981" path="/273/file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.537134][ T40] audit: type=1400 audit(1778080530.075:768): avc: denied { unlink } for pid=5741 comm="syz-executor" name="file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.544666][ T9209] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.651606][ T40] audit: type=1400 audit(1778080530.185:769): avc: denied { ioctl } for pid=9234 comm="syz.3.991" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.678286][ T9226] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 120.726437][ T9245] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 120.728603][ T9248] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 120.731420][ T9248] __nla_validate_parse: 26 callbacks suppressed [ 120.731429][ T9248] netlink: 224 bytes leftover after parsing attributes in process `syz.3.996'. [ 120.741136][ T9245] bond0: entered promiscuous mode [ 120.744113][ T9245] bond0: entered allmulticast mode [ 120.746448][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.758495][ T9245] erspan1: entered allmulticast mode [ 120.764855][ T9245] bond0: (slave erspan1): making interface the new active one [ 120.767344][ T9245] erspan1: entered promiscuous mode [ 120.771145][ T9245] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 120.824606][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1000'. [ 120.860280][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 120.866446][ T40] audit: type=1400 audit(1778080530.405:770): avc: denied { bind } for pid=9265 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.900106][ T9274] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1005'. [ 120.904781][ T9274] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1005'. [ 121.069464][ T9284] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 121.088674][ T9284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.103773][ T9284] bond2: (slave geneve2): making interface the new active one [ 121.107240][ T9284] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 121.721986][ T5816] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 121.861998][ T5816] usb 7-1: device descriptor read/64, error -71 [ 122.064871][ T9316] input: syz1 as /devices/virtual/input/input17 [ 122.102006][ T5816] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 122.232157][ T5816] usb 7-1: device descriptor read/64, error -71 [ 122.342474][ T5816] usb usb7-port1: attempt power cycle [ 122.712401][ T5816] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 122.721254][ T9310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.742392][ T5816] usb 7-1: device descriptor read/8, error -71 [ 122.758058][ T40] audit: type=1400 audit(1778080532.295:771): avc: denied { map } for pid=9328 comm="syz.3.1020" path="socket:[30895]" dev="sockfs" ino=30895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.768525][ T40] audit: type=1400 audit(1778080532.295:772): avc: denied { getopt } for pid=9328 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.992083][ T5816] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 123.022450][ T5816] usb 7-1: device descriptor read/8, error -71 [ 123.106063][ T9348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.115308][ T9349] team0: Mode changed to "loadbalance" [ 123.142233][ T5816] usb usb7-port1: unable to enumerate USB device [ 123.507805][ T40] audit: type=1400 audit(1778080533.045:773): avc: denied { write } for pid=9355 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 123.515143][ T40] audit: type=1400 audit(1778080533.045:774): avc: denied { connect } for pid=9355 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 123.521523][ T40] audit: type=1400 audit(1778080533.055:775): avc: denied { setopt } for pid=9355 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 124.016999][ T9377] can: request_module (can-proto-0) failed. [ 124.034373][ T9377] can: request_module (can-proto-0) failed. [ 124.051805][ T9377] can: request_module (can-proto-0) failed. [ 124.126956][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 124.130588][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 124.194086][ T9382] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 124.341974][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32796 sclass=netlink_route_socket pid=9393 comm=syz.1.1035 [ 124.401185][ T9395] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 124.418638][ T9395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.433925][ T9395] bond2: (slave geneve2): making interface the new active one [ 124.438384][ T9395] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.570143][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 124.704583][ T9419] netlink: 'syz.3.1045': attribute type 64 has an invalid length. [ 124.717251][ T9422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.754032][ T9420] netlink: 'syz.2.1044': attribute type 2 has an invalid length. [ 124.758393][ T9420] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1044'. [ 124.921746][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.929280][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.933670][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.943863][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.947194][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.111575][ T9436] Failed to initialize the IGMP autojoin socket (err -2) [ 125.383890][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.386517][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.389224][ T9436] bridge_slave_0: entered allmulticast mode [ 125.392113][ T9436] bridge_slave_0: entered promiscuous mode [ 125.395488][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.398432][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.401424][ T9436] bridge_slave_1: entered allmulticast mode [ 125.404821][ T9436] bridge_slave_1: entered promiscuous mode [ 125.442660][ T9463] : entered promiscuous mode [ 125.481358][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.498739][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.503283][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 125.505580][ T1129] ata1: failed to read log page 10h (errno=-5) [ 125.507596][ T1129] ata1.00: exception Emask 0x1 SAct 0x10 SErr 0x0 action 0x0 [ 125.510176][ T1129] ata1.00: irq_stat 0x40000000 [ 125.514961][ T1129] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.517070][ T1129] ata1.00: cmd 61/50:20:0e:08:10/00:00:00:00:00/40 tag 4 ncq dma 40960 out [ 125.517070][ T1129] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.523345][ T1129] ata1.00: status: { DRDY } [ 125.529688][ T1129] ata1.00: error: { ABRT } [ 125.534613][ T1129] ata1.00: configured for UDMA/100 [ 125.536529][ T1129] ata1: EH complete [ 125.544164][ T9436] team0: Port device team_slave_0 added [ 125.581398][ T9436] team0: Port device team_slave_1 added [ 125.633857][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 125.633869][ T40] audit: type=1400 audit(1778080535.175:781): avc: denied { setcurrent } for pid=9473 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 125.644891][ T40] audit: type=1400 audit(1778080535.175:782): avc: denied { getopt } for pid=9468 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.651455][ T40] audit: type=1401 audit(1778080535.185:783): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 125.665298][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.667660][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.682013][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.697279][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.700920][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.709390][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.748850][ T9483] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 125.753807][ T40] audit: type=1400 audit(1778080535.295:784): avc: denied { relabelto } for pid=9482 comm="syz.2.1059" name="283" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 125.763525][ T40] audit: type=1400 audit(1778080535.295:785): avc: denied { associate } for pid=9482 comm="syz.2.1059" name="283" dev="tmpfs" ino=1529 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 125.802887][ T9436] hsr_slave_0: entered promiscuous mode [ 125.814491][ T9436] hsr_slave_1: entered promiscuous mode [ 125.821668][ T9436] debugfs: 'hsr0' already exists in 'hsr' [ 125.831396][ T9436] Cannot create hsr debugfs directory [ 126.076624][ T9436] netdevsim netdevsim5 netdevsim0: renamed from eth6 [ 126.079345][ T40] audit: type=1400 audit(1778080535.615:786): avc: denied { write } for pid=9489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.093471][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.097709][ T9436] netdevsim netdevsim5 netdevsim1: renamed from eth7 [ 126.111151][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.115943][ T9436] netdevsim netdevsim5 netdevsim2: renamed from eth8 [ 126.131210][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.135603][ T40] audit: type=1400 audit(1778080535.665:787): avc: denied { write } for pid=9492 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.154603][ T9436] netdevsim netdevsim5 netdevsim3: renamed from eth9 [ 126.168498][ T9494] Mount JFS Failure: -5 [ 126.170625][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.170783][ T9494] jfs_mount failed w/return code = -5 [ 126.273511][ T9436] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.289662][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.292079][ T8425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.302184][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.304600][ T8425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.571737][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.597724][ T40] audit: type=1400 audit(1778080536.135:788): avc: denied { write } for pid=5734 comm="syz-executor" name="283" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.622204][ T40] audit: type=1400 audit(1778080536.135:789): avc: denied { remove_name } for pid=5734 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.646134][ T40] audit: type=1400 audit(1778080536.135:790): avc: denied { write } for pid=5734 comm="syz-executor" name="283" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 126.817841][ T9553] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 126.822781][ T9436] veth0_vlan: entered promiscuous mode [ 126.854021][ T9559] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 126.864157][ T9436] veth1_vlan: entered promiscuous mode [ 126.913199][ T9436] veth0_macvtap: entered promiscuous mode [ 126.928824][ T9436] veth1_macvtap: entered promiscuous mode [ 126.981183][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.992071][ T5740] Bluetooth: hci0: command tx timeout [ 126.995114][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.001115][ T9436] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.008629][ T9436] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 127.020092][ T9436] wireguard: wg0: Could not create IPv4 socket [ 127.025859][ T9436] wireguard: wg1: Could not create IPv4 socket [ 127.029999][ T9436] wireguard: wg2: Could not create IPv4 socket qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x89000) [ 127.252121][ T6117] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 127.402091][ T6117] usb 8-1: Invalid ep0 maxpacket: 64 [ 127.532123][ T6117] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 127.682045][ T6117] usb 8-1: Invalid ep0 maxpacket: 64 [ 127.684807][ T6117] usb usb8-port1: attempt power cycle [ 127.860657][ T9609] nfs: Unknown parameter 'GPL' [ 128.021996][ T6117] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 128.042840][ T6117] usb 8-1: Invalid ep0 maxpacket: 64 [ 128.172048][ T6117] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 128.193172][ T6117] usb 8-1: Invalid ep0 maxpacket: 64 [ 128.195961][ T6117] usb usb8-port1: unable to enumerate USB device [ 128.407345][ T9681] tmpfs: Bad value for 'mpol' [ 128.538386][ T9703] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 128.710313][ T9713] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 128.719975][ T9713] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 128.723841][ T9713] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 128.727613][ T9713] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 128.740444][ T9713] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 128.744850][ T9713] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 128.749094][ T9713] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 128.762641][ T9713] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 128.766541][ T9713] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 128.770261][ T9713] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 129.542948][ T9703] comedi comedi0: reset error (fatal) [ 129.720853][ T9785] tipc: MTU too low for tipc bearer [ 129.735831][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 129.739089][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 129.977942][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.981120][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.987819][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.991422][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.996741][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.044193][ T9574] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 130.095225][ T9826] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.174418][ T9811] Failed to initialize the IGMP autojoin socket (err -2) [ 130.186733][ T9844] overlayfs: statfs failed on './file0' [ 130.262003][ T5816] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 130.413956][ T5816] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 130.416750][ T5816] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.422210][ T5816] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.428498][ T5816] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.433653][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.439591][ T5816] usb 7-1: Product: syz [ 130.441015][ T5816] usb 7-1: Manufacturer: syz [ 130.446056][ T5816] usb 7-1: SerialNumber: syz [ 130.455301][ T5816] usb 7-1: config 0 descriptor?? [ 130.461102][ T5816] hub 7-1:0.0: bad descriptor, ignoring hub [ 130.463829][ T5816] hub 7-1:0.0: probe with driver hub failed with error -5 [ 130.467657][ T5816] usb 7-1: selecting invalid altsetting 0 [ 130.533750][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 130.537740][ T1129] ata1: failed to read log page 10h (errno=-5) [ 130.539879][ T1129] ata1.00: NCQ disabled due to excessive errors [ 130.543374][ T1129] ata1.00: exception Emask 0x1 SAct 0x4800 SErr 0x0 action 0x0 [ 130.545955][ T1129] ata1.00: irq_stat 0x41000000 [ 130.547647][ T1129] ata1.00: failed command: WRITE FPDMA QUEUED [ 130.549711][ T1129] ata1.00: cmd 61/50:58:66:08:10/00:00:00:00:00/40 tag 11 ncq dma 40960 out [ 130.549711][ T1129] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 130.555868][ T1129] ata1.00: status: { DRDY } [ 130.558459][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 130.560502][ T1129] ata1.00: cmd 60/48:70:16:2c:01/04:00:00:00:00/40 tag 14 ncq dma 561152 in [ 130.560502][ T1129] res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 130.567040][ T1129] ata1.00: status: { DRDY } [ 130.569408][ T1129] ata1.00: configured for UDMA/100 [ 130.571787][ T1129] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=3s [ 130.576130][ T1129] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 130.578751][ T1129] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 130.581447][ T1129] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 2c 16 00 04 48 00 [ 130.584714][ T1129] I/O error, dev sda, sector 76822 op 0x0:(READ) flags 0x80700 phys_seg 137 prio class 2 [ 130.588065][ T1129] ata1: EH complete [ 130.687214][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 130.687256][ T40] audit: type=1400 audit(1778080540.225:852): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.726272][ T40] audit: type=1400 audit(1778080540.265:853): avc: denied { write } for pid=9889 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.793180][ T8425] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.796155][ T8425] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.799118][ T8425] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.802845][ T8425] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.823361][ T40] audit: type=1400 audit(1778080540.365:854): avc: denied { write } for pid=9893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.860649][ T40] audit: type=1400 audit(1778080540.395:855): avc: denied { write } for pid=9898 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.940194][ T40] audit: type=1400 audit(1778080540.475:856): avc: denied { write } for pid=9902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.981640][ T40] audit: type=1400 audit(1778080540.515:857): avc: denied { write } for pid=9905 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.024456][ T9909] overlayfs: upper fs does not support file handles, falling back to index=off. [ 131.032553][ T9910] overlayfs: failed lookup in lower (newroot/316, name='bus', err=-40): overlapping layers [ 131.066444][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 131.077126][ T40] audit: type=1400 audit(1778080540.615:858): avc: denied { write } for pid=9911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.096474][ T9914] nvme_fabrics: missing parameter 'transport=%s' [ 131.098662][ T9914] nvme_fabrics: missing parameter 'nqn=%s' [ 131.117936][ T40] audit: type=1400 audit(1778080540.655:859): avc: denied { write } for pid=9917 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.198314][ T40] audit: type=1400 audit(1778080540.735:860): avc: denied { write } for pid=9922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.239239][ T40] audit: type=1400 audit(1778080540.775:861): avc: denied { write } for pid=9925 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.362109][ T5816] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 131.374412][ T9818] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 131.491955][ T5816] usb 8-1: device descriptor read/64, error -71 [ 131.635687][ T9811] netdevsim netdevsim5 netdevsim0: renamed from eth6 [ 131.640169][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.643122][ T9811] netdevsim netdevsim5 netdevsim1: renamed from eth7 [ 131.646972][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.649789][ T9811] netdevsim netdevsim5 netdevsim2: renamed from eth8 [ 131.656727][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.659541][ T9811] netdevsim netdevsim5 netdevsim3: renamed from eth9 [ 131.667679][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.724548][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1121'. [ 131.732084][ T5816] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 131.862108][ T5816] usb 8-1: device descriptor read/64, error -71 [ 131.972102][ T5816] usb usb8-port1: attempt power cycle [ 132.011731][ T9811] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 132.018746][ T9811] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 132.026702][ T9811] wireguard: wg0: Could not create IPv4 socket [ 132.029863][ T9811] wireguard: wg1: Could not create IPv4 socket [ 132.032025][ T5730] Bluetooth: hci0: command tx timeout [ 132.036039][ T9811] wireguard: wg2: Could not create IPv4 socket [ 132.312785][ T5816] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 132.332343][ T5816] usb 8-1: device descriptor read/8, error -71 [ 132.592095][ T5816] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 132.614406][ T5816] usb 8-1: device descriptor read/8, error -71 [ 132.732382][ T5816] usb usb8-port1: unable to enumerate USB device [ 132.868637][T10022] syz.1.1125 (10022): drop_caches: 2 [ 133.334160][ T9878] usb 7-1: USB disconnect, device number 19 [ 133.972843][T10107] netlink: 5796 bytes leftover after parsing attributes in process `syz.1.1131'. [ 133.978096][T10107] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.028345][T10111] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 134.101382][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1134'. [ 134.147270][ T5730] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 134.201361][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'. [ 134.204425][T10143] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.207160][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 134.209170][T10145] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1139'. [ 134.258221][T10146] loop9: detected capacity change from 0 to 4096 [ 134.436882][T10183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1147'. [ 134.535372][T10193] /dev/nullb0: Can't open blockdev [ 134.613022][ T6117] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 134.620603][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 134.623939][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 134.762035][ T6117] usb 8-1: Using ep0 maxpacket: 8 [ 134.766313][ T6117] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.769723][ T6117] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.773612][ T6117] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.778880][ T6117] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 134.781862][ T6117] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 134.785528][ T6117] usb 8-1: Product: syz [ 134.786922][ T6117] usb 8-1: Manufacturer: syz [ 134.788525][ T6117] usb 8-1: SerialNumber: syz [ 134.791485][ T6117] usb 8-1: config 0 descriptor?? [ 134.831951][ T6117] rc_core: IR keymap rc-imon-rsc not found [ 134.833957][ T6117] Registered IR keymap rc-empty [ 134.836902][ T6117] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 134.840981][ T6117] input: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 135.393596][T10196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.397194][T10196] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.426497][ T9666] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 135.427665][T10196] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.430604][ T9666] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 135.435674][ T9666] CPU: 2 UID: 0 PID: 9666 Comm: kbnepd B@} Tainted: G L syzkaller #0 PREEMPT(full) [ 135.439347][ T9666] Tainted: [L]=SOFTLOCKUP [ 135.440803][ T9666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.444097][ T9666] RIP: 0010:klist_put+0x4d/0x1d0 [ 135.445872][ T9666] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 09 0d [ 135.452285][ T9666] RSP: 0018:ffffc90007f3f970 EFLAGS: 00010202 [ 135.454324][ T9666] RAX: dffffc0000000000 RBX: ffff88802c111460 RCX: ffffffff82b9510b [ 135.456942][ T9666] RDX: 000000000000000b RSI: ffffffff8b7ff2d5 RDI: 0000000000000058 [ 135.459564][ T9666] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 135.462200][ T9666] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 135.464838][ T9666] R13: 0000000000000001 R14: ffff88805c5c4cb0 R15: 0000000000000000 [ 135.467481][ T9666] FS: 0000000000000000(0000) GS:ffff8880d6575000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.470434][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.472733][ T9666] CR2: 00007f0e45cf5ff8 CR3: 000000004bc67000 CR4: 0000000000352ef0 [ 135.475384][ T9666] Call Trace: [ 135.476566][ T9666] [ 135.477574][ T9666] device_del+0x1b8/0x9b0 [ 135.479052][ T9666] ? __pfx_device_del+0x10/0x10 [ 135.480693][ T9666] ? netdev_unregister_kobject+0x2da/0x540 [ 135.482575][ T9666] unregister_netdevice_many_notify+0x179e/0x24f0 [ 135.484614][ T9666] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 135.486847][ T9666] ? __pfx___mutex_lock+0x10/0x10 [ 135.488548][ T9666] unregister_netdevice_queue+0x30b/0x3c0 [ 135.490458][ T9666] ? rtnl_net_dev_lock+0x137/0x360 [ 135.492169][ T9666] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 135.494250][ T9666] ? rtnl_net_dev_lock+0x28/0x360 [ 135.495936][ T9666] ? rtnl_net_dev_lock+0x146/0x360 [ 135.497649][ T9666] ? rtnl_lock+0x9/0x20 [ 135.499054][ T9666] ? rtnl_net_dev_lock+0x1fe/0x360 [ 135.500770][ T9666] unregister_netdev+0x1f/0x60 [ 135.502379][ T9666] bnep_session+0x2219/0x2d80 [ 135.503975][ T9666] ? kthread_affine_node+0x1ac/0x240 [ 135.505734][ T9666] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 135.507623][ T9666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.509648][ T9666] ? __pfx_bnep_session+0x10/0x10 [ 135.511354][ T9666] ? do_raw_spin_lock+0x128/0x260 [ 135.513041][ T9666] ? __pfx_woken_wake_function+0x10/0x10 [ 135.514931][ T9666] ? rcu_is_watching+0x12/0xc0 [ 135.516556][ T9666] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.518511][ T9666] ? lockdep_hardirqs_on+0x78/0x100 [ 135.520217][ T9666] ? __kthread_parkme+0x18c/0x230 [ 135.521905][ T9666] ? kthread+0x13a/0x450 [ 135.523339][ T9666] ? __pfx_bnep_session+0x10/0x10 [ 135.525031][ T9666] kthread+0x370/0x450 [ 135.526417][ T9666] ? __pfx_kthread+0x10/0x10 [ 135.527985][ T9666] ret_from_fork+0x72b/0xd50 [ 135.529540][ T9666] ? __pfx_ret_from_fork+0x10/0x10 [ 135.531281][ T9666] ? __switch_to+0x800/0x1100 [ 135.532867][ T9666] ? __pfx_kthread+0x10/0x10 [ 135.534431][ T9666] ret_from_fork_asm+0x1a/0x30 [ 135.536042][ T9666] [ 135.537172][ T9666] Modules linked in: [ 135.538781][ T9666] ---[ end trace 0000000000000000 ]--- [ 135.540718][ T9666] RIP: 0010:klist_put+0x4d/0x1d0 [ 135.542789][ T9666] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 09 0d [ 135.551311][ T9666] RSP: 0018:ffffc90007f3f970 EFLAGS: 00010202 [ 135.553537][ T9666] RAX: dffffc0000000000 RBX: ffff88802c111460 RCX: ffffffff82b9510b [ 135.556269][ T9666] RDX: 000000000000000b RSI: ffffffff8b7ff2d5 RDI: 0000000000000058 [ 135.558906][ T9666] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 135.561488][ T9666] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 135.567235][ T9666] R13: 0000000000000001 R14: ffff88805c5c4cb0 R15: 0000000000000000 [ 135.569884][ T9666] FS: 0000000000000000(0000) GS:ffff8880d6675000(0000) knlGS:0000000000000000 [ 135.572855][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.575021][ T9666] CR2: 000056022030c248 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 135.577617][ T9666] Kernel panic - not syncing: Fatal exception [ 135.580545][ T9666] Kernel Offset: disabled [ 135.581997][ T9666] Rebooting in 86400 seconds..