last executing test programs: 1m25.410630698s ago: executing program 1 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x462112}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0xc0040f4}, 0x40045) 1m25.189877569s ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f0000000040)='./file0\x00') 1m25.106461043s ago: executing program 1 (id=99): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x2e400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 1m23.269823848s ago: executing program 1 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x4, 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@void, @val={0x2, 0x80, 0xf1, 0x7, 0xa, 0x7ff}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x1}, {0x4ee4}, {0x9}, {}, {0x7}, {0x0, 0x0, 0x1}], @ipv6=@tcp={0x6, 0x6, "34d7af", 0x325, 0x6, 0x1, @mcast2, @mcast1, {[@fragment={0x5c, 0x0, 0x1, 0x1, 0x0, 0x13, 0x67}, @fragment={0x2e, 0x0, 0x7, 0x0, 0x0, 0x9, 0x67}, @dstopts={0x33, 0x29, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x7, 0xa2, "f4cb3e18963d93d6adc12e80fa9e33ee71d961e4ae79b8438cc420467a5b5cb99ec0e6db69bc520968b7dabcae5ba88a80f94618d198e79f190e1b5a408fc1db5cbef2bae2fef7cded51e191b925765ada31f12769ba37166573894dbb8d2b1c62ecb9763e7ca7c399ceee0ea857584a7988532faed0d3c04fa47ba4ce1332b66f316edb74bb8df0945579b443eef66904eedb05b148ab8b249a94a95d09acc3db64"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x6, 0x99, "1e78410e1b08b2775f2ab0eb0f58674442ee215b3f7f0642adafe77238ba89543eed34f9dd7d363bba3405a75113fcb1d5a4b104ceec7d77760f28c7e969cc4e557f7188232482edf4b5eed0cee04a10cb0e733edc4f86575e2f1c45ccc5f3662775e32d7218a277db9cd7066dce59ed0da1e0de28da124c62a1a0dd0c3374c06d2de0518dd8fe175fe0808366d6c19f3c36d4ee1a46a1e089"}, @ra={0x5, 0x2, 0xd028}]}, @hopopts={0x4, 0x27, '\x00', [@generic={0x4, 0x5d, "678179456a5c2193a3074fe47de0bcf85d35e97006941c97cb72560cfead3855f01bc1a391b6e85cc61b9405e69a285d6ce36573169cac7a1682c5df8332435b2c76d1667d46184f2ba9bca349b49d6f25aadec077d73d6e45fc952d7a"}, @ra={0x5, 0x2, 0x9}, @generic={0x0, 0xa1, "d41b3bd86700bcb40fd2d4720d78754dcdadc1b7065058cd9d2d1d75839f22f5ed75805b5487c74e1e4ffa005c960af72ac5cae8d09bfa42cfb993f09e898722cb65ea82cde02261d6b09e3c26f2b3f404aa4229d495074cb083684d05e35673c49e35e912e5f6b88d80a1a696ee3eb4dd8614aaa783cb951141f9270dcf67dfb5b972f1a2c61175c1eb8ededff75f8f1408cc272a17449db639a78fab1367a9cf"}, @generic={0x2, 0x37, "c96527bf23a0ae57c34eca40da995bb94310522c599d844ea52e0467a737b94f3634923b7956016be176d495a875841b5e9e47710e6a99"}]}], {{0x4e20, 0x4e24, r1, 0x41424344, 0x1, 0x0, 0x13, 0x4, 0x6, 0x0, 0xdf, {[@sack={0x5, 0x26, [0x5, 0x7, 0x70, 0xf66, 0x855f, 0x5, 0xdc, 0x5, 0x18]}, @fastopen={0x22, 0x12, "e91122108331f01e42699f62dc77e3fd"}]}}, {"d4f580aa60e684419d8b796bef48e5c3bb9b69924e8e240d644edda5707d76f5d84b069a651eaafbc3"}}}}}}}}}, 0x385) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x62, &(0x7f0000000500)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\f', 0x2c, 0x2b, 0xfc, @local, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "90"}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @exp_smc={0xfe, 0x6}, @nop, @eol]}}}}}}}}, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000009c0)={0x288, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xd18}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8ce}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xfbcf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x35ce}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x5}}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000048}, 0x4000) preadv2(r7, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000000340)={@remote, @rand_addr=0x64010102}, 0x8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x5000, 0xd000, 0x3, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x81}, {0x100000, 0x54000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0x7, 0xa8, 0xf1}, {0xc000, 0x2000, 0x10, 0x3, 0xf6, 0x2, 0xa7, 0x7f, 0x41, 0x83, 0xf7, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x77, 0xb3, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5}, {0x25000, 0x1, 0xb, 0x5, 0x0, 0x2, 0x4, 0x43, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x8, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x1000, 0xfff7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x400000006, 0x0, 0xfec00000, [0xa4, 0x1000, 0x400000000063, 0xfffffffffffffff8]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80080d0}, 0x24004810) 1m23.159961004s ago: executing program 1 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10}, 0x94) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m23.070860614s ago: executing program 1 (id=112): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x20000}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c810}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 1m7.952640968s ago: executing program 32 (id=112): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x20000}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c810}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 25.169934386s ago: executing program 0 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x1) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000080)={0x36, &(0x7f0000000580)=[{0x16, '\x00', @buffer={"35272ae91496445f86d1ddf767d3d003026c6539de187d6fc0800419c9a80d41", 0x20}, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x80) 24.99688124s ago: executing program 0 (id=811): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000003d40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 24.887752621s ago: executing program 0 (id=813): syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r0, &(0x7f00000088c0)=""/48, 0x30) (async) getdents64(r0, &(0x7f00000088c0)=""/48, 0x30) getdents(r0, 0xffffffffffffffff, 0x5a) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000011c7da3abc0049ce76ab75949ba2698e0000000000100000000018000000090000002351d138c4dde0f9a1f9b82f76ae0c7f39029d38db9af8318043329b3dc99a02b54693e0d5f1c4fa7d29c339ade0f4be95b94181905d08d6233be6c4eebb5d32ddf7ca1b7aa6dcd467"], &(0x7f00000005c0)='GPL\x00'}, 0x94) syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x3d}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x9, r7, 0xb0b0b0b0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09e7352298952b199a03285b98657777dbf0c88a3e3ced51f5dd511c9ec13ad0"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = mq_open(&(0x7f0000000400)='*!+{\x00', 0x40, 0x20, &(0x7f00000006c0)={0x8, 0xc2, 0xff}) readv(r9, &(0x7f00000011c0)=[{&(0x7f0000000b40)=""/201, 0xc9}, {&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/242, 0xf2}, {&(0x7f0000000780)=""/34, 0x22}, {&(0x7f0000000e40)=""/253, 0xfd}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/153, 0x99}, {&(0x7f00000010c0)=""/206, 0xce}], 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = getpid() r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2020c0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000700)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000640)="9d243f20108fc654ea1aa5e716257dc7da05cf17ab0ded560c99164f3c0e8d573fd57d20f5b179e9d0cf142ad89691f7211fee4a502970fa137768fa59fdc296a64405b953f9747e20def5accbdd595bb7ba90319a215de8ef7adc55177f12eb809055cd752857dee4065a8bf68274"}) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000700)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000000640)="9d243f20108fc654ea1aa5e716257dc7da05cf17ab0ded560c99164f3c0e8d573fd57d20f5b179e9d0cf142ad89691f7211fee4a502970fa137768fa59fdc296a64405b953f9747e20def5accbdd595bb7ba90319a215de8ef7adc55177f12eb809055cd752857dee4065a8bf68274"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a062ecff57000000000000000c00000020000000f0ffffff487b34303a33ffffff087487895810dbe482e27c27ee156b196bdafc5e08fe806a59a1ea5391bace524a02e5f4a525ee160da32b1397168aea07cfe9543bb5196ff86cb5cc2b5ff46b39730fb89cab5b0327042f73f57cd1646cec978f48725d88d38fe0448f9ebe7eb16651b0222c92bae2cbcd293a1522cf5cb81c1a2c04e71546cf3613b91c73f48e2006b3821a49eb3b09b3b7b73ed62b71455ee86a"], 0x0, 0x26}, 0x20) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a062ecff57000000000000000c00000020000000f0ffffff487b34303a33ffffff087487895810dbe482e27c27ee156b196bdafc5e08fe806a59a1ea5391bace524a02e5f4a525ee160da32b1397168aea07cfe9543bb5196ff86cb5cc2b5ff46b39730fb89cab5b0327042f73f57cd1646cec978f48725d88d38fe0448f9ebe7eb16651b0222c92bae2cbcd293a1522cf5cb81c1a2c04e71546cf3613b91c73f48e2006b3821a49eb3b09b3b7b73ed62b71455ee86a"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r13, 0x4) 24.740261985s ago: executing program 0 (id=815): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000007c0)="09000000e70014e80300d97bfbf788a83bca04000000000000008100000088a8d81cefe3", 0x24, 0x20008040, &(0x7f0000002400)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) 24.678135601s ago: executing program 0 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x410c86, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1]) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a", 0x29) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8000) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x11) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x7, 0x4) setpgid(0x0, r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c02000013002904000000000000220000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 23.819776048s ago: executing program 0 (id=830): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000003d40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 10.439810922s ago: executing program 4 (id=982): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x189) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x0) 10.378072123s ago: executing program 4 (id=984): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0xcd, 0x6, 0x6, 0x7}, {0x1, 0x10, 0xc, 0x9}, {0x555, 0x3, 0x6, 0x40}, {0x401, 0x5, 0xfb, 0x7bc}, {0x4, 0xb, 0x4, 0x2}]}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)='3', 0x1}], 0xd) close(r1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@local, 0xee3}, 0xf20, 0x19200000000000, 0x8, 0x10000}) 10.300156642s ago: executing program 4 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() syz_open_dev$midi(&(0x7f0000000000), 0x108, 0x400500) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) 10.298420715s ago: executing program 4 (id=988): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.059503485s ago: executing program 4 (id=990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)='\x00\x00 ', 0x3) 8.818694249s ago: executing program 33 (id=830): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000100)) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000003d40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 8.556611467s ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.128779999s ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.667980662s ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.215787895s ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.859726931s ago: executing program 2 (id=1027): socket(0x10, 0x803, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x400, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {0x10}, [@nested={0x8f, 0xa5, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@broadcast}, @generic="7215aeb35b94aea9ce3e73c0ed944f8e5191895a019ce2fd7f9cea32334ad02492e3fd881b379329bbabebbd6e95b8214ea7", @generic="87e92c91806b56513d8d5f4fe88faa165c0511f03ad05a872e7dcad7c9ea4ef24e073ab3de530d71f6eaee5b215f4b3152172c3061364cbc9fe9c3d15a338ca5dfcb5a335d77d5f6c939fe4b73", @nested={0x4, 0xeb}]}, @generic="d3bd1a27be94e03b4b6f79c847eae59f96e9478c28753015b4a2aab3212390b47430a0817bbeb8df22adb191bdffc0f66e9baf8a148c133bce63f030b4b1948ef21752dcaf7f44cd1160f0c50f700452b7cc6dbf4bc363c52b6a54756583509d1da3932e34151ed5985be1879472f7b765fa62a0c81306ff2fcc656f64f42b05421a1922bb434f1950a877a4b5443edea2d38c089a4114", @nested={0x90, 0x12, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0x4, 0x83}, @generic="882fc4ecd920a8860a34094ca157e6ac5a5b7124da75af27f832104771e3f50b640dea16974f66f7463e2a167287349187953d8bc643490bf48595d8d0295e0ce7e4fda7fc6a9aa8bb53c0e0b3ee17d35adee5d489fe55b888b6c290f2d8bafe10d4e8a610b2a17fe929206815323d107db98998f819f626cfdea94789d5ad28de0d7abd"]}, @nested={0xc, 0x118, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r1}]}, @generic="591f7c5386cb8bc6dc73c48effcabaf0267c0d61261928d11c2ec68e55754a56710a220cb66dd556ac34724911e9f83cdbd4b5c8", @nested={0x1f3, 0x12b, 0x0, 0x1, [@nested={0x4, 0xfd}, @generic="d657ba8fdeed891d50e1d625c31ee11958ca4c25e8e45314bf17a5ed3938e4c37296a85f1c46f8c958dbf2e970065cf753225912995a2b7ce16b04c7f3947f447d4052fa52b4b5d4e337c02e026ad41c26b857c3b46145c322372011edb7fd4102b9eda56a0242813eab8ab801224c2ced0e3cdda9c6f9adad7e4ef9194a422700d24113d8cba5c90a2be78c709c239954f22b776efbc5a7e245d44920111aba8b994effe1faaea16ae9076d963f6b9b6387a80f041044c960511f8138167b7f737fdba98a3430", @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @generic="abe6d1dd24342a05ff5fe38545f16fa79e890740c2656063c5a8bc20a1c62857246263bab14287b7566e3d9f02f2f26013e559da919e135b058cd0adb386e5ffd775491d7b83dc7cf892602be7141f792e7c9a193e7afedc9551ecae3596a041fc9037274fa92f845bbc9b27799eeddac30786dc85ef594c3dc412243763a54a79a9074cbfccd3fc26411e5af8572af7fbc3a59a1c7bea1b236273af9f0b8f23959236125d93710663bd64d5dbd6401e9174595e263458be4f39385a17f6bb3b9160781305daaf5f973b366cf4919e780ca3e030040ec2b6", @nested={0x4, 0x61}, @generic="2462dc6198bbd3d4bb390b1e910dff228f25205a92b355990b63bcbc6826b1d0b7b9425c7ebd057798ad580eb0ea9ef20a6d53e09e88bb9893548f329f1e0bc5"]}]}, 0x400}, 0x1, 0x0, 0x0, 0x5000}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0xffff}}, 0x5c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 4.790258484s ago: executing program 2 (id=1028): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xb14b1000) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46f35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xb}, 0x94) 4.788842995s ago: executing program 2 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd4242ec52d3a9d97a2363395b5add192d6bb49", 0x1b}}, 0x94) write(0xffffffffffffffff, &(0x7f0000000080)="9bf9a59a036402e10b4cdabf5a76fdef0dec1b26467ebddd35d396a31b", 0x1d) 4.760251209s ago: executing program 2 (id=1032): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000016004c0b27bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000d00000000000000029000000040000002c17000000000000830c46f193cb95ddd6d3d2c1e142fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad05020a7ec910fc0100000000000000000000000000019308e80ec8b633e304ec1400000000000000290000004300000000000000000000002400000000000000290000003200000020010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000140000000000001a29000000080000000800000000000000180000000000000029000000390000003a0000700000000018000000000000002900000036ad00003b00000000000000"], 0x170}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz1\x00', {0x10, 0x0, 0x7, 0x200}, 0x11, [0x7, 0x8, 0x0, 0x8, 0x6, 0x7, 0x1, 0xf, 0x1, 0x9173, 0x0, 0x7, 0x9, 0x43b, 0x7fffffff, 0x5, 0xfffffff5, 0x3, 0x8, 0x1, 0x7fffffff, 0xbe0, 0x9, 0xa9, 0xfffffff7, 0x57, 0x2, 0xfffeffff, 0x2, 0xc, 0x0, 0x80000001, 0x6, 0x0, 0x3, 0x10, 0x4, 0x8, 0x6, 0x0, 0x3, 0xfffffe2e, 0x80000000, 0xb6, 0x1, 0x0, 0x6, 0xffff98e0, 0x5, 0x9, 0x0, 0x1b, 0x8, 0x3, 0x1000, 0x101, 0x25e, 0x40, 0x2, 0x7, 0x3, 0xffff, 0x7c, 0x7], [0xfffffff9, 0x7fff, 0x4, 0x3, 0x8, 0xb, 0x7, 0x4, 0x100, 0x9633, 0x7, 0x6, 0xb, 0x6, 0x5, 0x5, 0x5, 0xdf2, 0x4, 0x2000000, 0x4, 0x2e7f, 0x200, 0x7f, 0x10001, 0x397e, 0x7, 0x401, 0x8000, 0x6, 0x4dc1, 0x7fffffff, 0x4, 0x7, 0x800, 0x6, 0x9, 0x6, 0x2, 0xd9e8, 0x7fff, 0x8, 0x0, 0x8, 0x101, 0x80000000, 0xc6, 0x6, 0x10001, 0x5, 0x7fffffff, 0x5, 0xf449, 0x6, 0x9, 0x7, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4, 0x1, 0x101], [0x7, 0x7, 0x1, 0x5, 0xffffffff, 0x12, 0xfffffffc, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x9, 0xfffffffc, 0x200, 0x0, 0x7, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x8000, 0x1, 0xe10, 0x22d7, 0x9, 0x5, 0x1e74, 0x3, 0x3, 0x7fff, 0x5, 0x5, 0xfffffffb, 0x1, 0x1, 0x10, 0x9fd9, 0x0, 0x2924, 0x7, 0x2, 0x9, 0x4, 0x0, 0x8, 0x3, 0x40, 0x6da, 0x1, 0x1000, 0x10, 0x8001, 0x8, 0x8001, 0x2, 0x4, 0x7fffffff, 0x3, 0x8, 0x5, 0x211, 0x7], [0x0, 0x2, 0x8c, 0x8, 0x26f, 0x8, 0xfffffff8, 0xca, 0x5e, 0x4, 0x8, 0x200, 0x5, 0x5, 0x0, 0x600000, 0xb09, 0x9, 0xff, 0x10000, 0x3, 0xffffffff, 0xfffffffe, 0x10, 0x9, 0x5fd, 0x8, 0x200, 0x0, 0x6, 0xb, 0xb, 0x7ff, 0x9, 0x4, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x8, 0x6cc20712, 0x9, 0x5, 0x1000, 0x3, 0x7, 0x214, 0xb, 0x7, 0xabe5, 0xfffffffa, 0x0, 0x4, 0x200, 0x0, 0xe1, 0x2, 0x40005, 0xffffffd9, 0xb, 0xe, 0x3]}, 0x45c) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.481548907s ago: executing program 2 (id=1036): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)={0xf88, 0x3, 0xb, 0x3, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@generic="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", @typed={0x8, 0x156, 0x0, 0x0, @u32=0x4}]}, 0xf88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 4.299524185s ago: executing program 4 (id=990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}]}}]}, 0x44}}, 0x0) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)='\x00\x00 ', 0x3) 2.990444721s ago: executing program 3 (id=1043): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x4, 0x7f, 0x8, @link_local, 'nicvf0\x00'}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) r4 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r4], 0xfc) 2.939430361s ago: executing program 2 (id=1044): semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x10, 0x3, 0x7fff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000004, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x48a, 0x0, 0xfffffffffffffffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x80) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ec0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000047c0)) 1.809175426s ago: executing program 3 (id=1045): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000002380)={0xc, 0x0, 0x5, 0x3, 0xaf, 0xff}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) (async) ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000002380)={0xc, 0x0, 0x5, 0x3, 0xaf, 0xff}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) 1.678988593s ago: executing program 3 (id=1046): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x2}, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002000)=0x0) sendto(r0, &(0x7f0000001f00)="3ccaf89707e23ac45b2d5ee86dc18b6313f29c396499ed8fc4fd0d4bccf957c45518fea9c9322395c8039ee3484211e17b59a92218dd25f514d792e5fc463f3d8f280b94849e2f54d23774cfefb0f791857df21e2551e7c9af1304e326dcc9557f9ab2cef52d14b5e39aa8e6867510efc8707154dff25210c89b3dcfde595591f357af43c4d7d47d2a6f74316852908c9fba58a11d80c960d8a106e9ce4c37a864b5c95a037baeeda35aa40aea55cbb6e0d2fb5cd7ccd120dcecb5a0e263865655d9f03137fda95d5c6b8e40468dd62db6399313682d243ffeb33991373175b641caf3d14aadb372a38bf4c5fee357950df24c88", 0xf4, 0x8000, &(0x7f0000002040)=@nfc={0x27, r1, 0x0, 0x7}, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'macsec0\x00', {0x7}, 0x6}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x3, 0x29, 0x4, 0x2, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x80, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x3, 0x29, 0x4, 0x2, 0xcc7, 0x8, 0x8d, 0x8, 0xe, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x80, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f00000008c0)='-0', 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x700, 0x10, 0xf4, 0x5, {{0x38, 0x4, 0x0, 0x2c, 0xe0, 0x66, 0x0, 0x2, 0x0, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x9b, 0x3, 0x8, [{@remote, 0x76a}, {@remote, 0x9}, {@loopback, 0xb33}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7}, {@empty, 0x2}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xf1}]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x6, [{@loopback, 0x459e}]}, @noop, @generic={0x7, 0xa, "2c5540026438dde9"}, @rr={0x7, 0x27, 0x95, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010102, @multicast2, @local, @rand_addr=0x64010100, @multicast2, @broadcast, @multicast1]}, @noop, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x3, [0x1, 0x800, 0x1b]}, @lsrr={0x83, 0x17, 0x80, [@loopback, @local, @empty, @broadcast, @multicast1]}, @rr={0x7, 0xf, 0x7b, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0xd6, [@broadcast, @empty, @local, @remote, @loopback, @private=0xa010102]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="4a5c97d6c3e442dbc3897bd824862a30bb8d2691ca099ad15b87ed7a", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xa2, &(0x7f0000000100)=""/162, 0x41000, 0x78, '\x00', r4, @fallback=0x1a, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x100}, 0x10, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703090000000000000000000200000085000000820000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000341200007b8af8ff00000000bfa200000000000007020000f8ffffffb703090000000000000000000200000085000000820000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$inet(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)="6e7598320bf7ebf2951a305e", 0xc}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f00000004c0)="6fef02d41100b4bcf90c34c7ec6d6fc67eb7fcc718a0aadad53a5c32788ddd8352cd8785814b53c488484c820478f80b99fba6f0a22c9adcf5ba1b47ca375bcdb1c475aa317a487ca9bdae54a31ca3381541d0a00f6ba4f653f74441b37d5ec3c47592bf160dbb6450223044592805d82e8506f949ca518e324a0fe34b2996186bfe587c2b9ed25e3338921f77438c8ba7c72b06c44eefb9e93e8e9b9d380f9ad4c9e00d1d83afda7308573d4cd3273c7da83cd8ab405ce6cf60cd608f8f7c31eb40cdbcaf5ad104d87d6ceccf920c716e04bd8d53ce2c2b01907694fdf70fb096750b991eb58574e03d2e12e914c319005fa81c14a8636a", 0xf8}, {&(0x7f00000005c0)="a54807123e45e7e3e4aeca6a8f9c650e73cd9d816e2cffca88682493987755b224480aec6f", 0x25}, {&(0x7f0000000600)="bf38d7be1039e193ceff9c4b7ab56963d5eb99ac5f571c797ec04475715c81508c3d2389766beda85208b6a8daa19bd508dc1a4fe03cf3589649b9ec80021d0b1a7ca93047b5da4382cf6dd3368f025da08fc198f7433484896baa3f2b1b141085dbf7f8ade8e7d8f2cd397a27de9ea645ec5056945a02c7968d1bb2463a8fbeb9680e9627052ea42a4af837a336a7926943c56e2d9f56d500edd78de477ef7d6301b2db7ad2d9aec18de62238e32caadc91ec2606c7ad0d06a512f141047572b8c6126f2adb8a6152559191", 0xcc}, {&(0x7f0000000700)="a6777092099352860b1fcd83833953616cddc04e392b356eb6ad3258a9a0b9c4561b609814621c321c8afd5716e04d01b2c052c2a732ccde74144d9659f55e71a8ea095277dca7346afae88fe373b7b3c5", 0x51}, {&(0x7f0000001c80)="36aa82fa96c31cf7a7b99240361451788166303fee50826aae17caa46fe60890d649ed71ba4404b97f6a38ffe523ba26830682110cbc0facf125031788dfece38621408fb7880264b5d827c205b3b275d4ed67042fa22a29062cec5349d8c034cd005108576bb33053c8870b2fce240d05ea1f497057a7a8bcfb18c866a977fe2abe50d09a2f28f2b0bc697ee8c62e52410dc4e2bdfaea23ff8e373ba9d67b644a593f5acd8549319d99082f7b3707b6cb59696a25ff8b642b654fe15fc3fa206d7c9ba9c358f2f4c000e1903a181d1d35088b03ce463caf8994e087810576329decdf", 0xe3}], 0x7, &(0x7f0000001e00)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0x3, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x80000001}]}, @lsrr={0x83, 0x7, 0x31, [@dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_prespec={0x44, 0x14, 0x85, 0x3, 0x5, [{@loopback, 0x6}, {@remote, 0x9}]}, @ssrr={0x89, 0xb, 0xf, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xf0, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xfc, 0x0, 0x2, [0x200, 0x1, 0xd72a, 0x0, 0xfff]}, @lsrr={0x83, 0xf, 0x57, [@dev={0xac, 0x14, 0x14, 0xe}, @empty, @dev={0xac, 0x14, 0x14, 0x25}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa143}}], 0xc0}, 0x20000080) (async) sendmsg$inet(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)="6e7598320bf7ebf2951a305e", 0xc}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f00000004c0)="6fef02d41100b4bcf90c34c7ec6d6fc67eb7fcc718a0aadad53a5c32788ddd8352cd8785814b53c488484c820478f80b99fba6f0a22c9adcf5ba1b47ca375bcdb1c475aa317a487ca9bdae54a31ca3381541d0a00f6ba4f653f74441b37d5ec3c47592bf160dbb6450223044592805d82e8506f949ca518e324a0fe34b2996186bfe587c2b9ed25e3338921f77438c8ba7c72b06c44eefb9e93e8e9b9d380f9ad4c9e00d1d83afda7308573d4cd3273c7da83cd8ab405ce6cf60cd608f8f7c31eb40cdbcaf5ad104d87d6ceccf920c716e04bd8d53ce2c2b01907694fdf70fb096750b991eb58574e03d2e12e914c319005fa81c14a8636a", 0xf8}, {&(0x7f00000005c0)="a54807123e45e7e3e4aeca6a8f9c650e73cd9d816e2cffca88682493987755b224480aec6f", 0x25}, {&(0x7f0000000600)="bf38d7be1039e193ceff9c4b7ab56963d5eb99ac5f571c797ec04475715c81508c3d2389766beda85208b6a8daa19bd508dc1a4fe03cf3589649b9ec80021d0b1a7ca93047b5da4382cf6dd3368f025da08fc198f7433484896baa3f2b1b141085dbf7f8ade8e7d8f2cd397a27de9ea645ec5056945a02c7968d1bb2463a8fbeb9680e9627052ea42a4af837a336a7926943c56e2d9f56d500edd78de477ef7d6301b2db7ad2d9aec18de62238e32caadc91ec2606c7ad0d06a512f141047572b8c6126f2adb8a6152559191", 0xcc}, {&(0x7f0000000700)="a6777092099352860b1fcd83833953616cddc04e392b356eb6ad3258a9a0b9c4561b609814621c321c8afd5716e04d01b2c052c2a732ccde74144d9659f55e71a8ea095277dca7346afae88fe373b7b3c5", 0x51}, {&(0x7f0000001c80)="36aa82fa96c31cf7a7b99240361451788166303fee50826aae17caa46fe60890d649ed71ba4404b97f6a38ffe523ba26830682110cbc0facf125031788dfece38621408fb7880264b5d827c205b3b275d4ed67042fa22a29062cec5349d8c034cd005108576bb33053c8870b2fce240d05ea1f497057a7a8bcfb18c866a977fe2abe50d09a2f28f2b0bc697ee8c62e52410dc4e2bdfaea23ff8e373ba9d67b644a593f5acd8549319d99082f7b3707b6cb59696a25ff8b642b654fe15fc3fa206d7c9ba9c358f2f4c000e1903a181d1d35088b03ce463caf8994e087810576329decdf", 0xe3}], 0x7, &(0x7f0000001e00)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0x3, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x80000001}]}, @lsrr={0x83, 0x7, 0x31, [@dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_prespec={0x44, 0x14, 0x85, 0x3, 0x5, [{@loopback, 0x6}, {@remote, 0x9}]}, @ssrr={0x89, 0xb, 0xf, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xf0, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xfc, 0x0, 0x2, [0x200, 0x1, 0xd72a, 0x0, 0xfff]}, @lsrr={0x83, 0xf, 0x57, [@dev={0xac, 0x14, 0x14, 0xe}, @empty, @dev={0xac, 0x14, 0x14, 0x25}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa143}}], 0xc0}, 0x20000080) 1.678680172s ago: executing program 3 (id=1047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x1, 0x76, 0xb75e, 0x5a3e, 0x4, 0x1c}}, @common=@inet=@multiport={{0x50}, {0x0, 0x40, [0x0, 0xffff, 0x0, 0x4e25, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xdf]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa52531e464ddd335, 0x0, 0xfffffffd, 0x3, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x5c, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000380)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.617484542s ago: executing program 3 (id=1048): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1, 0x7fff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000100)={0x1, 0x0, 0x200000000000006}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYBLOB="cf"]) (fail_nth: 1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x540, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0xc2) eventfd2(0xffffffff, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000300)={0x1, 0x8000000, 0x1, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7a, 0x3000, 0x0, r6}) mount(0x0, 0x0, 0x0, 0x8080, &(0x7f00000001c0)='discard') 853.594356ms ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 241.448933ms ago: executing program 3 (id=1049): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x4000000) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1, 0x7fff, 0x0) r6 = socket(0x1e, 0x6, 0x5) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000100)={0x1, 0x7cb, 0x200000000000006}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x540, 0x0) r8 = eventfd(0xc2) eventfd2(0xffffffff, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x1, 0x8000000, 0x1, r8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7a, 0x3000, 0x0, r8}) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x1, 0x0, {0xa, 0x4e24, 0x0, @empty, 0x8}}}, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="140023800800090081cd000006001b00fcff0000"], 0x30}}, 0x24000040) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000128bd7000fddbdf257a00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900e100000063000000af002a00826240074092000000080211000000ff07000008021100000002000000050000000600080211000000ff7f000000ffffffffffff090000000008021100000104000000000802110000010600000004ffffffffffff060000000408021100000108000000040607330600070025030188958c100708c93b42c5389ce0c0f3c323503582831f00045008021100000113ffffff02000000ff0000000802110000017a0000003e01000602070000"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mount(0x0, 0x0, 0x0, 0x8080, &(0x7f00000001c0)='discard') 0s ago: executing program 5 (id=998): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000041}, 0x20045880) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x11, 0xc4, {0xc4, 0x22, "038d41af4552cdd1909fffea25c11c16d796344afedcc76ead50d51f977e684ecdbd2e6d83151b3a37eca41c57895c979e98aae38e74fa0d32aaef09900aaa581375f7c5fb2ed85ff21f4601f7fcd7cb478978d90cb60daecd797a34841c438e240380110df237a76787dcb9c5446f57984f4c6b18b5bb49a21cf36a3aaa2f5b40363ceb7b81c082c59bbc2cb1bd7040845a37f2beea756fcd8df6c111fa193b926088588751652c67be0372c0a1e86c92891a45038eae883824e46d5992ea7632a2"}}, &(0x7f0000000500)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "20fc61c5ec9c8848453b1b4bb7d844b719d5cdc18785733542215c6cca5703b6971a3a0b5025e6086922ad6c2bdddf71c6759594415d515de25df6872aa8e9be5a6fe343001df01bda367f9d8686b7c6d9a54a5252966609002e29d9e3f13d4197c0ac288de6f464c2575f71cd26763d1548457b5dba3de77e9b5acbbc74a782a267df10bd85256cce833c51214e9aa508fa5c5b6cf4eb1fe8299539e9b8e3ccab80bcb7d2b8cd3f4e36515d5a01403fdc"}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xe, "d7"}, @main=@item_012={0x1, 0x0, 0xb, '\n'}, @local=@item_012={0x2, 0x2, 0x0, "91c1"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x2d6}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x20, 0x10, 0x7, "213796413580d5"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x81, "83ddf50a49f0170f5642f25bb2d6e6e2cf02e07510accbc02e6936a506cb32661f58b73c82b56eb2ef749b5817c16fe835a9709bb64891d76e7ca3eb68f38248b4511e32af1b1e35b46455ee73a8f59bacced8cb2c710bbb7c3a4f6003a3b4dce5710be700b4523f82bf6f02d0f80c799fe75c705cc5ec96741c6c35a8fa46802e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf250000740057333f559dd1ddfa65de9f57772bc5ccb29abd528ba5358c807fdc121239e8f6ec248f4e38f562bab828afecf45cd17218addce849721fe8e466691a", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): sing ep0 maxpacket: 8 [ 90.020622][ T2303] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.024341][ T2303] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.027719][ T2303] usb 7-1: config 0 interface 0 has no altsetting 0 [ 90.030658][ T2303] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.033827][ T2303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.039253][ T2303] usb 7-1: config 0 descriptor?? [ 90.105781][ T10] usb 8-1: USB disconnect, device number 12 [ 90.108816][ T10] em28xx 8-1:0.0: Disconnecting em28xx [ 90.110856][ T10] em28xx 8-1:0.0: Closing input extension [ 90.127156][ T10] em28xx 8-1:0.0: Freeing device [ 90.426847][ T7575] NILFS (nbd3): device size too small [ 90.446851][ T2303] usbhid 7-1:0.0: can't add hid device: -71 [ 90.456789][ T2303] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 90.462068][ T2303] usb 7-1: USB disconnect, device number 6 [ 90.654131][ T7584] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 90.672852][ T7584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7584 comm=syz.4.396 [ 90.695158][ T7588] xt_hashlimit: size too large, truncated to 1048576 [ 90.714531][ T7590] "syz.4.399" (7590) uses obsolete ecb(arc4) skcipher [ 90.826254][ T7595] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 91.007265][ T860] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 91.028757][ T7602] NILFS (nbd3): device size too small [ 91.089388][ T40] audit: type=1400 audit(1772405277.020:429): avc: denied { shutdown } for pid=7599 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.098952][ T40] audit: type=1400 audit(1772405277.020:430): avc: denied { bind } for pid=7599 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.107688][ T7605] netlink: 'syz.2.402': attribute type 13 has an invalid length. [ 91.117697][ T7605] gretap0: refused to change device tx_queue_len [ 91.315688][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 91.321388][ T7616] erofs (device loop3): cannot find valid erofs superblock [ 91.340105][ T7616] bond_slave_0: Device is already in use. [ 91.555895][ T7618] xt_hashlimit: size too large, truncated to 1048576 [ 91.646338][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 91.646353][ T40] audit: type=1400 audit(1772405277.570:432): avc: denied { execute } for pid=7620 comm="syz.4.410" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.659220][ T24] usb 5-1: USB disconnect, device number 7 [ 91.659293][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 91.664900][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 91.698761][ T7624] fuse: Unknown parameter '0000000000000000000000500000000000000000000' [ 91.702871][ T7624] fuse: Unknown parameter 'À' [ 91.955526][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.960618][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.966016][ T7638] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 91.969624][ T7638] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 91.972806][ T7638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.415'. [ 91.976920][ T7638] NCSI netlink: No device for ifindex 0 [ 92.017099][ T39] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 92.167064][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 92.170810][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25956, setting to 64 [ 92.176208][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.179406][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.182279][ T39] usb 8-1: Product: syz [ 92.183828][ T39] usb 8-1: Manufacturer: syz [ 92.185729][ T39] usb 8-1: SerialNumber: syz [ 92.190793][ T39] usb 8-1: config 0 descriptor?? [ 92.194943][ T39] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.197102][ T6846] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.199145][ T39] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 92.347203][ T6846] usb 7-1: Using ep0 maxpacket: 16 [ 92.351151][ T6846] usb 7-1: config 5 has an invalid interface number: 48 but max is 2 [ 92.354777][ T6846] usb 7-1: config 5 has an invalid interface number: 105 but max is 2 [ 92.358617][ T6846] usb 7-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 92.363190][ T6846] usb 7-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 92.366958][ T6846] usb 7-1: config 5 has no interface number 0 [ 92.369797][ T6846] usb 7-1: config 5 has no interface number 1 [ 92.373345][ T6846] usb 7-1: config 5 interface 48 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 92.378886][ T6846] usb 7-1: config 5 interface 48 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 92.384754][ T6846] usb 7-1: config 5 interface 48 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 92.389517][ T6846] usb 7-1: config 5 interface 105 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 92.394177][ T6846] usb 7-1: config 5 interface 105 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 92.399026][ T6846] usb 7-1: config 5 interface 105 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 92.403514][ T6846] usb 7-1: config 5 interface 105 altsetting 4 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.407849][ T6846] usb 7-1: config 5 interface 105 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 92.412388][ T6846] usb 7-1: config 5 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 92.417306][ T6846] usb 7-1: config 5 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 92.422080][ T6846] usb 7-1: config 5 interface 105 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 92.427804][ T6846] usb 7-1: config 5 interface 48 has no altsetting 0 [ 92.430616][ T6846] usb 7-1: config 5 interface 105 has no altsetting 0 [ 92.435984][ T6846] usb 7-1: Dual-Role OTG device on HNP port [ 92.439174][ T6846] usb 7-1: New USB device found, idVendor=2357, idProduct=0100, bcdDevice=42.a3 [ 92.443401][ T6846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.446781][ T6846] usb 7-1: Product: syz [ 92.448631][ T6846] usb 7-1: Manufacturer: syz [ 92.450611][ T6846] usb 7-1: SerialNumber: syz [ 92.477165][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.627860][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 92.634556][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.641299][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.645468][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.648782][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.652709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.658899][ T24] usb 5-1: config 0 descriptor?? [ 92.805966][ T39] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 93.017172][ T5939] Bluetooth: hci4: command 0x0405 tx timeout [ 93.069027][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 93.071474][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 93.078954][ T24] usb 5-1: USB disconnect, device number 8 [ 93.233717][ T39] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.236579][ T39] em28xx 8-1:0.0: board has no eeprom [ 93.297104][ T39] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.300150][ T39] em28xx 8-1:0.0: dvb set to bulk mode. [ 93.302219][ T34] em28xx 8-1:0.0: Binding DVB extension [ 93.306847][ T39] usb 8-1: USB disconnect, device number 13 [ 93.309509][ T39] em28xx 8-1:0.0: Disconnecting em28xx [ 93.337915][ T34] em28xx 8-1:0.0: Registering input extension [ 93.340270][ T39] em28xx 8-1:0.0: Closing input extension [ 93.346516][ T39] em28xx 8-1:0.0: Freeing device [ 93.632291][ T7659] NILFS (nbd0): device size too small [ 93.709539][ T7662] "syz.4.418" (7662) uses obsolete ecb(arc4) skcipher [ 93.778214][ T7665] xt_hashlimit: size too large, truncated to 1048576 [ 93.877095][ T40] audit: type=1400 audit(1772405279.800:433): avc: denied { ioctl } for pid=7670 comm="syz.0.421" path="socket:[19763]" dev="sockfs" ino=19763 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.893304][ T40] audit: type=1400 audit(1772405279.800:434): avc: denied { validate_trans } for pid=7670 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 93.913503][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 93.926089][ T40] audit: type=1400 audit(1772405279.850:435): avc: denied { remount } for pid=7674 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.974292][ T7677] lo speed is unknown, defaulting to 1000 [ 93.995574][ T7678] lo speed is unknown, defaulting to 1000 [ 94.070583][ T40] audit: type=1400 audit(1772405280.000:436): avc: denied { listen } for pid=7676 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.110537][ T7684] xt_hashlimit: max too large, truncated to 1048576 [ 94.118466][ T7684] ufs: You didn't specify the type of your ufs filesystem [ 94.118466][ T7684] [ 94.118466][ T7684] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 94.118466][ T7684] [ 94.118466][ T7684] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 94.130151][ T7684] ufs: failed to set blocksize [ 94.345831][ T7693] net_ratelimit: 9 callbacks suppressed [ 94.345851][ T7693] openvswitch: netlink: Flow actions attr not present in new flow. [ 94.477254][ T39] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 94.606695][ T40] audit: type=1400 audit(1772405280.530:437): avc: denied { ioctl } for pid=7701 comm="syz.4.430" path="socket:[18143]" dev="sockfs" ino=18143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.648694][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 94.654796][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.666140][ T39] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.670542][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.674331][ T39] usb 8-1: Product: syz [ 94.676472][ T39] usb 8-1: Manufacturer: syz [ 94.683455][ T39] usb 8-1: SerialNumber: syz [ 94.705146][ T39] usb 8-1: config 0 descriptor?? [ 94.710221][ T39] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.714354][ T39] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 94.734608][ T40] audit: type=1400 audit(1772405280.660:438): avc: denied { ioctl } for pid=7701 comm="syz.4.430" path="socket:[17262]" dev="sockfs" ino=17262 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.961758][ T7710] FAULT_INJECTION: forcing a failure. [ 94.961758][ T7710] name failslab, interval 1, probability 0, space 0, times 1 [ 94.967397][ T7710] CPU: 2 UID: 0 PID: 7710 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT(full) [ 94.967419][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.967429][ T7710] Call Trace: [ 94.967435][ T7710] [ 94.967441][ T7710] dump_stack_lvl+0x100/0x190 [ 94.967485][ T7710] should_fail_ex.cold+0x5/0xa [ 94.967506][ T7710] should_failslab+0xc2/0x120 [ 94.967532][ T7710] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 94.967555][ T7710] ? __alloc_skb+0x140/0x710 [ 94.967579][ T7710] __alloc_skb+0x140/0x710 [ 94.967593][ T7710] ? __alloc_skb+0x5b7/0x710 [ 94.967608][ T7710] ? __pfx___alloc_skb+0x10/0x10 [ 94.967631][ T7710] alloc_skb_with_frags+0xe0/0x810 [ 94.967650][ T7710] ? __might_fault+0xc5/0x140 [ 94.967671][ T7710] ? __might_fault+0xc5/0x140 [ 94.967698][ T7710] sock_alloc_send_pskb+0x801/0x980 [ 94.967725][ T7710] ? _copy_from_iter+0x270/0x1690 [ 94.967762][ T7710] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 94.967786][ T7710] ? find_held_lock+0x2b/0x80 [ 94.967807][ T7710] ? dev_get_by_index+0x180/0x380 [ 94.967824][ T7710] ? dev_get_by_index+0x180/0x380 [ 94.967847][ T7710] packet_sendmsg+0x20e0/0x53c0 [ 94.967879][ T7710] ? avc_has_perm+0xca/0x1e0 [ 94.967907][ T7710] ? __lock_acquire+0x4a5/0x2630 [ 94.967937][ T7710] ? sock_has_perm+0x258/0x2f0 [ 94.967961][ T7710] ? __pfx_sock_has_perm+0x10/0x10 [ 94.967989][ T7710] ? __pfx_packet_sendmsg+0x10/0x10 [ 94.968024][ T7710] __sys_sendto+0x4aa/0x520 [ 94.968049][ T7710] ? __pfx___sys_sendto+0x10/0x10 [ 94.968092][ T7710] ? ksys_write+0x1ac/0x250 [ 94.968115][ T7710] ? __pfx_ksys_write+0x10/0x10 [ 94.968141][ T7710] __x64_sys_sendto+0xe0/0x1c0 [ 94.968164][ T7710] ? do_syscall_64+0x95/0xf80 [ 94.968181][ T7710] ? lockdep_hardirqs_on+0x78/0x100 [ 94.968197][ T7710] do_syscall_64+0x106/0xf80 [ 94.968213][ T7710] ? clear_bhb_loop+0x40/0x90 [ 94.968232][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.968249][ T7710] RIP: 0033:0x7fa90359c799 [ 94.968262][ T7710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.968277][ T7710] RSP: 002b:00007fa904415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.968293][ T7710] RAX: ffffffffffffffda RBX: 00007fa903815fa0 RCX: 00007fa90359c799 [ 94.968303][ T7710] RDX: 0000000000000024 RSI: 00002000000007c0 RDI: 0000000000000003 [ 94.968313][ T7710] RBP: 00007fa904415090 R08: 0000200000002400 R09: 0000000000000014 [ 94.968322][ T7710] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 94.968331][ T7710] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 94.968354][ T7710] [ 94.985001][ T6846] usb 7-1: USB disconnect, device number 7 [ 95.183800][ T7718] netlink: 'syz.2.434': attribute type 9 has an invalid length. [ 95.267890][ T40] audit: type=1400 audit(1772405281.200:439): avc: denied { read } for pid=7719 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.276300][ T40] audit: type=1400 audit(1772405281.200:440): avc: denied { setopt } for pid=7719 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.287086][ T40] audit: type=1400 audit(1772405281.200:441): avc: denied { setopt } for pid=7719 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.321204][ T7730] overlayfs: missing 'lowerdir' [ 95.327583][ T39] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 95.371837][ T7736] FAULT_INJECTION: forcing a failure. [ 95.371837][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.376345][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT(full) [ 95.376361][ T7736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.376367][ T7736] Call Trace: [ 95.376371][ T7736] [ 95.376377][ T7736] dump_stack_lvl+0x100/0x190 [ 95.376398][ T7736] should_fail_ex.cold+0x5/0xa [ 95.376412][ T7736] _copy_from_iter+0x1f4/0x1690 [ 95.376434][ T7736] ? __pfx__copy_from_iter+0x10/0x10 [ 95.376450][ T7736] ? _copy_from_iter+0x270/0x1690 [ 95.376469][ T7736] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 95.376488][ T7736] skb_copy_datagram_from_iter+0x11f/0x720 [ 95.376510][ T7736] packet_sendmsg+0x2476/0x53c0 [ 95.376527][ T7736] ? avc_has_perm+0xca/0x1e0 [ 95.376549][ T7736] ? sock_has_perm+0x258/0x2f0 [ 95.376567][ T7736] ? __pfx_sock_has_perm+0x10/0x10 [ 95.376586][ T7736] ? __pfx_packet_sendmsg+0x10/0x10 [ 95.376609][ T7736] __sys_sendto+0x4aa/0x520 [ 95.376634][ T7736] ? __pfx___sys_sendto+0x10/0x10 [ 95.376677][ T7736] ? ksys_write+0x1ac/0x250 [ 95.376702][ T7736] ? __pfx_ksys_write+0x10/0x10 [ 95.376730][ T7736] __x64_sys_sendto+0xe0/0x1c0 [ 95.376756][ T7736] ? do_syscall_64+0x95/0xf80 [ 95.376773][ T7736] ? lockdep_hardirqs_on+0x78/0x100 [ 95.376788][ T7736] do_syscall_64+0x106/0xf80 [ 95.376803][ T7736] ? clear_bhb_loop+0x40/0x90 [ 95.376823][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.376842][ T7736] RIP: 0033:0x7fa90359c799 [ 95.376860][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.376876][ T7736] RSP: 002b:00007fa904415028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.376895][ T7736] RAX: ffffffffffffffda RBX: 00007fa903815fa0 RCX: 00007fa90359c799 [ 95.376906][ T7736] RDX: 0000000000000024 RSI: 00002000000007c0 RDI: 0000000000000003 [ 95.376915][ T7736] RBP: 00007fa904415090 R08: 0000200000002400 R09: 0000000000000014 [ 95.376930][ T7736] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 95.376937][ T7736] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 95.376951][ T7736] [ 95.625719][ T7757] overlayfs: missing 'lowerdir' [ 95.680781][ T7761] FAULT_INJECTION: forcing a failure. [ 95.680781][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.686550][ T7761] CPU: 3 UID: 0 PID: 7761 Comm: syz.2.451 Not tainted syzkaller #0 PREEMPT(full) [ 95.686590][ T7761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.686600][ T7761] Call Trace: [ 95.686608][ T7761] [ 95.686615][ T7761] dump_stack_lvl+0x100/0x190 [ 95.686649][ T7761] should_fail_ex.cold+0x5/0xa [ 95.686672][ T7761] _copy_from_iter+0x1f4/0x1690 [ 95.686704][ T7761] ? __pfx__copy_from_iter+0x10/0x10 [ 95.686729][ T7761] ? _copy_from_iter+0x270/0x1690 [ 95.686757][ T7761] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 95.686788][ T7761] skb_copy_datagram_from_iter+0x11f/0x720 [ 95.686821][ T7761] packet_sendmsg+0x2476/0x53c0 [ 95.686848][ T7761] ? avc_has_perm+0xca/0x1e0 [ 95.686884][ T7761] ? sock_has_perm+0x258/0x2f0 [ 95.686911][ T7761] ? __pfx_sock_has_perm+0x10/0x10 [ 95.686939][ T7761] ? __pfx_packet_sendmsg+0x10/0x10 [ 95.686976][ T7761] __sys_sendto+0x4aa/0x520 [ 95.687005][ T7761] ? __pfx___sys_sendto+0x10/0x10 [ 95.687051][ T7761] ? ksys_write+0x1ac/0x250 [ 95.687078][ T7761] ? __pfx_ksys_write+0x10/0x10 [ 95.687107][ T7761] __x64_sys_sendto+0xe0/0x1c0 [ 95.687132][ T7761] ? do_syscall_64+0x95/0xf80 [ 95.687151][ T7761] ? lockdep_hardirqs_on+0x78/0x100 [ 95.687170][ T7761] do_syscall_64+0x106/0xf80 [ 95.687189][ T7761] ? clear_bhb_loop+0x40/0x90 [ 95.687212][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.687230][ T7761] RIP: 0033:0x7ff281f9c799 [ 95.687246][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.687261][ T7761] RSP: 002b:00007ff282df8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.687280][ T7761] RAX: ffffffffffffffda RBX: 00007ff282215fa0 RCX: 00007ff281f9c799 [ 95.687291][ T7761] RDX: 0000000000000024 RSI: 00002000000007c0 RDI: 0000000000000003 [ 95.687302][ T7761] RBP: 00007ff282df8090 R08: 0000200000002400 R09: 0000000000000014 [ 95.687313][ T7761] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 95.687323][ T7761] R13: 00007ff282216038 R14: 00007ff282215fa0 R15: 00007ffd8375d1b8 [ 95.687346][ T7761] [ 95.689871][ T7763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7763 comm=syz.0.452 [ 95.735045][ T39] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.762401][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'. [ 95.764248][ T39] em28xx 8-1:0.0: board has no eeprom [ 95.771636][ T7768] ip6gre2: entered promiscuous mode [ 95.785525][ T7768] ip6gre2: entered allmulticast mode [ 95.846609][ T39] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 95.850199][ T39] em28xx 8-1:0.0: dvb set to bulk mode. [ 95.854354][ T5971] em28xx 8-1:0.0: Binding DVB extension [ 95.859931][ T39] usb 8-1: USB disconnect, device number 14 [ 95.863371][ T39] em28xx 8-1:0.0: Disconnecting em28xx [ 95.891437][ T5971] em28xx 8-1:0.0: Registering input extension [ 95.894324][ T39] em28xx 8-1:0.0: Closing input extension [ 95.909769][ T39] em28xx 8-1:0.0: Freeing device [ 96.148000][ T7781] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 96.170246][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.188540][ T7781] bond2: (slave geneve2): making interface the new active one [ 96.193706][ T7781] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 96.225676][ T7784] lo speed is unknown, defaulting to 1000 [ 96.238419][ T7786] netlink: 'syz.2.460': attribute type 8 has an invalid length. [ 96.241922][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 96.250374][ T7786] bond0: entered promiscuous mode [ 96.252710][ T7786] bond_slave_0: entered promiscuous mode [ 96.255546][ T7786] bond_slave_1: entered promiscuous mode [ 96.261232][ T7786] bond0: left promiscuous mode [ 96.263539][ T7786] bond_slave_0: left promiscuous mode [ 96.266134][ T7786] bond_slave_1: left promiscuous mode [ 96.275173][ T7789] FAULT_INJECTION: forcing a failure. [ 96.275173][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 96.280637][ T7789] CPU: 2 UID: 0 PID: 7789 Comm: syz.3.461 Not tainted syzkaller #0 PREEMPT(full) [ 96.280654][ T7789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.280660][ T7789] Call Trace: [ 96.280665][ T7789] [ 96.280670][ T7789] dump_stack_lvl+0x100/0x190 [ 96.280691][ T7789] should_fail_ex.cold+0x5/0xa [ 96.280706][ T7789] should_failslab+0xc2/0x120 [ 96.280725][ T7789] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 96.280740][ T7789] ? skb_clone+0x190/0x400 [ 96.280754][ T7789] skb_clone+0x190/0x400 [ 96.280766][ T7789] maybe_deliver+0xd4/0x180 [ 96.280785][ T7789] br_flood+0x193/0x650 [ 96.280804][ T7789] br_dev_xmit+0x10b0/0x1880 [ 96.280819][ T7789] ? __pfx_br_dev_xmit+0x10/0x10 [ 96.280833][ T7789] ? find_held_lock+0x2b/0x80 [ 96.280846][ T7789] ? dev_queue_xmit_nit+0x72c/0xa60 [ 96.280858][ T7789] ? dev_queue_xmit_nit+0x72c/0xa60 [ 96.280871][ T7789] ? dev_queue_xmit_nit+0x731/0xa60 [ 96.280886][ T7789] dev_hard_start_xmit+0x121/0x7d0 [ 96.280905][ T7789] __dev_queue_xmit+0x32c1/0x4800 [ 96.280922][ T7789] ? find_held_lock+0x2b/0x80 [ 96.280936][ T7789] ? __might_fault+0xc5/0x140 [ 96.280956][ T7789] ? __pfx___dev_queue_xmit+0x10/0x10 [ 96.280974][ T7789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.280990][ T7789] ? __vlan_get_protocol_offset+0x256/0x350 [ 96.281011][ T7789] ? skb_partial_csum_set+0x202/0x2a0 [ 96.281027][ T7789] ? __virtio_net_hdr_to_skb.constprop.0+0x18a/0x13d0 [ 96.281047][ T7789] ? __pfx___virtio_net_hdr_to_skb.constprop.0+0x10/0x10 [ 96.281065][ T7789] packet_xmit+0x243/0x310 [ 96.281103][ T7789] packet_sendmsg+0x32f4/0x53c0 [ 96.281127][ T7789] ? avc_has_perm+0xca/0x1e0 [ 96.281156][ T7789] ? sock_has_perm+0x258/0x2f0 [ 96.281178][ T7789] ? __pfx_sock_has_perm+0x10/0x10 [ 96.281201][ T7789] ? __pfx_packet_sendmsg+0x10/0x10 [ 96.281230][ T7789] __sys_sendto+0x4aa/0x520 [ 96.281253][ T7789] ? __pfx___sys_sendto+0x10/0x10 [ 96.281289][ T7789] ? ksys_write+0x1ac/0x250 [ 96.281309][ T7789] ? __pfx_ksys_write+0x10/0x10 [ 96.281331][ T7789] __x64_sys_sendto+0xe0/0x1c0 [ 96.281352][ T7789] ? do_syscall_64+0x95/0xf80 [ 96.281367][ T7789] ? lockdep_hardirqs_on+0x78/0x100 [ 96.281381][ T7789] do_syscall_64+0x106/0xf80 [ 96.281395][ T7789] ? clear_bhb_loop+0x40/0x90 [ 96.281412][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.281426][ T7789] RIP: 0033:0x7efc7499c799 [ 96.281440][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.281453][ T7789] RSP: 002b:00007efc75914028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.281468][ T7789] RAX: ffffffffffffffda RBX: 00007efc74c15fa0 RCX: 00007efc7499c799 [ 96.281477][ T7789] RDX: 0000000000000024 RSI: 00002000000007c0 RDI: 0000000000000003 [ 96.281485][ T7789] RBP: 00007efc75914090 R08: 0000200000002400 R09: 0000000000000014 [ 96.281493][ T7789] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 96.281501][ T7789] R13: 00007efc74c16038 R14: 00007efc74c15fa0 R15: 00007ffdc8b50148 [ 96.281520][ T7789] [ 96.341422][ T7792] capability: warning: `syz.0.462' uses deprecated v2 capabilities in a way that may be insecure [ 96.393854][ C2] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 96.402612][ T7792] fuse: Unknown parameter '' [ 96.403533][ C2] sr 2:0:0:0: [sr0] tag#28 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 96.409977][ T7796] xt_NFQUEUE: number of total queues is 0 [ 96.452917][ T7802] loop4: detected capacity change from 0 to 7 [ 96.468029][ T7802] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.471357][ T7802] loop4: partition table partially beyond EOD, truncated [ 96.474837][ T7802] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 96.511997][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 96.555750][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.696621][ T7823] FAULT_INJECTION: forcing a failure. [ 96.696621][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.703015][ T7823] CPU: 2 UID: 0 PID: 7823 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 96.703031][ T7823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.703038][ T7823] Call Trace: [ 96.703042][ T7823] [ 96.703046][ T7823] dump_stack_lvl+0x100/0x190 [ 96.703068][ T7823] should_fail_ex.cold+0x5/0xa [ 96.703083][ T7823] _copy_from_iter+0x1f4/0x1690 [ 96.703105][ T7823] ? __pfx__copy_from_iter+0x10/0x10 [ 96.703121][ T7823] ? _copy_from_iter+0x270/0x1690 [ 96.703140][ T7823] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 96.703160][ T7823] skb_copy_datagram_from_iter+0x11f/0x720 [ 96.703181][ T7823] packet_sendmsg+0x2476/0x53c0 [ 96.703199][ T7823] ? avc_has_perm+0xca/0x1e0 [ 96.703221][ T7823] ? sock_has_perm+0x258/0x2f0 [ 96.703238][ T7823] ? __pfx_sock_has_perm+0x10/0x10 [ 96.703258][ T7823] ? __pfx_packet_sendmsg+0x10/0x10 [ 96.703281][ T7823] __sys_sendto+0x4aa/0x520 [ 96.703299][ T7823] ? __pfx___sys_sendto+0x10/0x10 [ 96.703327][ T7823] ? ksys_write+0x1ac/0x250 [ 96.703345][ T7823] ? __pfx_ksys_write+0x10/0x10 [ 96.703363][ T7823] __x64_sys_sendto+0xe0/0x1c0 [ 96.703380][ T7823] ? do_syscall_64+0x95/0xf80 [ 96.703392][ T7823] ? lockdep_hardirqs_on+0x78/0x100 [ 96.703403][ T7823] do_syscall_64+0x106/0xf80 [ 96.703414][ T7823] ? clear_bhb_loop+0x40/0x90 [ 96.703427][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.703438][ T7823] RIP: 0033:0x7f42dfd9c799 [ 96.703448][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.703458][ T7823] RSP: 002b:00007f42e0bf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.703469][ T7823] RAX: ffffffffffffffda RBX: 00007f42e0015fa0 RCX: 00007f42dfd9c799 [ 96.703476][ T7823] RDX: 0000000000000024 RSI: 00002000000007c0 RDI: 0000000000000003 [ 96.703482][ T7823] RBP: 00007f42e0bf2090 R08: 0000200000002400 R09: 0000000000000014 [ 96.703488][ T7823] R10: 0000000020008040 R11: 0000000000000246 R12: 0000000000000001 [ 96.703495][ T7823] R13: 00007f42e0016038 R14: 00007f42e0015fa0 R15: 00007ffe8811dae8 [ 96.703508][ T7823] [ 96.745546][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 96.745562][ T40] audit: type=1400 audit(1772405282.670:454): avc: denied { remount } for pid=7811 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.877236][ T6846] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.037246][ T6846] usb 7-1: Using ep0 maxpacket: 16 [ 97.059597][ T6846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.064102][ T7853] netlink: zone id is out of range [ 97.066391][ T7853] netlink: zone id is out of range [ 97.068025][ T6846] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.071009][ T7853] netlink: set zone limit has 8 unknown bytes [ 97.071606][ T6846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.079776][ T6846] usb 7-1: Product: syz [ 97.081244][ T6846] usb 7-1: Manufacturer: syz [ 97.083086][ T6846] usb 7-1: SerialNumber: syz [ 97.089898][ T6846] usb 7-1: config 0 descriptor?? [ 97.094949][ T6846] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.099390][ T6846] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 97.120732][ T40] audit: type=1400 audit(1772405283.050:455): avc: denied { mount } for pid=7854 comm="syz.4.481" name="/" dev="hugetlbfs" ino=20008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.127315][ T7863] hugetlbfs: Unknown parameter 'nr' [ 97.131066][ T40] audit: type=1400 audit(1772405283.050:456): avc: denied { remount } for pid=7854 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.140664][ T40] audit: type=1400 audit(1772405283.070:457): avc: denied { unmount } for pid=7049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.149023][ T7865] FAULT_INJECTION: forcing a failure. [ 97.149023][ T7865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.157118][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(full) [ 97.157135][ T7865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.157142][ T7865] Call Trace: [ 97.157146][ T7865] [ 97.157151][ T7865] dump_stack_lvl+0x100/0x190 [ 97.157187][ T7865] should_fail_ex.cold+0x5/0xa [ 97.157201][ T7865] _copy_to_user+0x32/0xd0 [ 97.157219][ T7865] simple_read_from_buffer+0xcb/0x170 [ 97.157238][ T7865] proc_fail_nth_read+0x1af/0x230 [ 97.157255][ T7865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.157271][ T7865] ? rw_verify_area+0xce/0x6d0 [ 97.157286][ T7865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.157301][ T7865] vfs_read+0x1e4/0xb30 [ 97.157319][ T7865] ? __pfx_vfs_read+0x10/0x10 [ 97.157335][ T7865] ? __fget_files+0x215/0x3d0 [ 97.157349][ T7865] ? __fget_files+0x21f/0x3d0 [ 97.157364][ T7865] ksys_read+0x12a/0x250 [ 97.157380][ T7865] ? __pfx_ksys_read+0x10/0x10 [ 97.157401][ T7865] do_syscall_64+0x106/0xf80 [ 97.157413][ T7865] ? clear_bhb_loop+0x40/0x90 [ 97.157426][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.157437][ T7865] RIP: 0033:0x7efc7495cfce [ 97.157447][ T7865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.157458][ T7865] RSP: 002b:00007efc75913fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.157469][ T7865] RAX: ffffffffffffffda RBX: 00007efc759146c0 RCX: 00007efc7495cfce [ 97.157476][ T7865] RDX: 000000000000000f RSI: 00007efc759140a0 RDI: 0000000000000005 [ 97.157482][ T7865] RBP: 00007efc75914090 R08: 0000000000000000 R09: 0000000000000000 [ 97.157488][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.157495][ T7865] R13: 00007efc74c16038 R14: 00007efc74c15fa0 R15: 00007ffdc8b50148 [ 97.157509][ T7865] [ 97.322496][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 97.697284][ T40] audit: type=1400 audit(1772405283.620:458): avc: denied { append } for pid=7890 comm="syz.4.490" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.700916][ T6846] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 97.922011][ T7905] Bluetooth: MGMT ver 1.23 [ 97.925830][ T7905] netlink: 'syz.3.494': attribute type 2 has an invalid length. [ 97.979102][ T7908] NILFS (nbd4): device size too small [ 98.152963][ T40] audit: type=1400 audit(1772405284.080:459): avc: denied { getopt } for pid=7816 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.193227][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 98.196166][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 98.438322][ T7949] binder: 7948:7949 ioctl 40046205 0 returned -22 [ 98.439522][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 98.460386][ T7949] binder: 7948:7949 ioctl c0306201 2000000001c0 returned -11 [ 98.473948][ T7949] XFS (loop4): SB validate failed with error -5. [ 98.530693][ T7959] NILFS (nbd3): device size too small [ 98.625296][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 98.645262][ T7966] syz.4.512 uses obsolete (PF_INET,SOCK_PACKET) [ 98.711673][ T40] audit: type=1400 audit(1772405284.640:460): avc: denied { listen } for pid=7965 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.745245][ T40] audit: type=1400 audit(1772405284.670:461): avc: denied { accept } for pid=7965 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.840687][ T7973] tmpfs: Bad value for 'huge' [ 98.845395][ T7973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.880041][ T40] audit: type=1400 audit(1772405284.810:462): avc: denied { bind } for pid=7975 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.888026][ T40] audit: type=1400 audit(1772405284.810:463): avc: denied { ioctl } for pid=7975 comm="syz.4.515" path="socket:[22041]" dev="sockfs" ino=22041 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.941687][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 99.039882][ T7984] netlink: 60 bytes leftover after parsing attributes in process `syz.3.519'. [ 99.074920][ T7989] NILFS (nbd4): device size too small [ 99.159991][ T7991] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 99.179022][ T6846] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.183931][ T7818] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 99.187976][ T6846] em28xx 7-1:0.0: board has no eeprom [ 99.257209][ T6846] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.260430][ T6846] em28xx 7-1:0.0: dvb set to bulk mode. [ 99.266307][ T5991] em28xx 7-1:0.0: Binding DVB extension [ 99.271734][ T6846] usb 7-1: USB disconnect, device number 8 [ 99.299435][ T6846] em28xx 7-1:0.0: Disconnecting em28xx [ 99.317609][ T5991] em28xx 7-1:0.0: Registering input extension [ 99.320642][ T6846] em28xx 7-1:0.0: Closing input extension [ 99.336739][ T6846] em28xx 7-1:0.0: Freeing device [ 99.571649][ T8034] capability: warning: `syz.3.534' uses 32-bit capabilities (legacy support in use) [ 99.609715][ T8037] xt_hashlimit: size too large, truncated to 1048576 [ 99.661934][ T8039] netlink: 'syz.3.535': attribute type 9 has an invalid length. [ 99.764861][ T5284] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 99.879720][ T8062] efs: device does not support 512 byte blocks [ 99.885883][ T8062] device does not support 512 byte blocks [ 99.885883][ T8062] [ 99.938966][ T8066] openvswitch: netlink: Flow key attr not present in new flow. [ 100.090227][ T8006] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.442074][ T8128] syz.2.561 (8128): drop_caches: 0 [ 100.476488][ T8130] autofs: Unknown parameter 'Y`§+í«é¯'V' [ 100.601119][ T8140] hub 2-0:1.0: USB hub found [ 100.602902][ T8140] hub 2-0:1.0: 2 ports detected [ 100.712510][ T8159] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 100.724507][ T8149] nbd: device at index 64 is going down [ 100.730038][ T8159] cramfs: wrong magic [ 100.739549][ T8159] Cannot find del_set index 3 as target [ 100.802036][ T5926] udevd[5926]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.813526][ T8172] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 100.816937][ T8172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.842520][ T5926] udevd[5926]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.877454][ T5991] IPVS: starting estimator thread 0... [ 100.945322][ T8187] can: request_module (can-proto-3) failed. [ 100.977173][ T8182] IPVS: using max 42 ests per chain, 100800 per kthread [ 100.980414][ T8204] __nla_validate_parse: 5 callbacks suppressed [ 100.980425][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 100.986087][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 101.202152][ T8225] "syz.4.591" (8225) uses obsolete ecb(arc4) skcipher [ 101.214689][ T8226] raw_sendmsg: syz.2.588 forgot to set AF_INET. Fix it! [ 101.252891][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 101.954381][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 101.962961][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 101.962972][ T40] audit: type=1400 audit(1772405287.890:478): avc: denied { watch } for pid=8230 comm="syz.0.592" path="/163/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.972698][ T40] audit: type=1400 audit(1772405287.890:479): avc: denied { watch_sb } for pid=8230 comm="syz.0.592" path="/163/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.067408][ T8234] NILFS (nbd4): device size too small [ 102.225345][ T8240] erspan1: entered promiscuous mode [ 102.321184][ T40] audit: type=1400 audit(1772405288.250:480): avc: denied { write } for pid=8241 comm="syz.4.596" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.326030][ T8242] binder_alloc: 8241: binder_alloc_buf size 4294968240 failed, no address space [ 102.330157][ T40] audit: type=1400 audit(1772405288.250:481): avc: denied { map } for pid=8241 comm="syz.4.596" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.334838][ T8242] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 102.341740][ T40] audit: type=1400 audit(1772405288.250:482): avc: denied { call } for pid=8241 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.516940][ T5284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 102.520707][ T5284] CPU: 2 UID: 0 PID: 5284 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.520742][ T5284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.520755][ T5284] Workqueue: hci4 hci_rx_work [ 102.520808][ T5284] Call Trace: [ 102.520816][ T5284] [ 102.520823][ T5284] dump_stack_lvl+0x100/0x190 [ 102.520852][ T5284] sysfs_warn_dup.cold+0x1c/0x28 [ 102.520876][ T5284] sysfs_create_dir_ns+0x24b/0x2b0 [ 102.520898][ T5284] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 102.520917][ T5284] ? find_held_lock+0x2b/0x80 [ 102.520940][ T5284] ? kobject_add_internal+0x25f/0x930 [ 102.520959][ T5284] ? kobject_add_internal+0x25f/0x930 [ 102.520979][ T5284] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.520997][ T5284] kobject_add_internal+0x2c8/0x930 [ 102.521019][ T5284] kobject_add+0x16a/0x1e0 [ 102.521086][ T5284] ? __pfx_kobject_add+0x10/0x10 [ 102.521108][ T5284] ? class_to_subsys+0x10f/0x150 [ 102.521146][ T5284] ? kobject_put+0xb9/0x640 [ 102.521166][ T5284] ? _raw_spin_unlock+0x28/0x50 [ 102.521199][ T5284] device_add+0x294/0x1950 [ 102.521221][ T5284] ? __pfx_dev_set_name+0x10/0x10 [ 102.521234][ T5284] ? __pfx_device_add+0x10/0x10 [ 102.521254][ T5284] ? mgmt_send_event_skb+0x2fb/0x460 [ 102.521284][ T5284] hci_conn_add_sysfs+0x1a3/0x260 [ 102.521301][ T5284] le_conn_complete_evt+0x11cb/0x1f40 [ 102.521329][ T5284] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 102.521357][ T5284] hci_le_conn_complete_evt+0x23c/0x3a0 [ 102.521381][ T5284] ? skb_pull_data+0x15f/0x1e0 [ 102.521404][ T5284] hci_le_meta_evt+0x34a/0x5f0 [ 102.521419][ T5284] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 102.521449][ T5284] hci_event_packet+0x682/0x11c0 [ 102.521472][ T5284] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 102.521487][ T5284] ? __pfx_hci_event_packet+0x10/0x10 [ 102.521513][ T5284] ? kcov_remote_start+0x374/0x660 [ 102.521534][ T5284] ? lockdep_hardirqs_on+0x78/0x100 [ 102.521554][ T5284] hci_rx_work+0x451/0xfc0 [ 102.521580][ T5284] process_one_work+0x9d7/0x1920 [ 102.521605][ T5284] ? __pfx_process_one_work+0x10/0x10 [ 102.521626][ T5284] ? __pfx_hci_rx_work+0x10/0x10 [ 102.521649][ T5284] worker_thread+0x5da/0xe40 [ 102.521670][ T5284] ? __pfx_worker_thread+0x10/0x10 [ 102.521685][ T5284] ? kthread+0x13a/0x450 [ 102.521699][ T5284] ? __pfx_worker_thread+0x10/0x10 [ 102.521713][ T5284] kthread+0x370/0x450 [ 102.521726][ T5284] ? __pfx_kthread+0x10/0x10 [ 102.521741][ T5284] ret_from_fork+0x754/0xd80 [ 102.521757][ T5284] ? __pfx_ret_from_fork+0x10/0x10 [ 102.521775][ T5284] ? __switch_to+0x7b4/0x1120 [ 102.521798][ T5284] ? __pfx_kthread+0x10/0x10 [ 102.521812][ T5284] ret_from_fork_asm+0x1a/0x30 [ 102.521841][ T5284] [ 102.521879][ T5284] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.629527][ T5284] Bluetooth: hci4: failed to register connection device [ 103.014409][ T8259] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 103.072425][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 103.080094][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 104.113736][ T8215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.151895][ T8270] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:127 [ 104.214707][ T8281] lo speed is unknown, defaulting to 1000 [ 104.427097][ T5971] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.557225][ T5971] usb 5-1: device descriptor read/64, error -71 [ 104.673921][ T8311] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 104.710154][ T8313] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 104.721889][ T8313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.741150][ T8313] vlan2: entered promiscuous mode [ 104.743182][ T8313] bond2: entered promiscuous mode [ 104.744999][ T8313] vlan2: entered allmulticast mode [ 104.746756][ T8313] bond2: entered allmulticast mode [ 104.810355][ T8325] overlay: ./file1 is not a directory [ 104.817096][ T5971] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.882293][ T40] audit: type=1400 audit(2000000001.859:483): avc: denied { mounton } for pid=8332 comm="syz.4.622" path="/96/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 104.927985][ T8338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.623'. [ 104.957483][ T5971] usb 5-1: device descriptor read/64, error -71 [ 105.068453][ T5971] usb usb5-port1: attempt power cycle [ 105.073393][ T8338] syz.4.623 (8338): drop_caches: 2 [ 105.376334][ T40] audit: type=1400 audit(2000000002.349:484): avc: denied { map } for pid=8357 comm="syz.2.628" path="socket:[22886]" dev="sockfs" ino=22886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 105.380579][ T8367] NILFS (nbd3): device size too small [ 105.395577][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.4.631'. [ 105.401185][ T8369] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 105.402677][ T40] audit: type=1400 audit(2000000002.379:485): avc: denied { create } for pid=8365 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.424235][ T40] audit: type=1400 audit(2000000002.379:486): avc: denied { bind } for pid=8365 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.427319][ T5971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.437072][ T40] audit: type=1400 audit(2000000002.379:487): avc: denied { setopt } for pid=8365 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.453577][ T5971] usb 5-1: device descriptor read/8, error -71 [ 105.470286][ T8374] SELinux: syz.4.634 (8374) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.675683][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.637'. [ 105.717114][ T5971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 105.737702][ T5971] usb 5-1: device descriptor read/8, error -71 [ 105.784984][ T8394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8394 comm=syz.3.638 [ 105.858127][ T5971] usb usb5-port1: unable to enumerate USB device [ 106.047193][ T5991] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 106.087168][ T6846] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 106.199502][ T5991] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.204359][ T5991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.208465][ T5991] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 106.212422][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.218824][ T5991] usb 8-1: config 0 descriptor?? [ 106.225946][ T5991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 106.229554][ T5991] dvb-usb: bulk message failed: -22 (3/0) [ 106.236438][ T5991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.241521][ T5991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 106.246025][ T5991] usb 8-1: media controller created [ 106.252515][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.260356][ T6846] usb 7-1: config 0 interface 0 has no altsetting 0 [ 106.267642][ T6846] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.271620][ T6846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.275139][ T6846] usb 7-1: Product: syz [ 106.283311][ T5991] dvb-usb: bulk message failed: -22 (6/0) [ 106.286088][ T5991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 106.289235][ T6846] usb 7-1: Manufacturer: syz [ 106.291275][ T6846] usb 7-1: SerialNumber: syz [ 106.299565][ T5991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input20 [ 106.306087][ T6846] usb 7-1: config 0 descriptor?? [ 106.316902][ T5991] dvb-usb: schedule remote query interval to 150 msecs. [ 106.320842][ T5991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 106.479238][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 106.482076][ T6846] dvb-usb: error while querying for an remote control event. [ 106.560414][ T2303] usb 7-1: USB disconnect, device number 9 [ 106.637101][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 106.639147][ T6846] dvb-usb: error while querying for an remote control event. [ 106.807154][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 106.809206][ T6846] dvb-usb: error while querying for an remote control event. [ 106.967088][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 106.969196][ T6846] dvb-usb: error while querying for an remote control event. [ 107.127180][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.129231][ T6846] dvb-usb: error while querying for an remote control event. [ 107.297149][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.300945][ T6846] dvb-usb: error while querying for an remote control event. [ 107.457736][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.460262][ T6846] dvb-usb: error while querying for an remote control event. [ 107.617688][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.619976][ T6846] dvb-usb: error while querying for an remote control event. [ 107.777988][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.780034][ T6846] dvb-usb: error while querying for an remote control event. [ 107.938651][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 107.941251][ T6846] dvb-usb: error while querying for an remote control event. [ 107.992579][ T8418] NILFS (nbd2): device size too small [ 108.097184][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 108.099180][ T5991] dvb-usb: error while querying for an remote control event. [ 108.143262][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 108.143274][ T40] audit: type=1400 audit(2000000005.119:490): avc: denied { read } for pid=8420 comm="syz.2.645" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.257098][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 108.259584][ T5991] dvb-usb: error while querying for an remote control event. [ 108.427147][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 108.429107][ T6846] dvb-usb: error while querying for an remote control event. [ 108.597085][ T6846] dvb-usb: bulk message failed: -22 (1/0) [ 108.599611][ T6846] dvb-usb: error while querying for an remote control event. [ 108.715191][ T24] usb 8-1: USB disconnect, device number 15 [ 108.734414][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 108.901066][ T8444] NILFS (nbd3): device size too small [ 108.916862][ T40] audit: type=1400 audit(2000000005.889:491): avc: denied { accept } for pid=8443 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.923424][ T40] audit: type=1400 audit(2000000005.899:492): avc: denied { write } for pid=8443 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.930717][ T7098] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 108.933808][ T40] audit: type=1400 audit(2000000005.899:493): avc: denied { read } for pid=8443 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.025558][ T40] audit: type=1400 audit(2000000005.999:494): avc: denied { write } for pid=8449 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.081296][ T8453] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.087897][ T7098] usb 5-1: device descriptor read/64, error -71 [ 109.337444][ T7098] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 109.477259][ T7098] usb 5-1: device descriptor read/64, error -71 [ 109.588058][ T7098] usb usb5-port1: attempt power cycle [ 109.905689][ T8463] "syz.2.658" (8463) uses obsolete ecb(arc4) skcipher [ 109.947392][ T7098] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.967538][ T7098] usb 5-1: device descriptor read/8, error -71 [ 110.217775][ T7098] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 110.237695][ T7098] usb 5-1: device descriptor read/8, error -71 [ 110.335351][ T40] audit: type=1400 audit(2000000007.309:495): avc: denied { getopt } for pid=8475 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.366941][ T7098] usb usb5-port1: unable to enumerate USB device [ 110.379149][ T8478] NILFS (nbd3): device size too small [ 110.556867][ T8481] xt_hashlimit: size too large, truncated to 1048576 [ 110.582459][ T40] audit: type=1400 audit(2000000007.559:496): avc: denied { create } for pid=8482 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.589500][ T40] audit: type=1400 audit(2000000007.559:497): avc: denied { ioctl } for pid=8482 comm="syz.4.666" path="socket:[25827]" dev="sockfs" ino=25827 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.589529][ T40] audit: type=1400 audit(2000000007.559:498): avc: denied { map } for pid=8482 comm="syz.4.666" path="socket:[25826]" dev="sockfs" ino=25826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.589551][ T40] audit: type=1400 audit(2000000007.559:499): avc: denied { setopt } for pid=8482 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.607958][ T8485] netlink: 'syz.3.665': attribute type 9 has an invalid length. [ 110.654367][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 110.669453][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 110.669491][ T152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.678383][ T152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.684354][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.687181][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.698727][ T8491] netlink: 112 bytes leftover after parsing attributes in process `syz.3.668'. [ 110.770136][ T8496] xt_hashlimit: max too large, truncated to 1048576 [ 110.774447][ T8496] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 111.083209][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 111.095723][ T8518] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 111.125493][ T8518] bond3 (unregistering): Released all slaves [ 111.206897][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.675'. [ 111.224884][ T8523] netlink: 'syz.3.675': attribute type 5 has an invalid length. [ 111.260252][ T8523] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 111.373229][ T5284] Bluetooth: hci0: ISO packet too small [ 111.479908][ T8532] "syz.3.679" (8532) uses obsolete ecb(arc4) skcipher [ 111.720611][ T8540] overlayfs: missing 'lowerdir' [ 111.763614][ T8541] binder_alloc: 8538: pid 8538 spamming oneway? 1 buffers allocated for a total size of 4096 [ 111.768708][ T8541] binder_alloc: 8538: pid 8538 spamming oneway? 2 buffers allocated for a total size of 5120 [ 111.971272][ T8555] sctp: [Deprecated]: syz.4.685 (pid 8555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.971272][ T8555] Use struct sctp_sack_info instead [ 111.991781][ T8555] geneve2: entered promiscuous mode [ 111.994168][ T8555] geneve2: entered allmulticast mode [ 112.087223][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 112.222682][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 112.249003][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.253882][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.257753][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.263678][ T24] usb 5-1: config 0 descriptor?? [ 112.362912][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 112.386523][ T8574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8574 comm=syz.3.692 [ 112.411762][ T8574] veth0_to_team: entered promiscuous mode [ 112.415747][ T8574] syz_tun: entered promiscuous mode [ 112.428649][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 112.472559][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 112.474732][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.479717][ T24] usb 5-1: USB disconnect, device number 17 [ 112.537317][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.677347][ T10] usb 7-1: device descriptor read/64, error -71 [ 112.678902][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.685867][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.850820][ T8598] lo speed is unknown, defaulting to 1000 [ 112.927126][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 112.927184][ T7098] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 113.067092][ T7098] usb 5-1: device descriptor read/64, error -71 [ 113.067206][ T10] usb 7-1: device descriptor read/64, error -71 [ 113.178019][ T10] usb usb7-port1: attempt power cycle [ 113.327501][ T7098] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 113.467184][ T7098] usb 5-1: device descriptor read/64, error -71 [ 113.517202][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 113.537897][ T10] usb 7-1: device descriptor read/8, error -71 [ 113.547137][ T5971] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 113.577846][ T7098] usb usb5-port1: attempt power cycle [ 113.697116][ T5971] usb 9-1: Using ep0 maxpacket: 16 [ 113.701391][ T5971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.706507][ T5971] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.710369][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.713575][ T5971] usb 9-1: Product: syz [ 113.715118][ T5971] usb 9-1: Manufacturer: syz [ 113.716836][ T5971] usb 9-1: SerialNumber: syz [ 113.725451][ T5971] usb 9-1: config 0 descriptor?? [ 113.729444][ T5971] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.732464][ T5971] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 113.797120][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 113.817888][ T10] usb 7-1: device descriptor read/8, error -71 [ 113.917109][ T7098] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 113.927456][ T10] usb usb7-port1: unable to enumerate USB device [ 113.937549][ T7098] usb 5-1: device descriptor read/8, error -71 [ 114.049573][ T8616] NILFS (nbd3): device size too small [ 114.177066][ T7098] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 114.197729][ T7098] usb 5-1: device descriptor read/8, error -71 [ 114.307225][ T7098] usb usb5-port1: unable to enumerate USB device [ 114.333985][ T5971] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 114.543023][ T9] IPVS: starting estimator thread 0... [ 114.544107][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 114.544121][ T40] audit: type=1400 audit(2000000011.519:507): avc: denied { read } for pid=8623 comm="syz.3.706" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.560302][ T40] audit: type=1400 audit(2000000011.519:508): avc: denied { open } for pid=8623 comm="syz.3.706" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.572421][ T40] audit: type=1400 audit(2000000011.529:509): avc: denied { map } for pid=8623 comm="syz.3.706" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.623777][ T8627] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.707'. [ 114.633776][ T8627] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.637580][ T8625] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.739895][ T5971] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.742691][ T5971] em28xx 9-1:0.0: board has no eeprom [ 114.807348][ T5971] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.810435][ T5971] em28xx 9-1:0.0: dvb set to bulk mode. [ 114.817227][ T6078] em28xx 9-1:0.0: Binding DVB extension [ 114.827735][ T5971] usb 9-1: USB disconnect, device number 4 [ 114.830399][ T5971] em28xx 9-1:0.0: Disconnecting em28xx [ 114.838118][ T8635] nbd: must specify at least one socket [ 114.844085][ T6078] em28xx 9-1:0.0: Registering input extension [ 114.847531][ T5971] em28xx 9-1:0.0: Closing input extension [ 114.854370][ T5971] em28xx 9-1:0.0: Freeing device [ 114.904049][ T8638] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.939708][ T8643] openvswitch: netlink: Missing valid actions attribute. [ 114.942171][ T8643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.067195][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 115.092383][ T8655] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.715'. [ 115.152506][ T8657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.207118][ T24] usb 7-1: device descriptor read/64, error -71 [ 115.279549][ T8659] "syz.4.718" (8659) uses obsolete ecb(arc4) skcipher [ 115.350476][ T8672] xt_hashlimit: size too large, truncated to 1048576 [ 115.404978][ T8674] netlink: 'syz.2.721': attribute type 9 has an invalid length. [ 115.697725][ T8695] 9pnet_virtio: no channels available for device ./file0 [ 116.172247][ T8719] loop5: detected capacity change from 0 to 2640 [ 116.178038][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.182949][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.185635][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.189472][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.192330][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.195574][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.197104][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 116.198609][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.205010][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.207670][ T8719] ldm_validate_partition_table(): Disk read failed. [ 116.209843][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.212462][ T8719] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.215389][ T8719] Dev loop5: unable to read RDB block 0 [ 116.217909][ T8719] loop5: unable to read partition table [ 116.220224][ T8719] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 116.286695][ T8719] __nla_validate_parse: 3 callbacks suppressed [ 116.286712][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 116.337280][ T24] usb 7-1: device descriptor read/64, error -71 [ 116.457316][ T24] usb usb7-port1: attempt power cycle [ 116.479697][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 116.573844][ T8735] NILFS (nbd4): device size too small [ 116.582863][ T10] IPVS: starting estimator thread 0... [ 116.599765][ T40] audit: type=1400 audit(2000000013.579:510): avc: denied { setattr } for pid=8736 comm="syz.0.735" name="file0" dev="9p" ino=74973331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.677417][ T8738] IPVS: using max 43 ests per chain, 103200 per kthread [ 116.817112][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 116.826871][ T8743] vivid-000: disconnect [ 116.836800][ T8746] /dev/sg0: Can't lookup blockdev [ 116.848194][ T24] usb 7-1: device descriptor read/8, error -71 [ 116.871760][ T8750] "syz.0.738" (8750) uses obsolete ecb(arc4) skcipher [ 116.925600][ T40] audit: type=1400 audit(2000000013.899:511): avc: denied { write } for pid=8753 comm="syz.4.740" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 116.971216][ T8760] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=8760 comm=syz.4.741 [ 117.043618][ T8764] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 117.107125][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 117.139399][ T8764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8764 comm=syz.4.743 [ 117.139434][ T24] usb 7-1: device descriptor read/8, error -71 [ 117.143806][ T8764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8764 comm=syz.4.743 [ 117.258604][ T24] usb usb7-port1: unable to enumerate USB device [ 117.274831][ T8644] vivid-000: reconnect [ 117.405860][ T8776] trusted_key: encrypted_key: master key parameter '$' is invalid [ 117.411840][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 117.414769][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 117.417850][ T8776] netlink: 'syz.3.746': attribute type 15 has an invalid length. [ 117.657079][ T6078] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 117.817165][ T6078] usb 8-1: Invalid ep0 maxpacket: 64 [ 117.902055][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8784 comm=syz.4.748 [ 117.906150][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8784 comm=syz.4.748 [ 117.911158][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8784 comm=syz.4.748 [ 117.915292][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8784 comm=syz.4.748 [ 117.919474][ T8784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8784 comm=syz.4.748 [ 117.957269][ T6078] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 118.015415][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 118.027176][ T8789] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 118.064019][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 118.117551][ T6078] usb 8-1: Invalid ep0 maxpacket: 64 [ 118.124067][ T6078] usb usb8-port1: attempt power cycle [ 118.268972][ T8809] "syz.0.755" (8809) uses obsolete ecb(arc4) skcipher [ 118.487075][ T6078] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 118.517522][ T6078] usb 8-1: Invalid ep0 maxpacket: 64 [ 118.647090][ T6078] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 118.667595][ T6078] usb 8-1: Invalid ep0 maxpacket: 64 [ 118.671027][ T6078] usb usb8-port1: unable to enumerate USB device [ 119.131618][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 119.202598][ T8830] FAULT_INJECTION: forcing a failure. [ 119.202598][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 119.206777][ T8830] CPU: 2 UID: 0 PID: 8830 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(full) [ 119.206792][ T8830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.206799][ T8830] Call Trace: [ 119.206804][ T8830] [ 119.206809][ T8830] dump_stack_lvl+0x100/0x190 [ 119.206840][ T8830] should_fail_ex.cold+0x5/0xa [ 119.206855][ T8830] ? tomoyo_realpath_from_path+0xb6/0x690 [ 119.206873][ T8830] should_failslab+0xc2/0x120 [ 119.206892][ T8830] __kmalloc_noprof+0xe0/0x850 [ 119.206911][ T8830] tomoyo_realpath_from_path+0xb6/0x690 [ 119.206928][ T8830] tomoyo_path_number_perm+0x23c/0x580 [ 119.206939][ T8830] ? tomoyo_path_number_perm+0x22e/0x580 [ 119.206952][ T8830] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.206990][ T8830] ? find_held_lock+0x2b/0x80 [ 119.207006][ T8830] ? __fget_files+0x215/0x3d0 [ 119.207016][ T8830] ? hook_file_ioctl_common+0x146/0x410 [ 119.207035][ T8830] ? __fget_files+0x21f/0x3d0 [ 119.207049][ T8830] security_file_ioctl+0xd3/0x230 [ 119.207063][ T8830] __x64_sys_ioctl+0xb7/0x210 [ 119.207080][ T8830] do_syscall_64+0x106/0xf80 [ 119.207109][ T8830] ? clear_bhb_loop+0x40/0x90 [ 119.207123][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.207134][ T8830] RIP: 0033:0x7fa90359c799 [ 119.207144][ T8830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.207154][ T8830] RSP: 002b:00007fa904415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.207166][ T8830] RAX: ffffffffffffffda RBX: 00007fa903815fa0 RCX: 00007fa90359c799 [ 119.207173][ T8830] RDX: 0000200000000040 RSI: 00000000000007a4 RDI: 0000000000000003 [ 119.207184][ T8830] RBP: 00007fa904415090 R08: 0000000000000000 R09: 0000000000000000 [ 119.207190][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.207196][ T8830] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 119.207210][ T8830] [ 119.276412][ T8830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.404087][ T8840] netlink: 'syz.4.767': attribute type 9 has an invalid length. [ 119.597103][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 119.747094][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 119.755788][ T8854] "syz.2.769" (8854) uses obsolete ecb(arc4) skcipher [ 119.758467][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.771034][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.775250][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.779021][ T10] usb 5-1: Product: syz [ 119.781115][ T10] usb 5-1: Manufacturer: syz [ 119.783221][ T10] usb 5-1: SerialNumber: syz [ 119.787770][ T10] usb 5-1: config 0 descriptor?? [ 119.797252][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.800798][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 120.406825][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 120.570075][ T8874] FAULT_INJECTION: forcing a failure. [ 120.570075][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 120.574847][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(full) [ 120.574863][ T8874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.574887][ T8874] Call Trace: [ 120.574894][ T8874] [ 120.574900][ T8874] dump_stack_lvl+0x100/0x190 [ 120.574922][ T8874] should_fail_ex.cold+0x5/0xa [ 120.574936][ T8874] ? tomoyo_encode2+0xfb/0x3c0 [ 120.574950][ T8874] should_failslab+0xc2/0x120 [ 120.574968][ T8874] __kmalloc_noprof+0xe0/0x850 [ 120.574983][ T8874] ? d_absolute_path+0x136/0x1b0 [ 120.575002][ T8874] tomoyo_encode2+0xfb/0x3c0 [ 120.575018][ T8874] tomoyo_encode+0x29/0x50 [ 120.575031][ T8874] tomoyo_realpath_from_path+0x18c/0x690 [ 120.575048][ T8874] tomoyo_path_number_perm+0x23c/0x580 [ 120.575059][ T8874] ? tomoyo_path_number_perm+0x22e/0x580 [ 120.575071][ T8874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.575097][ T8874] ? find_held_lock+0x2b/0x80 [ 120.575111][ T8874] ? __fget_files+0x215/0x3d0 [ 120.575122][ T8874] ? hook_file_ioctl_common+0x146/0x410 [ 120.575140][ T8874] ? __fget_files+0x21f/0x3d0 [ 120.575153][ T8874] security_file_ioctl+0xd3/0x230 [ 120.575167][ T8874] __x64_sys_ioctl+0xb7/0x210 [ 120.575186][ T8874] do_syscall_64+0x106/0xf80 [ 120.575198][ T8874] ? clear_bhb_loop+0x40/0x90 [ 120.575211][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.575223][ T8874] RIP: 0033:0x7fa90359c799 [ 120.575232][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.575243][ T8874] RSP: 002b:00007fa904415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.575254][ T8874] RAX: ffffffffffffffda RBX: 00007fa903815fa0 RCX: 00007fa90359c799 [ 120.575261][ T8874] RDX: 0000200000000040 RSI: 00000000000007a4 RDI: 0000000000000003 [ 120.575273][ T8874] RBP: 00007fa904415090 R08: 0000000000000000 R09: 0000000000000000 [ 120.575279][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.575285][ T8874] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 120.575299][ T8874] [ 120.575352][ T8874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.692023][ T8879] NILFS (nbd4): device size too small [ 120.835871][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 120.838696][ T10] em28xx 5-1:0.0: board has no eeprom [ 120.897607][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 120.901473][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 120.903935][ T9] em28xx 5-1:0.0: Binding DVB extension [ 120.908737][ T10] usb 5-1: USB disconnect, device number 22 [ 120.911677][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 120.914337][ T8897] netlink: 'syz.4.781': attribute type 9 has an invalid length. [ 120.931639][ T9] em28xx 5-1:0.0: Registering input extension [ 120.934266][ T10] em28xx 5-1:0.0: Closing input extension [ 120.948926][ T10] em28xx 5-1:0.0: Freeing device [ 120.967983][ T7454] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 121.098238][ T7454] usb 7-1: device descriptor read/64, error -71 [ 121.175962][ T40] audit: type=1400 audit(2000000018.149:512): avc: denied { connect } for pid=8906 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.182973][ T40] audit: type=1400 audit(2000000018.159:513): avc: denied { create } for pid=8906 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 121.254304][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 121.298569][ T8913] FAULT_INJECTION: forcing a failure. [ 121.298569][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.304301][ T8913] CPU: 0 UID: 0 PID: 8913 Comm: syz.4.784 Not tainted syzkaller #0 PREEMPT(full) [ 121.304325][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.304336][ T8913] Call Trace: [ 121.304342][ T8913] [ 121.304349][ T8913] dump_stack_lvl+0x100/0x190 [ 121.304394][ T8913] should_fail_ex.cold+0x5/0xa [ 121.304416][ T8913] _copy_from_user+0x2e/0xd0 [ 121.304448][ T8913] vmci_host_unlocked_ioctl+0xaea/0x2070 [ 121.304472][ T8913] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 121.304494][ T8913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.304521][ T8913] ? do_vfs_ioctl+0x226/0x13e0 [ 121.304546][ T8913] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.304571][ T8913] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.304603][ T8913] ? __fget_files+0x215/0x3d0 [ 121.304618][ T8913] ? hook_file_ioctl_common+0x146/0x410 [ 121.304665][ T8913] ? selinux_file_ioctl+0x139/0x290 [ 121.304686][ T8913] ? selinux_file_ioctl+0xb4/0x290 [ 121.304707][ T8913] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 121.304730][ T8913] __x64_sys_ioctl+0x18e/0x210 [ 121.304756][ T8913] do_syscall_64+0x106/0xf80 [ 121.304782][ T8913] ? clear_bhb_loop+0x40/0x90 [ 121.304804][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.304821][ T8913] RIP: 0033:0x7fa90359c799 [ 121.304837][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.304877][ T8913] RSP: 002b:00007fa904415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.304897][ T8913] RAX: ffffffffffffffda RBX: 00007fa903815fa0 RCX: 00007fa90359c799 [ 121.304908][ T8913] RDX: 0000200000000040 RSI: 00000000000007a4 RDI: 0000000000000003 [ 121.304918][ T8913] RBP: 00007fa904415090 R08: 0000000000000000 R09: 0000000000000000 [ 121.304929][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.304939][ T8913] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 121.304963][ T8913] [ 121.359865][ T7454] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 121.400098][ T8918] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 121.410461][ T8918] CIFS mount error: No usable UNC path provided in device string! [ 121.410461][ T8918] [ 121.414899][ T8918] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.468822][ T40] audit: type=1400 audit(2000000018.449:514): avc: denied { getopt } for pid=8921 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.528237][ T7454] usb 7-1: device descriptor read/64, error -71 [ 121.565145][ T8927] NILFS (nbd0): device size too small [ 121.640763][ T7454] usb usb7-port1: attempt power cycle [ 121.663953][ T8931] netlink: 'syz.4.790': attribute type 9 has an invalid length. [ 121.678101][ T8932] delete_channel: no stack [ 121.750431][ T40] audit: type=1400 audit(2000000018.729:515): avc: denied { mount } for pid=8938 comm="syz.4.793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.752633][ T8940] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 121.771453][ T40] audit: type=1400 audit(2000000018.729:516): avc: denied { mounton } for pid=8938 comm="syz.4.793" path="/150/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 121.785679][ T40] audit: type=1400 audit(2000000018.759:517): avc: denied { unmount } for pid=7049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 121.813578][ T8950] FAULT_INJECTION: forcing a failure. [ 121.813578][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.819718][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.4.795 Not tainted syzkaller #0 PREEMPT(full) [ 121.819735][ T8950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.819742][ T8950] Call Trace: [ 121.819746][ T8950] [ 121.819751][ T8950] dump_stack_lvl+0x100/0x190 [ 121.819780][ T8950] should_fail_ex.cold+0x5/0xa [ 121.819794][ T8950] _copy_to_user+0x32/0xd0 [ 121.819816][ T8950] simple_read_from_buffer+0xcb/0x170 [ 121.819836][ T8950] proc_fail_nth_read+0x1af/0x230 [ 121.819852][ T8950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.819868][ T8950] ? rw_verify_area+0xce/0x6d0 [ 121.819883][ T8950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.819898][ T8950] vfs_read+0x1e4/0xb30 [ 121.819916][ T8950] ? __pfx_vfs_read+0x10/0x10 [ 121.819932][ T8950] ? __fget_files+0x215/0x3d0 [ 121.819946][ T8950] ? __fget_files+0x21f/0x3d0 [ 121.819961][ T8950] ksys_read+0x12a/0x250 [ 121.819977][ T8950] ? __pfx_ksys_read+0x10/0x10 [ 121.819997][ T8950] do_syscall_64+0x106/0xf80 [ 121.820013][ T8950] ? clear_bhb_loop+0x40/0x90 [ 121.820027][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.820038][ T8950] RIP: 0033:0x7fa90355cfce [ 121.820048][ T8950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.820059][ T8950] RSP: 002b:00007fa904414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.820070][ T8950] RAX: ffffffffffffffda RBX: 00007fa9044156c0 RCX: 00007fa90355cfce [ 121.820077][ T8950] RDX: 000000000000000f RSI: 00007fa9044150a0 RDI: 0000000000000004 [ 121.820082][ T8950] RBP: 00007fa904415090 R08: 0000000000000000 R09: 0000000000000000 [ 121.820089][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.820095][ T8950] R13: 00007fa903816038 R14: 00007fa903815fa0 R15: 00007ffc5f68a9f8 [ 121.820109][ T8950] [ 121.997280][ T7454] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 122.004489][ T8963] Mount JFS Failure: -5 [ 122.006130][ T8963] jfs_mount failed w/return code = -5 [ 122.008785][ T40] audit: type=1400 audit(2000000018.989:518): avc: denied { write } for pid=8962 comm="syz.0.799" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.009557][ T8964] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 122.023423][ T7454] usb 7-1: device descriptor read/8, error -71 [ 122.024081][ T40] audit: type=1400 audit(2000000018.989:519): avc: denied { open } for pid=8962 comm="syz.0.799" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.036573][ T40] audit: type=1400 audit(2000000018.989:520): avc: denied { ioctl } for pid=8962 comm="syz.0.799" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.047896][ T40] audit: type=1400 audit(2000000018.999:521): avc: denied { accept } for pid=8962 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 122.100951][ T8969] (syz.0.800,8969,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 122.104738][ T8969] (syz.0.800,8969,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 122.146707][ T8974] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 122.177141][ T6846] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 122.186177][ T8977] netlink: 'syz.0.802': attribute type 9 has an invalid length. [ 122.270189][ T8981] NILFS (nbd0): device size too small [ 122.277303][ T7454] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 122.307823][ T7454] usb 7-1: device descriptor read/8, error -71 [ 122.340300][ T6846] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 122.343390][ T6846] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.348305][ T6846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.352235][ T6846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.356264][ T6846] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.361293][ T6846] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.364490][ T6846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.372200][ T6846] usb 8-1: config 0 descriptor?? [ 122.375744][ T8956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.386755][ T8991] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 122.392472][ T8991] ref_ctr increment failed for inode: 0x351 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e2e6200 [ 122.397648][ T8991] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 122.400755][ T8991] ref_ctr decrement failed for inode: 0x351 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802e2e6200 [ 122.405333][ T8991] uprobe: syz.4.805:8991 failed to unregister, leaking uprobe [ 122.417706][ T7454] usb usb7-port1: unable to enumerate USB device [ 122.636050][ T9005] netlink: 220 bytes leftover after parsing attributes in process `syz.4.809'. [ 122.751390][ T9018] netlink: 'syz.0.811': attribute type 9 has an invalid length. [ 122.789180][ T6846] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 122.817405][ T6846] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 122.848808][ T9021] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 123.107619][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 123.184065][ T5284] Bluetooth: hci3: link tx timeout [ 123.186331][ T5284] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 123.191818][ T5284] Bluetooth: hci3: link tx timeout [ 123.193716][ T5284] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.249977][ T9058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.820'. [ 123.286349][ T9063] netlink: 'syz.4.821': attribute type 9 has an invalid length. [ 123.413321][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'. [ 123.456035][ T9075] Failed to initialize the IGMP autojoin socket (err -2) [ 123.545655][ T9075] Failed to initialize the IGMP autojoin socket (err -2) [ 123.596492][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.823'. [ 123.886915][ T9095] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 123.893788][ T9095] program syz.4.829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.267109][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 124.417106][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 124.421287][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.425811][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.429510][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.432300][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.438508][ T10] usb 9-1: config 0 descriptor?? [ 124.639576][ T9107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.645944][ T6078] lo speed is unknown, defaulting to 1000 [ 124.656847][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.836'. [ 124.704624][ T9111] NILFS (nbd2): device size too small [ 124.733912][ T9113] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 124.782747][ T9122] random: crng reseeded on system resumption [ 124.861839][ T5991] usb 8-1: USB disconnect, device number 20 [ 124.896724][ T9136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.029124][ T9146] Failed to initialize the IGMP autojoin socket (err -2) [ 125.257190][ T5284] Bluetooth: hci3: command 0x0406 tx timeout [ 126.096245][ T9196] ip6erspan0: entered promiscuous mode [ 126.248921][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 126.253542][ T9205] openvswitch: netlink: IP tunnel dst address not specified [ 126.321385][ T9214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.496403][ T9229] "syz.2.864" (9229) uses obsolete ecb(arc4) skcipher [ 126.631959][ T5284] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 126.638472][ T9236] netlink: 'syz.3.868': attribute type 14 has an invalid length. [ 127.028929][ T9251] NILFS (nbd3): device size too small [ 127.051138][ T6846] usb 9-1: USB disconnect, device number 5 [ 127.088720][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 127.092409][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 127.092425][ T40] audit: type=1400 audit(2000000024.069:537): avc: denied { read } for pid=9253 comm="syz.4.873" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 127.092748][ T9254] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 127.106327][ T9254] netlink: 96 bytes leftover after parsing attributes in process `syz.4.873'. [ 127.109592][ T9254] netlink: 658 bytes leftover after parsing attributes in process `syz.4.873'. [ 127.114780][ T40] audit: type=1400 audit(2000000024.089:538): avc: denied { read } for pid=9253 comm="syz.4.873" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.127875][ T40] audit: type=1400 audit(2000000024.089:539): avc: denied { map } for pid=9253 comm="syz.4.873" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.183762][ T40] audit: type=1400 audit(2000000024.159:540): avc: denied { getopt } for pid=9259 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.552206][ T9283] NILFS (nbd3): device size too small [ 127.701110][ T9297] "syz.2.888" (9297) uses obsolete ecb(arc4) skcipher [ 127.780871][ T40] audit: type=1400 audit(2000000024.759:541): avc: denied { create } for pid=9306 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 128.098118][ T40] audit: type=1400 audit(2000000025.069:542): avc: denied { firmware_load } for pid=9324 comm="syz.4.897" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 128.157153][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 128.307326][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 128.311426][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.318050][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.321800][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.324966][ T9] usb 8-1: Product: syz [ 128.326654][ T9] usb 8-1: Manufacturer: syz [ 128.328601][ T9] usb 8-1: SerialNumber: syz [ 128.332957][ T9] usb 8-1: config 0 descriptor?? [ 128.337370][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.340884][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 128.659386][ T9341] __nla_validate_parse: 2 callbacks suppressed [ 128.659400][ T9341] netlink: 108 bytes leftover after parsing attributes in process `syz.2.901'. [ 128.726768][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 128.941340][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 129.100452][ T40] audit: type=1326 audit(2000000026.079:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9348 comm="syz.4.903" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90359c799 code=0x0 [ 129.353899][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 129.356753][ T9] em28xx 8-1:0.0: board has no eeprom [ 129.417272][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 129.419810][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 129.421735][ T10] em28xx 8-1:0.0: Binding DVB extension [ 129.428320][ T9] usb 8-1: USB disconnect, device number 21 [ 129.433626][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 129.449324][ T10] em28xx 8-1:0.0: Registering input extension [ 129.452223][ T9] em28xx 8-1:0.0: Closing input extension [ 129.459428][ T9] em28xx 8-1:0.0: Freeing device [ 130.666827][ T9374] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 130.731822][ T9379] bond3: Unable to set down delay as MII monitoring is disabled [ 130.736645][ T9379] bond3 (unregistering): Released all slaves [ 130.738398][ T9382] netlink: 344 bytes leftover after parsing attributes in process `syz.3.910'. [ 130.887493][ T40] audit: type=1400 audit(2000000027.869:544): avc: denied { write } for pid=9389 comm="syz.2.913" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.917936][ T40] audit: type=1400 audit(2000000027.889:545): avc: denied { ioctl } for pid=9389 comm="syz.2.913" path="pid:[4026532878]" dev="nsfs" ino=4026532878 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.017410][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 131.167333][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 131.172438][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.176679][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.180410][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.183751][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.188876][ T9385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.194786][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.327252][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 131.331240][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.341687][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.345886][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.349654][ T9] usb 7-1: Product: syz [ 131.351562][ T9] usb 7-1: Manufacturer: syz [ 131.353567][ T9] usb 7-1: SerialNumber: syz [ 131.359406][ T9] usb 7-1: config 0 descriptor?? [ 131.365249][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.369918][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 131.406825][ T9385] netlink: 172 bytes leftover after parsing attributes in process `syz.3.911'. [ 131.474147][ T10] usb 8-1: USB disconnect, device number 22 [ 131.974188][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 132.026326][ T40] audit: type=1326 audit(2000000028.999:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9406 comm="syz.3.915" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7499c799 code=0x0 [ 132.392035][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 132.394996][ T9] em28xx 7-1:0.0: board has no eeprom [ 132.458020][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.460576][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 132.462818][ T10] em28xx 7-1:0.0: Binding DVB extension [ 132.470564][ T9] usb 7-1: USB disconnect, device number 22 [ 132.473218][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 132.484994][ T10] em28xx 7-1:0.0: Registering input extension [ 132.487251][ T9] em28xx 7-1:0.0: Closing input extension [ 132.494966][ T9] em28xx 7-1:0.0: Freeing device [ 132.545426][ T9437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1920 sclass=netlink_route_socket pid=9437 comm=syz.4.921 [ 132.588131][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 132.926579][ T40] audit: type=1400 audit(2000000029.899:547): avc: denied { read } for pid=9461 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.960729][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'. [ 133.148884][ T9473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.230673][ T9484] bond2: option downdelay: invalid value (18446744073709551615) [ 133.233101][ T9484] bond2: option downdelay: allowed values 0 - 2147483647 [ 133.236829][ T9484] bond2 (unregistering): Released all slaves [ 133.273198][ T9490] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 133.420838][ T40] audit: type=1400 audit(2000000030.389:548): avc: denied { module_load } for pid=9495 comm="syz.2.941" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 133.507198][ T5991] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 133.668635][ T5991] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 133.671500][ T5991] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.675429][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.677161][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 133.679704][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.686601][ T5991] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.691195][ T5991] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.694157][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.699017][ T5991] usb 9-1: config 0 descriptor?? [ 133.701566][ T9489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.828794][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 133.833131][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.840506][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.845338][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.849215][ T9] usb 8-1: Product: syz [ 133.851213][ T9] usb 8-1: Manufacturer: syz [ 133.853488][ T9] usb 8-1: SerialNumber: syz [ 133.858611][ T9] usb 8-1: config 0 descriptor?? [ 133.865151][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.869589][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 134.108884][ T5991] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 134.127958][ T5991] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.357264][ T9523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.371099][ T860] usb 9-1: USB disconnect, device number 6 [ 134.465773][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 134.563804][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 134.568838][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 134.573892][ T9530] netlink: 'syz.2.951': attribute type 12 has an invalid length. [ 134.695796][ T40] audit: type=1326 audit(2000000031.669:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.2.953" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff281f9c799 code=0x0 [ 134.952571][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 135.237115][ T39] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 135.389085][ T39] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.397686][ T39] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 135.401663][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 135.405073][ T39] usb 9-1: Product: syz [ 135.406946][ T39] usb 9-1: Manufacturer: syz [ 135.409153][ T39] usb 9-1: SerialNumber: syz [ 135.541537][ T9552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.618022][ T39] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 135.632426][ T39] usb 9-1: USB disconnect, device number 7 [ 135.649060][ T39] usblp0: removed [ 135.692587][ T9563] NILFS (nbd4): device size too small [ 135.707646][ T40] audit: type=1400 audit(2000000032.679:550): avc: denied { ioctl } for pid=9564 comm="syz.2.961" path="socket:[28379]" dev="sockfs" ino=28379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.749909][ T9568] "syz.2.962" (9568) uses obsolete ecb(arc4) skcipher [ 135.897967][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 135.901878][ T9505] em28xx 8-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 135.904599][ T9] em28xx 8-1:0.0: board has no eeprom [ 135.967099][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 135.970617][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 135.973448][ T2303] em28xx 8-1:0.0: Binding DVB extension [ 136.006244][ T9] usb 8-1: USB disconnect, device number 23 [ 136.012428][ T2303] em28xx 8-1:0.0: Registering input extension [ 136.015349][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 136.018206][ T9] em28xx 8-1:0.0: Closing input extension [ 136.026516][ T9] em28xx 8-1:0.0: Freeing device [ 136.580179][ T9593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.636491][ T9595] QAT: Invalid ioctl -2144835806 [ 136.682277][ T9600] comedi comedi3: comedi_config --init_data is deprecated [ 136.794210][ T9610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2793696045 (357593093760 ns) > initial count (222220025856 ns). Using initial count to start timer. [ 136.799184][ T9614] trusted_key: syz.2.976 sent an empty control message without MSG_MORE. [ 136.862963][ T40] audit: type=1804 audit(2000000033.839:551): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.977" name="/newroot/231/file0/file0" dev="9p" ino=74973331 res=1 errno=0 [ 137.107389][ T7454] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 137.111490][ T9620] fuse: Bad value for 'group_id' [ 137.113255][ T9620] fuse: Bad value for 'group_id' [ 137.118784][ T40] audit: type=1400 audit(2000000034.099:552): avc: denied { mount } for pid=9619 comm="syz.2.979" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.119558][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 137.131160][ T9620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9620 comm=syz.2.979 [ 137.137604][ T9620] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.979'. [ 137.178793][ T9623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.243835][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 137.275972][ T40] audit: type=1400 audit(2000000034.249:553): avc: denied { mount } for pid=9629 comm="syz.4.982" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 137.297962][ T7454] usb 8-1: Using ep0 maxpacket: 16 [ 137.301943][ T7454] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.306729][ T7454] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.310076][ T7454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.312922][ T7454] usb 8-1: Product: syz [ 137.314392][ T7454] usb 8-1: Manufacturer: syz [ 137.316048][ T7454] usb 8-1: SerialNumber: syz [ 137.316318][ T40] audit: type=1400 audit(2000000034.289:554): avc: denied { unmount } for pid=7049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 137.328244][ T7454] usb 8-1: config 0 descriptor?? [ 137.333106][ T7454] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.336559][ T7454] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 137.351249][ T9636] exFAT-fs (nullb0): invalid boot record signature [ 137.355582][ T9636] exFAT-fs (nullb0): failed to read boot sector [ 137.360064][ T9636] exFAT-fs (nullb0): failed to recognize exfat type [ 137.597345][ T7454] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 137.672698][ T7454] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 137.676483][ T7454] em28xx 8-1:0.0: board has no eeprom [ 137.737111][ T7454] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 137.739890][ T7454] em28xx 8-1:0.0: dvb set to bulk mode. [ 137.740513][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.742089][ T860] em28xx 8-1:0.0: Binding DVB extension [ 137.744686][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.751127][ T7454] usb 8-1: USB disconnect, device number 24 [ 137.753933][ T7454] em28xx 8-1:0.0: Disconnecting em28xx [ 137.783838][ T860] em28xx 8-1:0.0: Registering input extension [ 137.786045][ T7454] em28xx 8-1:0.0: Closing input extension [ 137.795774][ T7454] em28xx 8-1:0.0: Freeing device [ 137.800439][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.805286][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.809465][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.814917][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.818308][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.838089][ T9659] Failed to initialize the IGMP autojoin socket (err -2) [ 137.978979][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 138.091692][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.094370][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.100166][ T9659] bridge_slave_0: entered allmulticast mode [ 138.103414][ T9659] bridge_slave_0: entered promiscuous mode [ 138.109003][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.111596][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.114431][ T9659] bridge_slave_1: entered allmulticast mode [ 138.118423][ T9659] bridge_slave_1: entered promiscuous mode [ 138.171216][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.192375][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.270049][ T9659] team0: Port device team_slave_0 added [ 138.286312][ T9659] team0: Port device team_slave_1 added [ 138.290138][ T9676] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 138.337559][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.340049][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.349601][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.355059][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.357453][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.366051][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.459594][ T9659] hsr_slave_0: entered promiscuous mode [ 138.463185][ T9659] hsr_slave_1: entered promiscuous mode [ 138.466358][ T9659] debugfs: 'hsr0' already exists in 'hsr' [ 138.470321][ T9659] Cannot create hsr debugfs directory [ 138.538031][ T9] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 138.676002][ T40] audit: type=1400 audit(2000000035.649:555): avc: denied { mounton } for pid=9681 comm="syz.2.994" path="/proc/687/task" dev="proc" ino=30489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 138.690572][ T9] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 138.692080][ T9659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.693325][ T9] usb 8-1: config 0 has no interface number 0 [ 138.698197][ T9659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.705461][ T9] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.708072][ T40] audit: type=1400 audit(2000000035.679:556): avc: denied { associate } for pid=9688 comm="syz.2.994" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 138.709999][ T9] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.722395][ T9] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.726163][ T9] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 138.729797][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.733911][ T9] usb 8-1: config 0 descriptor?? [ 138.736251][ T9676] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.742619][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.120/input/input29 [ 138.779011][ T9693] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 138.809348][ T9659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.813767][ T9659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.911772][ T9659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.916118][ T9659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.950133][ T9676] : entered promiscuous mode [ 138.954295][ T9] usb 8-1: USB disconnect, device number 25 [ 138.993168][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.997859][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.003252][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.011303][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.015044][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.035198][ T9704] Failed to initialize the IGMP autojoin socket (err -2) [ 139.081011][ T9659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.085570][ T9659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.276172][ T9659] netdevsim netdevsim4 netdevsim0: renamed from eth6 [ 139.281935][ T9659] netdevsim netdevsim4 netdevsim1: renamed from eth7 [ 139.290077][ T9659] netdevsim netdevsim4 netdevsim2: renamed from eth8 [ 139.297117][ T9659] netdevsim netdevsim4 netdevsim3: renamed from eth9 [ 139.400272][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.404390][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.409254][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.412949][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.417619][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.442220][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.454891][ T9723] Failed to initialize the IGMP autojoin socket (err -2) [ 139.490969][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.514716][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.517343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.555032][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.557456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.827257][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.846252][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.858881][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.864091][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.869665][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.873351][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.891715][ T9738] Failed to initialize the IGMP autojoin socket (err -2) [ 139.899474][ T63] Bluetooth: hci1: command tx timeout [ 139.952766][ T9748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=9748 comm=syz.3.1006 [ 140.056161][ T9753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 140.092052][ T9659] veth0_vlan: entered promiscuous mode [ 140.100614][ T9659] veth1_vlan: entered promiscuous mode [ 140.174364][ T9659] veth0_macvtap: entered promiscuous mode [ 140.195277][ T9659] veth1_macvtap: entered promiscuous mode [ 140.261437][ T9762] netlink: 'syz.2.1009': attribute type 12 has an invalid length. [ 140.268388][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 140.276260][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.305084][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.309359][ T9762] netlink: 'syz.2.1009': attribute type 12 has an invalid length. [ 140.319402][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.325971][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.327898][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 140.329754][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.332420][ T9659] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.340043][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.349593][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.357651][ T9659] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 140.369147][ T9659] wireguard: wg0: Could not create IPv4 socket [ 140.378197][ T9659] wireguard: wg1: Could not create IPv4 socket [ 140.385812][ T9659] wireguard: wg2: Could not create IPv4 socket [ 140.386326][ T9764] Failed to initialize the IGMP autojoin socket (err -2) [ 140.819426][ T40] audit: type=1400 audit(2000000037.799:557): avc: denied { ioctl } for pid=9774 comm="syz.2.1014" path="socket:[32368]" dev="sockfs" ino=32368 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 141.058513][ T9790] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 141.058516][ T9789] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 141.060248][ T9789] team0: Cannot enslave team device to itself [ 141.068896][ T9790] team0: Cannot enslave team device to itself [ 141.129625][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.134091][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.138687][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.142947][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.145857][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.172452][ T9793] Failed to initialize the IGMP autojoin socket (err -2) [ 141.395826][ T40] audit: type=1400 audit(2000000038.369:558): avc: denied { kexec_image_load } for pid=9811 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.416700][ T9813] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 141.551299][ T9820] : entered promiscuous mode [ 141.567577][ T9820] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.624770][ T40] audit: type=1400 audit(2000000038.599:559): avc: denied { setattr } for pid=9826 comm="syz.3.1021" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.647282][ T40] audit: type=1400 audit(2000000038.599:560): avc: denied { read } for pid=9826 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.795490][ T9793] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.804889][ T9793] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 141.815488][ T9793] wireguard: wg0: Could not create IPv4 socket [ 141.820696][ T9793] wireguard: wg1: Could not create IPv4 socket [ 141.825326][ T9793] wireguard: wg2: Could not create IPv4 socket [ 141.961905][ T9850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.058481][ T9857] "syz.3.1025" (9857) uses obsolete ecb(arc4) skcipher [ 142.806416][ T9812] kexec: Could not allocate control_code_buffer [ 142.932731][ T9899] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 142.943959][ T9902] : entered promiscuous mode [ 142.950930][ T9902] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.985252][ T40] audit: type=1400 audit(2000000039.959:561): avc: denied { read } for pid=9907 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.075728][ T9918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.176335][ T9925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.232497][ T9931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.266553][ T9934] "syz.3.1038" (9934) uses obsolete ecb(arc4) skcipher [ 143.639080][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.645888][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.653991][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.661479][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.665723][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.699694][ T9949] Failed to initialize the IGMP autojoin socket (err -2) [ 144.227518][ T9967] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 144.233141][ T40] audit: type=1400 audit(2000000041.209:562): avc: denied { create } for pid=9966 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.234980][ T9967] misc userio: No port type given on /dev/userio [ 144.249891][ T40] audit: type=1400 audit(2000000041.209:563): avc: denied { write } for pid=9966 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.384876][ T9980] overlayfs: failed to resolve './bus/file0': -2 [ 144.524929][ T9986] sp0: Synchronizing with TNC [ 144.532920][ T9985] [U] è [ 144.947178][ T5971] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 145.109558][ T5971] usb 8-1: config 0 has no interfaces? [ 145.114390][ T5971] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 145.118797][ T5971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.122314][ T5971] usb 8-1: Product: syz [ 145.124258][ T5971] usb 8-1: Manufacturer: syz [ 145.126329][ T5971] usb 8-1: SerialNumber: syz [ 145.132354][ T5971] usb 8-1: config 0 descriptor?? [ 145.352433][ T5939] Bluetooth: hci3: unexpected subevent 0x0c length: 248 > 5 [ 145.358495][ T860] usb 8-1: USB disconnect, device number 26 [ 145.739975][ T5939] Bluetooth: hci1: command tx timeout [ 145.895916][ T40] audit: type=1400 audit(2000000042.869:564): avc: denied { read write } for pid=10041 comm="syz.3.1045" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 145.908028][ T40] audit: type=1400 audit(2000000042.869:565): avc: denied { open } for pid=10041 comm="syz.3.1045" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.137881][T10063] FAULT_INJECTION: forcing a failure. [ 146.137881][T10063] name failslab, interval 1, probability 0, space 0, times 0 [ 146.142246][T10063] CPU: 2 UID: 0 PID: 10063 Comm: syz.3.1048 Not tainted syzkaller #0 PREEMPT(full) [ 146.142264][T10063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.142271][T10063] Call Trace: [ 146.142275][T10063] [ 146.142280][T10063] dump_stack_lvl+0x100/0x190 [ 146.142311][T10063] should_fail_ex.cold+0x5/0xa [ 146.142325][T10063] ? tomoyo_realpath_from_path+0xb6/0x690 [ 146.142345][T10063] should_failslab+0xc2/0x120 [ 146.142363][T10063] __kmalloc_noprof+0xe0/0x850 [ 146.142382][T10063] tomoyo_realpath_from_path+0xb6/0x690 [ 146.142399][T10063] tomoyo_path_number_perm+0x23c/0x580 [ 146.142410][T10063] ? tomoyo_path_number_perm+0x22e/0x580 [ 146.142422][T10063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.142451][T10063] ? find_held_lock+0x2b/0x80 [ 146.142466][T10063] ? __fget_files+0x215/0x3d0 [ 146.142479][T10063] ? hook_file_ioctl_common+0x146/0x410 [ 146.142507][T10063] ? __fget_files+0x21f/0x3d0 [ 146.142529][T10063] security_file_ioctl+0xd3/0x230 [ 146.142551][T10063] __x64_sys_ioctl+0xb7/0x210 [ 146.142580][T10063] do_syscall_64+0x106/0xf80 [ 146.142606][T10063] ? clear_bhb_loop+0x40/0x90 [ 146.142629][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.142642][T10063] RIP: 0033:0x7efc7499c799 [ 146.142652][T10063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.142663][T10063] RSP: 002b:00007efc758f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.142673][T10063] RAX: ffffffffffffffda RBX: 00007efc74c16090 RCX: 00007efc7499c799 [ 146.142680][T10063] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 0000000000000005 [ 146.142687][T10063] RBP: 00007efc758f3090 R08: 0000000000000000 R09: 0000000000000000 [ 146.142693][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.142699][T10063] R13: 00007efc74c16128 R14: 00007efc74c16090 R15: 00007ffdc8b50148 [ 146.142713][T10063] [ 146.142719][T10063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.575456][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.580601][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.584111][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.594933][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.607166][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.638012][T10118] Failed to initialize the IGMP autojoin socket (err -2) [ 147.767141][T10003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.774391][ T9949] netdevsim netdevsim4 netdevsim0: renamed from eth10 [ 147.783156][ T9949] netdevsim netdevsim4 netdevsim1: renamed from eth11 [ 147.803671][ T9949] netdevsim netdevsim4 netdevsim2: renamed from eth12 [ 147.817252][ T5939] Bluetooth: hci1: command tx timeout [ 147.824516][ T9949] netdevsim netdevsim4 netdevsim3: renamed from eth13 [ 148.151673][ T9949] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 148.159012][ T9949] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 148.165849][ T9949] wireguard: wg0: Could not create IPv4 socket [ 148.172105][ T9949] wireguard: wg1: Could not create IPv4 socket [ 148.175889][ T9949] wireguard: wg2: Could not create IPv4 socket [ 148.231974][T10067] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 148.237080][T10067] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 148.240787][T10067] CPU: 3 UID: 0 PID: 10067 Comm: kbnepd ard# Not tainted syzkaller #0 PREEMPT(full) [ 148.244954][T10067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.249349][T10067] RIP: 0010:klist_put+0x4d/0x1d0 [ 148.251483][T10067] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 148.259767][T10067] RSP: 0018:ffffc90005b67970 EFLAGS: 00010202 [ 148.262374][T10067] RAX: dffffc0000000000 RBX: ffff88803c7a2c60 RCX: ffffffff82b89e9d [ 148.265741][T10067] RDX: 000000000000000b RSI: ffffffff8b85a295 RDI: 0000000000000058 [ 148.269199][T10067] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 148.272530][T10067] R10: 0000000000000000 R11: 000000000000760b R12: 0000000000000000 [ 148.275901][T10067] R13: 0000000000000001 R14: ffff88803f5d2c20 R15: 0000000000000000 [ 148.279254][T10067] FS: 0000000000000000(0000) GS:ffff8880d6644000(0000) knlGS:0000000000000000 [ 148.283062][T10067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.285832][T10067] CR2: 0000562162fc8300 CR3: 0000000035a4c000 CR4: 0000000000352ef0 [ 148.289078][T10067] Call Trace: [ 148.290521][T10067] [ 148.291781][T10067] device_del+0x1b8/0x9b0 [ 148.293709][T10067] ? __pfx_device_del+0x10/0x10 [ 148.295877][T10067] ? netdev_unregister_kobject+0x2da/0x540 [ 148.298541][T10067] unregister_netdevice_many_notify+0x1817/0x2580 [ 148.301313][T10067] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 148.304089][T10067] ? __pfx___mutex_lock+0x10/0x10 [ 148.306270][T10067] unregister_netdevice_queue+0x30b/0x3c0 [ 148.308658][T10067] ? rtnl_net_dev_lock+0x137/0x360 [ 148.310966][T10067] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 148.313924][T10067] ? rtnl_net_dev_lock+0x28/0x360 [ 148.316165][T10067] ? rtnl_net_dev_lock+0x146/0x360 [ 148.318410][T10067] ? rtnl_lock+0x9/0x20 [ 148.320194][T10067] ? rtnl_net_dev_lock+0x1fe/0x360 [ 148.322381][T10067] unregister_netdev+0x1f/0x60 [ 148.324383][T10067] bnep_session+0x2203/0x2dc0 [ 148.326446][T10067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.329024][T10067] ? __pfx_bnep_session+0x10/0x10 [ 148.331368][T10067] ? do_raw_spin_lock+0x128/0x260 [ 148.333784][T10067] ? __pfx_woken_wake_function+0x10/0x10 [ 148.336321][T10067] ? rcu_is_watching+0x12/0xc0 [ 148.338476][T10067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 148.340939][T10067] ? lockdep_hardirqs_on+0x78/0x100 [ 148.343195][T10067] ? __kthread_parkme+0x18c/0x230 [ 148.345412][T10067] ? kthread+0x13a/0x450 [ 148.347251][T10067] ? __pfx_bnep_session+0x10/0x10 [ 148.349441][T10067] kthread+0x370/0x450 [ 148.351229][T10067] ? __pfx_kthread+0x10/0x10 [ 148.353249][T10067] ret_from_fork+0x754/0xd80 [ 148.355259][T10067] ? __pfx_ret_from_fork+0x10/0x10 [ 148.357531][T10067] ? rcu_is_watching+0x12/0xc0 [ 148.359616][T10067] ? __switch_to+0x7b4/0x1120 [ 148.361854][T10067] ? __pfx_kthread+0x10/0x10 [ 148.364041][T10067] ret_from_fork_asm+0x1a/0x30 [ 148.366243][T10067] [ 148.367645][T10067] Modules linked in: [ 148.370059][T10067] ---[ end trace 0000000000000000 ]--- [ 148.373118][T10067] RIP: 0010:klist_put+0x4d/0x1d0 [ 148.375168][ T40] audit: type=1400 audit(2000000045.349:566): avc: denied { read } for pid=5315 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 148.375264][T10067] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 09 0d [ 148.384698][ T40] audit: type=1400 audit(2000000045.349:567): avc: denied { search } for pid=5315 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.393611][T10067] RSP: 0018:ffffc90005b67970 EFLAGS: 00010202 [ 148.393634][T10067] RAX: dffffc0000000000 RBX: ffff88803c7a2c60 RCX: ffffffff82b89e9d [ 148.393646][T10067] RDX: 000000000000000b RSI: ffffffff8b85a295 RDI: 0000000000000058 [ 148.393656][T10067] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 148.393667][T10067] R10: 0000000000000000 R11: 000000000000760b R12: 0000000000000000 [ 148.393677][T10067] R13: 0000000000000001 R14: ffff88803f5d2c20 R15: 0000000000000000 [ 148.393688][T10067] FS: 0000000000000000(0000) GS:ffff8880d6644000(0000) knlGS:0000000000000000 [ 148.393720][T10067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.393733][T10067] CR2: 0000562162fc8300 CR3: 000000002f4a3000 CR4: 0000000000352ef0 [ 148.393747][T10067] Kernel panic - not syncing: Fatal exception [ 148.394646][T10067] Kernel Offset: disabled