last executing test programs: 1m0.810513611s ago: executing program 2 (id=504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x28, 0x2, 0xf2, @loopback, @remote, 0x8, 0x8000, 0x4, 0x8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56061, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x1, 0xa}, {0xfff2, 0xfff2}}}, 0x24}}, 0x4b880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x4000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1f, 0x1, 0x9, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1000000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="4a6ec19a1374c71858cde02a0919113c3a179a0ef2ad327948155c2780f9e49bce712e56053fbdac8b1a7b93f8d08aca86ff2a1932b19d9f8f4325cb22d3ac0b720da8f25d305e31c7f913312aac9d7b149956f0dfad4206767a174abf5a29102d42e6751227b3663ad042acc39f8d45d95a7f341ea9a2293c3f6315d2f46774d2fa0e0d0df876ec73734ef14d97a6f7503325686ef60603f561e2a1ec84ea2591bfeb72c6c66f4a2f2367dff7a728ccf4d8311994859a9a11", @ANYRES64=r6], 0x20) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x7, 0x5004) close(r3) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x400, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0x7}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xf, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x2008015) r12 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) dup(r8) sendto$packet(r12, &(0x7f0000000480)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r14, 0x1, 0xda}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000140), 0x4) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r15, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000004c0)=0x7c80e6d2, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x2, 0xfffffffd, 0x40000000, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x2}}) 1m0.037553657s ago: executing program 2 (id=505): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 59.966367799s ago: executing program 2 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x20000008b}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x0, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x80000000, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x0, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xc, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x400000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0xfffffeff, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x0, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) (async) waitid(0x0, r2, 0x0, 0xb, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x7}) (async) r4 = io_uring_setup(0x5c34, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f9}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="010027bd7000fbdbdf25190000002000018008000300040000001400020067726574617030000000000000000000149e577be0e3f7607ca48808e846e6c2b31a738062a29275f3bcdbcdda847280e0e3ec4648a58c85ad77c011697cdeb8f212f690d788c2f170"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) socket$netlink(0x10, 0x3, 0x8000000004) 59.258829904s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 59.199385699s ago: executing program 2 (id=517): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5900adf7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbd3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x5, 0x3, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x4, 0x1, 0x6, 0x8, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x52, &(0x7f0000000740)=""/82, 0x41000, 0xb, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x5, 0x5, 0x5, 0x5}, {0x2, 0x5, 0x6, 0x2}], 0x10, 0x5}, 0x94) dup(r4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) 58.685147763s ago: executing program 2 (id=520): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x28) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x8002, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) cachestat(r4, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r2, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000400"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40000020, r7, &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6f81457fc8158503835c202f4df766181a0fccd9562d36b78461c695f6a6dc8031dc3fcc2437b504968acecc9fcd0cae0deee67dcb731a15bfa3b3f0cb89da15ccfd46141a6196b1064c2daa49eae3d02689fe9e71f7fa3b524b9a7b03cea247f84c9dfdb193eca8ce2dda792d547c5a9757b3cb7d917067437d3b2b5b82fc1657a781bd5d3031ef923e9ed4726c76baf21e21f6559c747749675d39e3b1bf535986a60eeb877760b77e0fbabd5b582cd0db2e2068838827c09fb84ffceb13d472f77dcbde8c02839ac2b024c763f0e131ed824cf176bdbde88541c797481fb2b25a71cc3a9cd2502553b7bca23f5323"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 58.649786179s ago: executing program 32 (id=520): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x28) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x8002, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) cachestat(r4, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r2, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000afc747f2101bc146823ffd48ec8740297dc36b314e0ce93707047a701680107657e27a6c79c0ffbea59f085edcecde7291d0ba531e83b3144323a324586eaf8634bcb22a5e1cb149f5410b788881fa4e0032242d55d6d26f3e12f2382f470b503001ac2dd22d02d43eef39965fc9ae0e7e24247e293afad3eb7b2ef8e84a3af31d01ad398a965dbe035056778595c5b339cbc5344e51e60000e5d95bf840685adef6d2fa00ebba5082e1adae9f8ab639d7c83903121378f3315f2375d0c5611c9a46b8883a9b7c7d53efe4f91b3f69e152d806595badcc4fedac7fb63e8d513b3e34e535dcf75ba6f48804b3f431c29e6c7c3fdccb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000400"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40000020, r7, &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6f81457fc8158503835c202f4df766181a0fccd9562d36b78461c695f6a6dc8031dc3fcc2437b504968acecc9fcd0cae0deee67dcb731a15bfa3b3f0cb89da15ccfd46141a6196b1064c2daa49eae3d02689fe9e71f7fa3b524b9a7b03cea247f84c9dfdb193eca8ce2dda792d547c5a9757b3cb7d917067437d3b2b5b82fc1657a781bd5d3031ef923e9ed4726c76baf21e21f6559c747749675d39e3b1bf535986a60eeb877760b77e0fbabd5b582cd0db2e2068838827c09fb84ffceb13d472f77dcbde8c02839ac2b024c763f0e131ed824cf176bdbde88541c797481fb2b25a71cc3a9cd2502553b7bca23f5323"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 3.529768079s ago: executing program 3 (id=1420): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000004500)={{r1, &(0x7f0000004400)=':-:#\\\x00', 0x480240, &(0x7f0000004440)={@align=0x2, {0x6, 0xd, 0x4}}, 0x202c, &(0x7f0000004480), &(0x7f00000044c0)=0x3}, {[0xff, 0x6, 0x7, 0x9]}, 0x7f3f3ba3, 0xcb, &(0x7f0000004740)=""/203}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000004500)={{r1, &(0x7f0000004400)=':-:#\\\x00', 0x480240, &(0x7f0000004440)={@align=0x2, {0x6, 0xd, 0x4}}, 0x202c, &(0x7f0000004480), &(0x7f00000044c0)=0x3}, {[0xff, 0x6, 0x7, 0x9]}, 0x7f3f3ba3, 0xcb, &(0x7f0000004740)=""/203}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x2000}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0xfffc, 0xc0000000, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000140)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000004680)={'batadv_slave_1\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000008080900000123000080000000", @ANYRES32=r2, @ANYRES8=r1, @ANYBLOB="f7963934b1abf6c8ab9796bd53d09623e0e48859dc5b3dd401aab38f9c604390dccbcb368b60e3464fe5add75f47b8e3b97a767f149d6624f9da4b107892a8bb2f69d98eed6e23314cb6564a643d392b6931c972ef83fa0413c73b496f8cd206bcac16702dcb5f6413737434e4a90413d4c7d80fc621490c81586ecd05e50f125b44213b81c76b36165da7bf15fb4446afcb0f75e2e046690c35c7cf8c0c75334717869efa05ba230d763163f53f18d82f449177a39af4c9a330b51fd9314a9a462818afda11e3e0b32e", @ANYRES32=r3, @ANYBLOB="07000000000000000100000000df6e274f13000000000000345400000000000000", @ANYRES32=r3], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000004580)=ANY=[@ANYBLOB='fd=', @ANYBLOB="27d682f1c9f7f20ed34de74577dd1522d48d613143d56d0d35a601db5caa7e9b96210fac6dae550935451b5742ab67ce87f6766d925ed16789670ae87ebe803fd855a3531d5f5172002e0fae7d95364e11cd711eeb70097e550867c0529f44d12a2dbb9ca1", @ANYRES64=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004380)='memory.current\x00', 0x0, 0x0) fspick(r5, &(0x7f00000043c0)='./file0\x00', 0x0) (async) fspick(r5, &(0x7f00000043c0)='./file0\x00', 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000004840)={{0x5, 0x0, 0xfffffff7, 0x0, '\x00', 0x4}, 0x0, [0xf7, 0x1, 0xffffffffffffff2d, 0x978, 0x800, 0x8, 0x5, 0x4, 0x8, 0x3, 0xcb, 0x80c4, 0xb, 0x5, 0xe, 0x401, 0x0, 0x0, 0x5, 0xfff, 0xa0c, 0x7, 0xfffffffffffffff9, 0x3, 0x8, 0x11, 0x7, 0x8, 0x9, 0x10001, 0x5, 0x3, 0x9, 0x8, 0x4, 0x8, 0x4, 0x8, 0x1, 0x33, 0x10, 0x100, 0x7, 0x2, 0x0, 0x6, 0x8, 0x40, 0x80000001, 0xff, 0xa, 0x8, 0xe5, 0x3, 0xffffffff, 0x8cdf, 0x8000000000000000, 0xe15, 0xa537, 0x8000, 0x8000, 0x100000001, 0x9, 0x5, 0xfff, 0x400, 0x8001, 0x4, 0x2, 0xfffffffffffffffd, 0x100000001, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x5, 0x6, 0xc, 0x2, 0x1, 0x9, 0x6, 0x10, 0x828, 0x5, 0x2f06f964, 0x1, 0x3, 0x1775, 0x1, 0x3ff, 0x1, 0xb552, 0x7f, 0x66, 0x2e9, 0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x2, 0x6, 0x9, 0x9c6, 0x4c, 0xf7fa, 0x5, 0x0, 0x800, 0x7f, 0x1ff, 0x7, 0x10, 0xfffffffffffffffb, 0x6, 0x7, 0x8000000000000001, 0x4f8, 0x3, 0x4, 0x7fffffffffffffff, 0x10, 0x100000001]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000004840)={{0x5, 0x0, 0xfffffff7, 0x0, '\x00', 0x4}, 0x0, [0xf7, 0x1, 0xffffffffffffff2d, 0x978, 0x800, 0x8, 0x5, 0x4, 0x8, 0x3, 0xcb, 0x80c4, 0xb, 0x5, 0xe, 0x401, 0x0, 0x0, 0x5, 0xfff, 0xa0c, 0x7, 0xfffffffffffffff9, 0x3, 0x8, 0x11, 0x7, 0x8, 0x9, 0x10001, 0x5, 0x3, 0x9, 0x8, 0x4, 0x8, 0x4, 0x8, 0x1, 0x33, 0x10, 0x100, 0x7, 0x2, 0x0, 0x6, 0x8, 0x40, 0x80000001, 0xff, 0xa, 0x8, 0xe5, 0x3, 0xffffffff, 0x8cdf, 0x8000000000000000, 0xe15, 0xa537, 0x8000, 0x8000, 0x100000001, 0x9, 0x5, 0xfff, 0x400, 0x8001, 0x4, 0x2, 0xfffffffffffffffd, 0x100000001, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x5, 0x6, 0xc, 0x2, 0x1, 0x9, 0x6, 0x10, 0x828, 0x5, 0x2f06f964, 0x1, 0x3, 0x1775, 0x1, 0x3ff, 0x1, 0xb552, 0x7f, 0x66, 0x2e9, 0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x2, 0x6, 0x9, 0x9c6, 0x4c, 0xf7fa, 0x5, 0x0, 0x800, 0x7f, 0x1ff, 0x7, 0x10, 0xfffffffffffffffb, 0x6, 0x7, 0x8000000000000001, 0x4f8, 0x3, 0x4, 0x7fffffffffffffff, 0x10, 0x100000001]}) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) getgroups(0x7, &(0x7f0000000040)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0x0]) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 3.409924314s ago: executing program 3 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000300)='.\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000110000000000000002dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00040000105c07001400030064766d72703100"/28], 0x34}, 0x1, 0x0, 0x0, 0x4044041}, 0x44082) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="40e54500", @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf252e00000005001901060000000500180114000000060098004d08000006009800ff030000050018011f0000000400d000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.647508406s ago: executing program 3 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e80"], 0x88}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000680)={0x9, 0x0, [{0x0, 0x0, 0x4}, {0x903, 0x0, 0xffffffff}, {0xb80, 0x0, 0xd}, {0x9ae, 0x0, 0x3}, {0x84d, 0x0, 0x8}, {0x978, 0x0, 0xa7c}, {0x8e0}, {0x9e9, 0x0, 0x3}, {0xa3d, 0x0, 0x9}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.527393788s ago: executing program 3 (id=1430): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f00009de000/0x2000)=nil, 0x2000, 0x280000b, 0x28011, r0, 0x0) 1.459975248s ago: executing program 3 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}}) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.459593885s ago: executing program 3 (id=1432): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x1330, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1298, 0x1298, 0x1298, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00', {}, {}, 0xff}, 0x287, 0x1108, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'ipvlan1\x00', 0x2a, 0x3, 0x3ff, 0x8000, 0x4, 0x4, {0xc4}, {0xa}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5], 0x0, 0x2}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1390) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) r5 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtclass={0x54, 0x28, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6, 0xc}, {0x10, 0x5}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6b}}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.310731468s ago: executing program 0 (id=1436): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000131401010000000000000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) inotify_init() mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) stat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000400)) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r3}) r7 = socket(0xa, 0x1, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r8, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl(r7, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) 1.309921805s ago: executing program 1 (id=1437): syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x50093}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) read$eventfd(r0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14500800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x52c, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @empty, 0xc}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10002000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95e1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d404150}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x829}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x28c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbf, 0x3, "cdae185bcdfa7827eec109812da28fc97012ee80063f2ed79879d5b03a01723ec265ef1826cc24784a5c05057ccd740642b8fcf950760805ee95084d07e396f1f8872b535785ab5bacfa90026320e0cec2bf360253a6a13b4c82c73216c5890c391ac115782490fbb427b7f9c646fdd96d552f653bb8811e06206dd75c129b5a16bca4e67f5b2108d874ef4cebce8613904c809e96d22d46356e147beab68e37084a2c5ce68f600e3a68454da38defbad1468bfaa9ad958e80cc8f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "a1ea8172ccaffd8e6ddf666582207f9ce7181c8295cabf8d1369680df2ff10817b1a2b357521c948b967bb770c0fe8076b06b715bfa1ae9d9245259c2d6d48e75d244ec013cc14e1abff9f84798c026a4435a79090ba8dc9c56cba0cd13c07e670d981e8f33c1bee0b7e6d2cc3a9efd93a9d44f3122226a1fd5e4b7658dc5fd00be0c8a35daab303b2738b92b6dde81281a016b2ce365d4cc20e6ab95bb1f01de6b7a18d9f8e197e7475616b1f793ebfa2fd989069260f791e56096410c7b4943aa446ceff4639dd8df61fa92a98de87d0503b5079cd127e80a5d85362676d2d6944aef5b563ff62f067338942ff"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "ff639870e73d5910987aec44b3a0f7ad926f0f0fbf0b88d3b009ffa3e42c338f7cb0d671ac16aba262aa589b7d88762dea0b698f21c0e812873118591de7aae34eb54f210ca24037d4a8821a01e9f903f01d155bf1d3dddb159dc0c77aa1f9d9fa6d876681f0e65ee087c746b4649ece45f0d0a7cb11684ec66ed12e3ae113180cae96d951b996f507cf0c0499d153affd77b41a9dbaf923715822dbf2737d0cc0586db183948e96b80e6534e43ce41bf35d232fe04ca6b9b36bb391c9"}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x95, 0x3, "e1df2f1467b35f566cf45da58cc1d0992684f194898786210c4b79ad498f873ea41f6e4ecb026c0b6927f079678406c36ed9f3fb17171e2c5089fc09430e55b6a91bb2222babad911a12fff387a4e1408ff49bf41c288f439961f622a00b8c2669823646d95241ae7a323e0d79f6420789f20a66d5e5cdc3d178fb2360674ce3bc35c6a6daea77f7728c512c11207336e3"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x82, 0x3, "9d737c299f15dab01d7190ce55714bc2f746dd708fb78b96f6591f27f4b601df08cf5596b66d9f4abf6e801c455e123eec7b0cef853acedb91f7f799c2c3b2e72a241f5145d72aa09e48b557fb43930861349af5cf59be1036fd3d10d7c628e1464e0cb407812d72b22ab832cbc5698555652e44d988a307151a3dfff45d"}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x841) 1.30959512s ago: executing program 1 (id=1438): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xb}, @device_b, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) 930.194687ms ago: executing program 1 (id=1440): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) listen(r6, 0x2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x900, 0x4, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) fcntl$dupfd(r6, 0x406, r6) (async) r9 = fcntl$dupfd(r6, 0x406, r6) recvmmsg(r9, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10, &(0x7f0000000240)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36, 0x39, 0x36, 0x65]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10, &(0x7f0000000240)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36, 0x39, 0x36, 0x65]}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 670.143327ms ago: executing program 0 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8113}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="a0c6ed9594", 0x5) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x114, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (rerun: 64) 652.700628ms ago: executing program 1 (id=1442): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f0000001240)) write$FUSE_INIT(r3, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000000, 0x200200, 0x8001, 0x9, 0x2, 0x5, 0x0, 0x0, 0x100, 0x401}}, 0x50) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x101, &(0x7f0000000100)={[0xbb21]}, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000440)={'trans=virtio,', {[{@dfltuid}]}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r7 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r8, r9, &(0x7f00000001c0), 0x8) fcntl$addseals(r9, 0x409, 0x8) mmap(&(0x7f00003a2000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0x3e7d000) tkill(r7, 0x16) 650.912016ms ago: executing program 0 (id=1443): getrusage(0xffffffffffffffff, &(0x7f0000000340)) 650.651435ms ago: executing program 0 (id=1444): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3}) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 580.066097ms ago: executing program 0 (id=1445): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x80, 0x0, 0x0, 0x9}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f00000002c0)={0x401, 0xffffffd1, 0x3597, 0x1, 0x71, 0x3ff, 0x7, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x4, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0e02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000080)={0x8, 0x0, r5}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0x1}) 578.742248ms ago: executing program 0 (id=1446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) socket$isdn_base(0x22, 0x3, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r3 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x33cd, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 439.984899ms ago: executing program 1 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a33, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) 439.54108ms ago: executing program 4 (id=1448): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@generic={0x8, "0006fa44ccd1df8a8df2739deacf31fbf8f92b4c1c747a386cb34ac709a3233ae6601a4973fcb1af5700c4b1d1a573d6238bb5bb884d735dda3850520492dcccb2fd424b8c9ca3448aecd846dc66d11e7fb9e604b0c009b7b4cd51448af94eb14312497778d4f032db3eb6daf1c02a46aa05d2da9992fb62b2577fb88dc6"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="f63b9b2113ff798dd131c035bb55857164bce5e7cb90cb04df91c313b91aa33bb9a133584161d72444c8722bbba28eb1775f8a038625f5d213442b11176162da76b8a2dfb81f6176758e44bf84e6467e01110a662c3f2436783553b8d82764eab060a94892cba2cbd4fce84ab301fd79c2cd04467e5deab5b1e3efa04941b5f611381e81", 0x84}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x368}, 0x404c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x38}}, 0x4048000) 387.349967ms ago: executing program 4 (id=1449): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=0xffffffffffffffff], 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004180)={&(0x7f00000043c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="2da004008d8b00002c0012800e00010069703665727370616e000000180002800500160002000000040012000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) readv(r4, &(0x7f00000039c0)=[{&(0x7f0000002680)=""/4096, 0x1000}], 0x1) r5 = io_uring_setup(0x3461, &(0x7f00000003c0)={0x0, 0x46d2, 0x20000, 0x2, 0x400022a}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x3}, 0x1) readv(r4, &(0x7f0000000580)=[{&(0x7f0000004440)=""/4105, 0x1009}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000004200)=""/15, 0xf}, {&(0x7f00000024c0)=""/240, 0xf0}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/16, 0x10}], 0xc) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0xfffffffffffffeb3) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 386.09046ms ago: executing program 4 (id=1450): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@flushsa={0x27c, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x32}, [@tmpl={0x144, 0x5, [{{@in6=@remote, 0x10, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x3, 0x1, 0x8, 0x4, 0x40, 0x5}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d5, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x3506, 0x2, 0x2, 0x1, 0x90000, 0x7, 0x8}, {{@in=@remote, 0x4d5, 0xff}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x23, 0xa, 0x6}, {{@in=@empty, 0x4d5, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x1, 0x2, 0x7f, 0x3b67, 0x10, 0x3}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3504, 0x0, 0x2, 0xd, 0xf, 0x1000, 0x9}]}, @algo_crypt={0x122, 0x2, {{'lrw-twofish-3way\x00'}, 0x6d0, "458d1e37e31b1cc80b51d783c4f14022e57def09523c5539a4c6f0810c926ce0217786bf58291d35bd754d5efce1a7a38641631130f4b3366b76805fea6586d04c63f5f3a910d795e9312cb59b7309cc0016e85e867567cceb17daabe7c329ca327d7220c3e40d24bd78372e6a1affba81c17b398f6c948567f92e52b8687c4c10a3e2b40ab1cdcbf64a4ea1512fde6fadeac33c54507bc79000787d4f2a5a94673b33e0f7bc62834fcdbc68c56c2d619fd071dace2767d57276b8ea9a301084289c4b2b0446bc4aac79fa9456e03eab404732e9b9d5fa9223eb"}}]}, 0x27c}, 0x1, 0x0, 0x0, 0xc040}, 0x4c000) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) (async, rerun: 32) r3 = landlock_create_ruleset(&(0x7f0000000380)={0x8000, 0xd, 0x2}, 0x18, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000003c0)) (async) r4 = syz_open_dev$vivid(&(0x7f0000000400), 0x0, 0x2) close_range(r4, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0xffb0, 0x5, 0x100, 0x0, 0x40000, r5}) (async) sendmmsg$sock(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)="8f174e17cc85472dd99bdfeea509c1159c097771ac7b7785803e4638f11f7558feaafb1705877cfa1634578c29485de0b5ee50288c8348a453398abbad9a10cd5c681380b103b002b16b7751eb3e3a93f8b4ade00a30f691076771fceead5567a37e5691778e51f0ae1a83dd48defd52111e37e6444cd2ecf91dc89e368fe08c1a05d8be7db7d49be3df981c80cfda7c9066bb0a8a9ebc80cf4f6189ef044cbd40b8e322b6ec62d82dd7c655fa2ff5aefab8f8093dcd2be4756650f0f4e67b442fdcac465a8185e27cd1d7db6c", 0xcd}, {&(0x7f0000000600)="ae06e7f7917fd439098c7422a7975e5794e16001a6e6b5febac2fd5cb2792807f89cf49c416adafc1289fbef69e8fb492048acaa2ff42701098453fa23a93d5d345c0265f1786c0b56a4ce5d61c5cca523c0c6efa8dae692853abf07b42baee1ed8312f445573fe5766244fb6edd520fae80e49b762ed57782c2e6747ee9ef614924f813f82e52db5d45d3b384cc36f6f67b037b9d73f563bf6906426ec8", 0x9e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="2e11350b331e10cf30507cdb3cb165fd40501afb5fe72b46d82c831e22ce59e6ae86c75b8d151fb87ba34cc70b71c4eb441d2720cff8f2669ef78d9da940b4f1a516bd6033d8c5a072dab1d0360d818a60ff3e07129f8c9147371d96", 0x5c}], 0x4, &(0x7f0000001780)=[@txtime={{0x18, 0x1, 0x3d, 0xe3f2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000001800)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)="c54292d640d01a91c721dc33be19f2b930dcdd5631d2a7433c5e5486cc0c96889d", 0x21}, {&(0x7f00000018c0)="2a0ab47a78a79ce274384cce6bf99f45045ca766745ee3e0006abfa28a0bc485de22db49808e633155b843a8c2ff777e0727654e4e92cbf506d22cd627432238951cd206ee67319a95862a70441b054cee4b1bc072977ab5292cdee44526db1bbe47ef80d5c05dd8803b024ad4d8b335827fbe9e8d80ee6b702ae468939befb493755b6c50bd6013143299a13e56341872d328acc200f960ae1be98b9ed5ed3285fc5c38432a7ff4e4745289e92c93f18a295b944c3a7324c3abc85ac3c3b308247141b7efbfd15c9e758fd69f77794b2b67392ff57f9c59d2ce8db3a2fa9663afa6fd43aba6de74", 0xe8}, {&(0x7f00000019c0)="843fc1e3974d79c23e0a230766a1787fc742446cc68303d91634c8bc2b3c1aa95d205fa6f0953533bcb8648bcefa574cce0be87db330ec0ff269d4b29f42b4dc4bac2346c0cdd1f43b9f9f69b05c89db055aebd3d9004abfd6819ab5b859445db496e55fa7245863718a1f5a976fffff205a679003d490eb06cce27f5d057245626803e03891889cb776864921723716d90b90e468d8832df91e7852dc26bd6f2888f939ec9139693d7bfa22a25d407ae8dd", 0xb2}], 0x3, &(0x7f0000001ac0)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0x18}}, {{&(0x7f0000001b00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b80)="380d9e406bd00fe0d439b52f05bf74a94c29ee32e9faeb1e38de7a7b3f5654ec7cb27bda04ee83be4587c9051671d9c81179e3e724b31632026678436c701480dc0bc43607deb365bf5210d0091bb5e436764e8039d1e45c49edf5678a32de1a", 0x60}, {&(0x7f0000001c00)="695aef6a7d9b37bd07e536da4413e1c87329f54514d84d276ad6d263b34a35f98b054a5d9dd5a28d3efa8691e762bb5d7bd328ca4e420ce2384104aba88dfb34d62081c5efcdfa6a4acd89b1d9d3dc182702cecfbbce6b1af9ad94607bf76064", 0x60}, {&(0x7f0000001c80)="c7c414d06d2d89be5a6dd11d45dab79ed9b5dfd8d9820eec903dd17b8bea6e59af5294966baa31ce09643f57a5ac95b72988b1be04e3a35ab225d3066d37d35837749e942f7788c5869ee10ecefc19ec0b112aa9126864873e3248daaadd9d5925cf87cb796a30d3cbb058cd70dced18211d6083defd1e88450274d37add47", 0x7f}], 0x3, &(0x7f0000001d40)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}], 0x18}}], 0x3, 0x80) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001e80), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002200)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000001ec0)={0x2dc, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd25}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x2, 0x1, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000002380)={&(0x7f0000002240), 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x78, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x28008001}, 0x20000000) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) accept$packet(r2, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002440)={'wlan1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000002480)={0x3, 0x9635, 0x8, {0x0, 0x9}, 0x7, 0x2}) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002500)={{0x2, 0x4e22, @broadcast}, {0x306, @remote}, 0x1c, {0x2, 0x4e22, @private=0xa010100}, 'pimreg0\x00'}) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x40, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="bee1fd150a76"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40041}, 0x888) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000026c0)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000002700)=@mmap={0x70000, 0xd, 0x4, 0x4, 0x1, {0x0, 0xea60}, {0x5, 0x2, 0x43, 0x9, 0x1, 0x4, "709ed94c"}, 0x1, 0x1, {}, 0x1, 0x0, r10}) (async, rerun: 64) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) (async) syz_io_uring_complete(0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) 300.072662ms ago: executing program 4 (id=1451): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2dc, 0x105000) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x8, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x101, 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x4, 0xe, 0x5}) 229.126654ms ago: executing program 4 (id=1452): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000440), &(0x7f0000000040)=@udp=r6}, 0x20) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') close_range(r1, 0xffffffffffffffff, 0x0) 734.808µs ago: executing program 1 (id=1453): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x2, 0x5, 0x100, "cdccbaef52c6e52aeb7a243040817170326e10870e1523e974ae8a4ac42aaa9a", 0x33524742}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x33) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000200)={0x2, {0x3ff, 0x10, 0x3ff, 0x5, 0xfffffffc, 0x8}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 0s ago: executing program 4 (id=1454): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000003c0)=""/130, 0x82}], 0x5}, 0x10002) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000003c0)=""/130, 0x82}], 0x5}, 0x10002) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) kernel console output (not intermixed with test programs): ink: 36 bytes leftover after parsing attributes in process `syz.1.412'. [ 102.783353][ T5931] usb 7-1: device descriptor read/64, error -71 [ 102.905351][ T5931] usb usb7-port1: attempt power cycle [ 103.049436][ T7417] lo speed is unknown, defaulting to 1000 [ 103.102248][ T7420] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 103.105150][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 103.108867][ T7420] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 103.112277][ T7420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.269970][ T5931] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 103.290597][ T5931] usb 7-1: device descriptor read/8, error -71 [ 103.326047][ T830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.498019][ T7448] netlink: 'syz.3.429': attribute type 21 has an invalid length. [ 103.501004][ T7448] netlink: 156 bytes leftover after parsing attributes in process `syz.3.429'. [ 103.503071][ T830] usb 5-1: Using ep0 maxpacket: 32 [ 103.517315][ T830] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 103.522533][ T830] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 103.528076][ T830] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.531455][ T830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.533561][ T5931] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 103.535659][ T830] usb 5-1: Product: з [ 103.538041][ T830] usb 5-1: Manufacturer:   [ 103.539507][ T830] usb 5-1: SerialNumber: syz [ 103.539786][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.431'. [ 103.555514][ T5931] usb 7-1: device descriptor read/8, error -71 [ 103.581339][ T7454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.432'. [ 103.598086][ T7454] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 103.602405][ T7454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.432'. [ 103.606680][ T7454] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 103.612128][ T7459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.432'. [ 103.616071][ T7459] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 103.666412][ T5931] usb usb7-port1: unable to enumerate USB device [ 103.755777][ T830] cdc_ncm 5-1:1.0: bind() failure [ 103.763392][ T830] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 103.765544][ T830] cdc_ncm 5-1:1.1: bind() failure [ 103.771007][ T830] usb 5-1: USB disconnect, device number 4 [ 103.817812][ T6010] hid (null): unknown global tag 0xe [ 103.820355][ T6010] hid (null): unknown global tag 0xe [ 103.827197][ T6010] hid-generic 8001:0004:0009.0005: unknown global tag 0xe [ 103.830168][ T6010] hid-generic 8001:0004:0009.0005: item 0 4 1 14 parsing failed [ 103.832836][ T6010] hid-generic 8001:0004:0009.0005: probe with driver hid-generic failed with error -22 [ 103.872948][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.877385][ T7477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7477 comm=syz.3.439 [ 103.886846][ T7477] netlink: 'syz.3.439': attribute type 7 has an invalid length. [ 103.894969][ T93] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.897838][ T7477] netlink: 'syz.3.439': attribute type 7 has an invalid length. [ 103.900230][ T93] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.902836][ T93] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.905499][ T93] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.910233][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 103.913733][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 103.916612][ T7486] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 103.919634][ T7486] UDF-fs: Scanning with blocksize 512 failed [ 103.922198][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 103.925214][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 103.928114][ T7486] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 103.930851][ T7486] UDF-fs: Scanning with blocksize 1024 failed [ 103.932950][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 103.935779][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 103.938612][ T7486] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 103.941035][ T7486] UDF-fs: Scanning with blocksize 2048 failed [ 103.943098][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 103.945903][ T7486] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 103.948761][ T7486] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 103.951523][ T7486] UDF-fs: Scanning with blocksize 4096 failed [ 103.953397][ T7486] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 103.959488][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=7486 comm=syz.1.441 [ 103.960048][ T40] kauditd_printk_skb: 1137 callbacks suppressed [ 103.960057][ T40] audit: type=1400 audit(1771662362.282:1617): avc: denied { write } for pid=7484 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.047128][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.049596][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.083819][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.088605][ T7495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.147015][ T93] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.149726][ T93] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.152923][ T93] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.155590][ T93] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.158430][ T93] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.161163][ T93] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.164433][ T93] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.167224][ T93] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.179100][ T40] audit: type=1400 audit(1771662362.499:1618): avc: denied { map } for pid=7502 comm="syz.3.446" path="socket:[18397]" dev="sockfs" ino=18397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 104.213970][ T7505] lo speed is unknown, defaulting to 1000 [ 104.255964][ T7506] dns_resolver: Unsupported server list version (0) [ 104.302038][ T7511] geneve2: entered promiscuous mode [ 104.305062][ T7511] geneve2: entered allmulticast mode [ 104.311734][ T6085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 104.326025][ T6086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 104.329712][ T6086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 104.336945][ T6086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 104.388134][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51354 sclass=netlink_route_socket pid=7520 comm=syz.3.451 [ 104.401202][ T40] audit: type=1400 audit(1771662362.706:1619): avc: denied { execute } for pid=7519 comm="syz.3.451" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 104.599826][ T7518] netlink: 'syz.1.450': attribute type 83 has an invalid length. [ 104.668764][ T7518] program syz.1.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.722536][ T40] audit: type=1400 audit(1771662363.032:1620): avc: denied { ioctl } for pid=7531 comm="syz.1.454" path="socket:[23569]" dev="sockfs" ino=23569 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.783777][ T40] audit: type=1400 audit(1771662363.091:1621): avc: denied { read } for pid=7546 comm="syz.1.459" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.801696][ T7542] netlink: 'syz.0.456': attribute type 8 has an invalid length. [ 104.804293][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 104.820930][ T7542] bond0: entered promiscuous mode [ 104.823099][ T7542] bond_slave_0: entered promiscuous mode [ 104.825603][ T7542] bond_slave_1: entered promiscuous mode [ 104.829291][ T7542] gretap0: entered promiscuous mode [ 104.832069][ T7542] bond0: left promiscuous mode [ 104.832959][ T7555] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 104.833549][ T7542] bond_slave_0: left promiscuous mode [ 104.833640][ T7542] bond_slave_1: left promiscuous mode [ 104.840438][ T7542] gretap0: left promiscuous mode [ 104.855801][ T7543] netlink: 'syz.0.456': attribute type 8 has an invalid length. [ 104.859131][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 104.911783][ T7543] bond0: entered promiscuous mode [ 104.913778][ T7543] bond_slave_0: entered promiscuous mode [ 104.916164][ T7543] bond_slave_1: entered promiscuous mode [ 104.919568][ T7543] gretap0: entered promiscuous mode [ 104.940246][ T40] audit: type=1400 audit(1771662363.249:1622): avc: denied { ioctl } for pid=7554 comm="syz.3.460" path="socket:[22227]" dev="sockfs" ino=22227 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 104.961944][ T7543] bond0: left promiscuous mode [ 104.963542][ T7543] bond_slave_0: left promiscuous mode [ 104.965453][ T7543] bond_slave_1: left promiscuous mode [ 104.969662][ T7543] gretap0: left promiscuous mode [ 105.082111][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.462'. [ 105.084862][ T7567] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.091321][ T7567] overlayfs: invalid origin (0000) [ 105.129164][ T40] audit: type=1400 audit(1771662363.437:1623): avc: denied { execute } for pid=7568 comm="syz.0.464" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 105.166079][ T7573] netlink: 'syz.0.466': attribute type 3 has an invalid length. [ 105.169681][ T7573] netlink: 'syz.0.466': attribute type 3 has an invalid length. [ 105.269701][ T7584] bond5: entered promiscuous mode [ 105.271975][ T7584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 105.318697][ T40] audit: type=1400 audit(1771662363.625:1624): avc: denied { read write } for pid=7596 comm="syz.3.473" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.328526][ T40] audit: type=1400 audit(1771662363.625:1625): avc: denied { open } for pid=7596 comm="syz.3.473" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.339190][ T40] audit: type=1400 audit(1771662363.625:1626): avc: denied { ioctl } for pid=7596 comm="syz.3.473" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.415883][ T7610] lo speed is unknown, defaulting to 1000 [ 105.455450][ T7614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 105.458473][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.466961][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 105.472770][ T7617] vhci_hcd: unknown pdu 1 [ 105.488310][ T6086] vhci_hcd vhci_hcd.1: stop threads [ 105.491042][ T6086] vhci_hcd vhci_hcd.1: release socket [ 105.493314][ T6086] vhci_hcd vhci_hcd.1: disconnect device [ 105.902512][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.044212][ T39] usb 5-1: device descriptor read/64, error -71 [ 106.286778][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.327622][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 106.428349][ T39] usb 5-1: device descriptor read/64, error -71 [ 106.468825][ T60] usb 8-1: device descriptor read/64, error -71 [ 106.539810][ T39] usb usb5-port1: attempt power cycle [ 106.711572][ T60] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 106.842869][ T60] usb 8-1: device descriptor read/64, error -71 [ 106.893421][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.913973][ T39] usb 5-1: device descriptor read/8, error -71 [ 106.965686][ T60] usb usb8-port1: attempt power cycle [ 107.157480][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.177507][ T39] usb 5-1: device descriptor read/8, error -71 [ 107.294060][ T39] usb usb5-port1: unable to enumerate USB device [ 107.299462][ T7686] input: syz0 as /devices/virtual/input/input7 [ 107.317994][ T60] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 107.338760][ T60] usb 8-1: device descriptor read/8, error -71 [ 107.448403][ T7693] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.581817][ T60] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 107.602439][ T60] usb 8-1: device descriptor read/8, error -71 [ 107.643353][ T7717] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 107.647014][ T7717] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 107.712064][ T60] usb usb8-port1: unable to enumerate USB device [ 108.782399][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 108.935291][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 108.939743][ T59] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 108.943669][ T59] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 108.948958][ T59] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 108.953654][ T59] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 108.959665][ T6018] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 108.963793][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.970352][ T59] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 108.974231][ T59] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 108.978091][ T59] usb 7-1: Product: syz [ 108.979931][ T59] usb 7-1: Manufacturer: syz [ 108.981620][ T59] usb 7-1: SerialNumber: syz [ 108.985967][ T59] usb 7-1: config 0 descriptor?? [ 108.991092][ T59] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.997241][ T59] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.044873][ T6010] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 109.125554][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 109.129562][ T6018] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 109.134169][ T6018] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 109.139714][ T6018] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.143379][ T7741] bridge0: entered promiscuous mode [ 109.144491][ T6018] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 109.157726][ T6018] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 109.161894][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.165419][ T6018] usb 6-1: Product: syz [ 109.170321][ T6018] usb 6-1: Manufacturer: syz [ 109.172396][ T6018] usb 6-1: SerialNumber: syz [ 109.173067][ T7743] program syz.3.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.178480][ T6010] usb 8-1: device descriptor read/64, error -71 [ 109.182834][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 109.190391][ T6018] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input8 [ 109.302173][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 109.302188][ T40] audit: type=1400 audit(1771662367.563:1640): avc: denied { write } for pid=7753 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.398197][ T6018] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 109.400781][ T6018] (id 0x00) [ 109.448478][ T6018] rc_core: IR keymap rc-imon-pad not found [ 109.450907][ T6018] Registered IR keymap rc-empty [ 109.452973][ T6018] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 109.456921][ T6018] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 109.604106][ T7758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.608226][ T40] audit: type=1400 audit(1771662367.861:1641): avc: denied { bind } for pid=7757 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.610932][ T6018] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 109.611817][ T6018] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input9 [ 109.627956][ T6018] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:9> initialized [ 109.784158][ T24] usb 7-1: USB disconnect, device number 14 [ 109.790122][ T24] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 109.807584][ T60] usb 6-1: USB disconnect, device number 9 [ 109.869305][ T40] audit: type=1400 audit(1771662368.128:1642): avc: denied { execute } for pid=7761 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 109.877124][ T40] audit: type=1400 audit(1771662368.128:1643): avc: denied { execute_no_trans } for pid=7761 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 109.926970][ T5285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.931167][ T5285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.934913][ T5285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.938232][ T5285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.941151][ T5285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.965111][ T7762] lo speed is unknown, defaulting to 1000 [ 110.111299][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 110.159291][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.162443][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.165042][ T7762] bridge_slave_0: entered allmulticast mode [ 110.167719][ T7762] bridge_slave_0: entered promiscuous mode [ 110.171539][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.173906][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.176549][ T7762] bridge_slave_1: entered allmulticast mode [ 110.179273][ T7762] bridge_slave_1: entered promiscuous mode [ 110.198009][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.202639][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.218276][ T7762] team0: Port device team_slave_0 added [ 110.222047][ T7762] team0: Port device team_slave_1 added [ 110.235771][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.238029][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.246215][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.250994][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.253426][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.261743][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.284698][ T7762] hsr_slave_0: entered promiscuous mode [ 110.287340][ T7762] hsr_slave_1: entered promiscuous mode [ 110.289498][ T7762] debugfs: 'hsr0' already exists in 'hsr' [ 110.291308][ T7762] Cannot create hsr debugfs directory [ 110.308488][ T7773] __nla_validate_parse: 8 callbacks suppressed [ 110.308500][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 110.383390][ T7762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.388068][ T7762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.393053][ T7762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.395487][ T40] audit: type=1400 audit(1771662368.644:1644): avc: denied { ioctl } for pid=7776 comm="syz.0.525" path="socket:[21471]" dev="sockfs" ino=21471 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.405058][ T7762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.426598][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.428978][ T7762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.431379][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.433633][ T7762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.436657][ T7785] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'. [ 110.455422][ T7785] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'. [ 110.462416][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.472164][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.475916][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.486394][ T7762] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.505416][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.508445][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.514864][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.517174][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.530195][ T40] audit: type=1400 audit(1771662368.783:1645): avc: denied { create } for pid=7792 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 110.653813][ T40] audit: type=1400 audit(1771662368.902:1646): avc: denied { getopt } for pid=7809 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.688378][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.698993][ T40] audit: type=1400 audit(1771662368.941:1647): avc: denied { create } for pid=7815 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.706291][ T7817] mkiss: ax0: crc mode is auto. [ 110.721546][ T7817] misc userio: The device must be registered before sending interrupts [ 110.724891][ T40] audit: type=1400 audit(1771662368.941:1648): avc: denied { bind } for pid=7815 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.740293][ T40] audit: type=1400 audit(1771662368.941:1649): avc: denied { setopt } for pid=7813 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.771686][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 110.845963][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.866712][ T7762] veth0_vlan: entered promiscuous mode [ 110.872744][ T7762] veth1_vlan: entered promiscuous mode [ 110.887979][ T7762] veth0_macvtap: entered promiscuous mode [ 110.894865][ T7762] veth1_macvtap: entered promiscuous mode [ 110.904221][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.908530][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.919024][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.922013][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.924781][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.927539][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969657][ T6087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.973690][ T7845] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.976269][ T7845] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 110.978920][ T7845] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.981589][ T7845] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 110.991328][ T6087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.020150][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.022745][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.090497][ T7849] syz.3.547 (7849) used greatest stack depth: 16568 bytes left [ 111.705617][ T7874] Bluetooth: MGMT ver 1.23 [ 111.719402][ T7874] macvlan2: entered promiscuous mode [ 111.721170][ T7874] bridge0: entered promiscuous mode [ 111.969735][ T63] Bluetooth: hci0: command tx timeout [ 112.116767][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 112.118032][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 112.202101][ T7892] validate_nla: 2 callbacks suppressed [ 112.202113][ T7892] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 112.206443][ T7892] netlink: 96 bytes leftover after parsing attributes in process `syz.3.560'. [ 112.209969][ T7892] netlink: 1 bytes leftover after parsing attributes in process `syz.3.560'. [ 112.224182][ T7892] netlink: 658 bytes leftover after parsing attributes in process `syz.3.560'. [ 112.380195][ T7909] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 112.383214][ T7909] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 112.429140][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 112.466328][ T7912] lo speed is unknown, defaulting to 1000 [ 112.713047][ T7903] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 112.722170][ T7903] bridge_slave_1: left allmulticast mode [ 112.724722][ T7903] bridge_slave_1: left promiscuous mode [ 112.727763][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.759272][ T7903] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 112.840463][ T7940] tmpfs: Bad value for 'mpol' [ 113.159066][ T7966] xt_hashlimit: size too large, truncated to 1048576 [ 113.742528][ T5285] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 113.752970][ T5285] Bluetooth: hci2: command 0x0401 tx timeout [ 113.885912][ T7980] fuse: Unknown parameter 'subj_user' [ 114.076080][ T5285] Bluetooth: hci0: command tx timeout [ 114.109780][ T7993] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.112716][ T7993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.117950][ T7993] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.120909][ T7993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 114.575965][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 114.575982][ T40] audit: type=1400 audit(1771662372.793:1675): avc: denied { sys_nice } for pid=8010 comm="syz.1.598" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 114.587625][ T40] audit: type=1400 audit(1771662372.793:1676): avc: denied { map } for pid=8010 comm="syz.1.598" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.625169][ T40] audit: type=1400 audit(1771662372.842:1677): avc: denied { set_context_mgr } for pid=8012 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.633684][ T8013] binder: 8012:8013 unknown command 0 [ 114.635648][ T8013] binder: 8012:8013 ioctl c0306201 200000000080 returned -22 [ 114.641535][ T40] audit: type=1400 audit(1771662372.862:1678): avc: denied { write } for pid=8012 comm="syz.1.599" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.650411][ T40] audit: type=1400 audit(1771662372.872:1679): avc: denied { call } for pid=8012 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.650628][ T8013] binder_alloc: 8012: binder_alloc_buf, no vma [ 114.788551][ T40] audit: type=1400 audit(1771662373.001:1680): avc: denied { map } for pid=8022 comm="syz.1.602" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 114.796530][ T40] audit: type=1400 audit(1771662373.011:1681): avc: denied { watch watch_reads } for pid=8022 comm="syz.1.602" path="pipe:[25790]" dev="pipefs" ino=25790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 114.801946][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.949090][ T6010] IPVS: starting estimator thread 0... [ 114.962744][ T8030] Bluetooth: MGMT ver 1.23 [ 115.037500][ T8037] raw_sendmsg: syz.1.608 forgot to set AF_INET. Fix it! [ 115.061575][ T8028] IPVS: using max 22 ests per chain, 52800 per kthread [ 115.104985][ T8042] netlink: 'syz.4.611': attribute type 5 has an invalid length. [ 115.115837][ T8044] netlink: 'syz.1.610': attribute type 63 has an invalid length. [ 115.120918][ T8042] ip6erspan0: entered promiscuous mode [ 115.126653][ T8044] gretap0: entered allmulticast mode [ 115.130446][ T8044] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.143467][ T40] audit: type=1400 audit(1771662373.369:1682): avc: denied { accept } for pid=8045 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 115.161932][ T40] audit: type=1400 audit(1771662373.369:1683): avc: denied { name_bind } for pid=8043 comm="syz.1.610" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 115.181926][ T40] audit: type=1400 audit(1771662373.389:1684): avc: denied { ioctl } for pid=8045 comm="syz.0.612" path="socket:[25312]" dev="sockfs" ino=25312 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 115.245914][ T8055] tmpfs: Unknown parameter 'nr_inoees' [ 115.281532][ T8057] netlink: 'syz.0.617': attribute type 15 has an invalid length. [ 115.724147][ T8101] __nla_validate_parse: 10 callbacks suppressed [ 115.724160][ T8101] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.631'. [ 115.760194][ T8107] netlink: 264 bytes leftover after parsing attributes in process `syz.4.634'. [ 115.797654][ T8111] syzkaller0: entered promiscuous mode [ 115.799449][ T8111] syzkaller0: entered allmulticast mode [ 115.802423][ T6087] TC_ACT_REPEAT abuse ? [ 115.827189][ T8114] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 115.829356][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 115.833605][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 115.836842][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 115.840085][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 115.842925][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 115.851918][ T8114] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.878334][ T8119] overlayfs: failed lookup in lower (newroot/194, name='file0', err=-40): overlapping layers [ 115.882759][ T8119] overlayfs: failed lookup in lower (newroot/194, name='file0', err=-40): overlapping layers [ 115.887645][ T8120] overlayfs: failed lookup in lower (newroot/194, name='file0', err=-40): overlapping layers [ 115.892247][ T8119] overlayfs: failed lookup in lower (newroot/194, name='file0', err=-40): overlapping layers [ 115.897512][ T8119] overlayfs: failed lookup in lower (newroot/194, name='file0', err=-40): overlapping layers [ 115.931327][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 116.099715][ T5931] hid-generic 0001:0003:000E.0006: unexpected long global item [ 116.102392][ T5931] hid-generic 0001:0003:000E.0006: probe with driver hid-generic failed with error -22 [ 116.158089][ T5285] Bluetooth: hci0: command tx timeout [ 116.298705][ T830] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.459607][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 116.466212][ T830] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.470434][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.483076][ T830] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.486464][ T830] pvrusb2: ********** [ 116.486474][ T830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.486487][ T830] pvrusb2: Important functionality might not be entirely working. [ 116.486495][ T830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.504135][ T830] pvrusb2: ********** [ 116.547948][ T8168] syz.1.654: attempt to access beyond end of device [ 116.547948][ T8168] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 116.548015][ T8168] gfs2: error -5 reading superblock [ 116.659134][ T8176] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 116.662289][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 116.663406][ T8176] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 116.685684][ T2487] pvrusb2: Invalid write control endpoint [ 116.734741][ T2487] pvrusb2: Invalid write control endpoint [ 116.740442][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.745012][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.748085][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 116.752371][ T2487] pvrusb2: Device being rendered inoperable [ 116.756246][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 116.759203][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 116.768103][ T2487] pvrusb2: Attached sub-driver cx25840 [ 116.770266][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 116.773715][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 116.881296][ T8194] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.663'. [ 116.939064][ T8200] netlink: 'syz.0.647': attribute type 10 has an invalid length. [ 116.943946][ T8200] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.121138][ T8207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.137047][ T8207] macvlan2: entered promiscuous mode [ 117.138701][ T8207] macvlan2: entered allmulticast mode [ 117.140764][ T8207] bond3: entered promiscuous mode [ 117.142520][ T8207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.154329][ T8207] bond3: left promiscuous mode [ 117.308629][ T8216] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 117.416879][ T8225] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 117.745698][ T8238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8238 comm=syz.1.677 [ 117.746553][ T8240] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 117.756833][ T59] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 117.909488][ T59] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.914309][ T59] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.918730][ T59] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.922698][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.929875][ T8230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.933963][ T59] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.953217][ T8247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8247 comm=syz.1.678 [ 118.143965][ T830] usb 8-1: USB disconnect, device number 15 [ 118.250444][ T63] Bluetooth: hci0: command tx timeout [ 118.523882][ T8266] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 118.825923][ T8295] tmpfs: Too few inodes for current use [ 118.877147][ T6011] IPVS: starting estimator thread 0... [ 118.929661][ T8303] openvswitch: netlink: Missing key (keys=40, expected=80) [ 118.933777][ T8303] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 118.936399][ T8303] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 118.973209][ T8299] IPVS: using max 28 ests per chain, 67200 per kthread [ 119.070307][ T5931] usb 5-1: USB disconnect, device number 9 [ 119.264448][ T6011] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 119.416582][ T6011] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 119.419414][ T6011] usb 8-1: config 0 has no interface number 0 [ 119.434434][ T6011] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 119.437688][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.440505][ T6011] usb 8-1: Product: syz [ 119.441880][ T6011] usb 8-1: Manufacturer: syz [ 119.443464][ T6011] usb 8-1: SerialNumber: syz [ 119.446642][ T6011] usb 8-1: config 0 descriptor?? [ 119.908336][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 119.908347][ T40] audit: type=1400 audit(1771662378.103:1705): avc: denied { load_policy } for pid=8344 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 119.917177][ T8345] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 119.921245][ T8345] SELinux: failed to load policy [ 120.035505][ T8357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8357 comm=syz.1.709 [ 120.098985][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.105363][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.131468][ T8358] ip6erspan0: left promiscuous mode [ 120.341848][ T63] Bluetooth: hci0: command tx timeout [ 120.518115][ T830] libceph: connect (1)[c::]:6789 error -101 [ 120.520562][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 120.560010][ T40] audit: type=1400 audit(1771662378.750:1706): avc: denied { append } for pid=8384 comm="syz.4.719" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.783189][ T830] libceph: connect (1)[c::]:6789 error -101 [ 120.785279][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 120.877619][ T63] Bluetooth: hci2: unexpected event for opcode 0x080c [ 120.878830][ T8393] __nla_validate_parse: 6 callbacks suppressed [ 120.878844][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 121.004671][ T6087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.007590][ T6087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.010324][ T6087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.014825][ T6087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 121.219307][ T40] audit: type=1400 audit(1771662379.407:1707): avc: denied { ioctl } for pid=8412 comm="syz.0.727" path="socket:[26480]" dev="sockfs" ino=26480 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.293834][ T830] libceph: connect (1)[c::]:6789 error -101 [ 121.295936][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 121.396133][ T8385] ceph: No mds server is up or the cluster is laggy [ 121.513836][ T8418] netlink: 156 bytes leftover after parsing attributes in process `syz.4.729'. [ 121.521841][ T8418] overlay: filesystem on ./bus not supported as upperdir [ 121.559573][ T8422] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 121.596648][ T40] audit: type=1400 audit(1771662379.786:1708): avc: denied { write } for pid=8424 comm="syz.4.731" lport=42613 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 121.597534][ T8425] sctp: [Deprecated]: syz.4.731 (pid 8425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.597534][ T8425] Use struct sctp_sack_info instead [ 121.604404][ T40] audit: type=1400 audit(1771662379.786:1709): avc: denied { setopt } for pid=8424 comm="syz.4.731" lport=42613 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 121.640236][ T40] audit: type=1400 audit(1771662379.826:1710): avc: denied { read } for pid=8429 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.671361][ T8433] sctp: [Deprecated]: syz.4.733 (pid 8433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.671361][ T8433] Use struct sctp_sack_info instead [ 121.713595][ T8437] netlink: 'syz.4.734': attribute type 2 has an invalid length. [ 121.718779][ T8437] netlink: 14 bytes leftover after parsing attributes in process `syz.4.734'. [ 121.996009][ T40] audit: type=1400 audit(1771662380.174:1711): avc: denied { relabelfrom } for pid=8451 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.003329][ T40] audit: type=1400 audit(1771662380.174:1712): avc: denied { relabelto } for pid=8451 comm="syz.4.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.034588][ T8454] fuse: Bad value for 'fd' [ 122.037034][ T8454] fuse: Unknown parameter ' [ 122.037034][ T8454] ' [ 122.070864][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 122.081109][ T6011] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.084513][ T6011] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 122.088069][ T6011] asix 8-1:0.251: probe with driver asix failed with error -5 [ 122.091860][ T6011] usb 8-1: USB disconnect, device number 16 [ 122.120706][ T40] audit: type=1400 audit(1771662380.304:1713): avc: denied { name_bind } for pid=8458 comm="syz.4.743" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.170367][ T8462] netlink: 'syz.3.742': attribute type 17 has an invalid length. [ 122.173670][ T8462] netlink: 5 bytes leftover after parsing attributes in process `syz.3.742'. [ 122.179031][ T8462] macvtap0: entered allmulticast mode [ 122.181343][ T8462] veth0_macvtap: entered allmulticast mode [ 122.184540][ T8462] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 122.350952][ T8471] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.439419][ T63] Bluetooth: hci0: command 0x0405 tx timeout [ 122.484109][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 122.487930][ T8477] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.199701][ T8490] lo speed is unknown, defaulting to 1000 [ 123.218202][ T63] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 123.237444][ T40] audit: type=1400 audit(1771662381.419:1714): avc: denied { ioctl } for pid=8489 comm="syz.3.753" path="socket:[26561]" dev="sockfs" ino=26561 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.430630][ T8502] qnx6: unable to read the first superblock [ 123.434227][ T8502] qnx6: unable to read the first superblock [ 123.436986][ T8502] qnx6: unable to read the first superblock [ 123.471759][ T8507] netlink: 72 bytes leftover after parsing attributes in process `syz.0.755'. [ 123.476173][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 123.508794][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=8509 comm=syz.4.760 [ 123.516242][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8509 comm=syz.4.760 [ 123.900988][ T1459] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 124.054618][ T1459] usb 9-1: Using ep0 maxpacket: 8 [ 124.061788][ T1459] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.066990][ T1459] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.071405][ T1459] usb 9-1: config 0 interface 0 has no altsetting 0 [ 124.074433][ T1459] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.078321][ T1459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.084707][ T1459] usb 9-1: config 0 descriptor?? [ 124.302480][ T8551] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 124.308598][ T8551] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.313696][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.773'. [ 124.358721][ T8559] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.775'. [ 124.473524][ T8569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.476387][ T8569] batadv_slave_0: entered promiscuous mode [ 124.495344][ T1459] hid_parser_main: 5 callbacks suppressed [ 124.495357][ T1459] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 124.499908][ T1459] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 124.502135][ T1459] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 124.504504][ T1459] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 124.508082][ T1459] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 124.512139][ T1459] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 124.776884][ T830] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 124.927880][ T830] usb 8-1: Using ep0 maxpacket: 8 [ 124.932792][ T830] usb 8-1: unable to get BOS descriptor or descriptor too short [ 124.937461][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 124.942886][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.947095][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 124.951863][ T830] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 124.956036][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 124.960211][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 124.964700][ T830] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 124.971114][ T830] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 124.974984][ T830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.978739][ T830] usb 8-1: Product: syz [ 124.980629][ T830] usb 8-1: Manufacturer: syz [ 124.982621][ T830] usb 8-1: SerialNumber: syz [ 124.987142][ T830] usb 8-1: config 0 descriptor?? [ 124.990412][ T8574] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.993599][ T8574] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 124.999600][ T830] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.202232][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 125.202249][ T40] audit: type=1804 audit(1771662383.372:1717): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.781" name="file0" dev="ramfs" ino=27506 res=1 errno=0 [ 125.231519][ T8574] hub 6-0:1.0: USB hub found [ 125.234949][ T8574] hub 6-0:1.0: 1 port detected [ 125.321913][ T830] usb 8-1: USB disconnect, device number 17 [ 125.407282][ T8601] UHID_CREATE from different security context by process 690 (syz.1.791), this is not allowed. [ 125.409450][ T8598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8598 comm=syz.0.790 [ 125.487421][ T8611] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 125.620240][ T40] audit: type=1400 audit(1771662383.791:1718): avc: denied { accept } for pid=8626 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 125.739213][ T40] audit: type=1400 audit(1771662383.901:1719): avc: denied { map } for pid=8632 comm="syz.1.800" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 125.772339][ T1459] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 125.937123][ T8655] netlink: 'syz.3.806': attribute type 27 has an invalid length. [ 126.013609][ T8655] batadv_slave_0: left promiscuous mode [ 126.016971][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.038997][ T8655] veth0_macvtap: left allmulticast mode [ 126.042927][ T8655] macvtap0: left allmulticast mode [ 126.088767][ T8655] ip6erspan0: left promiscuous mode [ 126.098697][ T1164] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.101871][ T1164] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.104829][ T1164] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.107663][ T1164] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.110530][ T1164] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.114488][ T1164] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.117477][ T1164] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.120253][ T1164] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.158790][ T40] audit: type=1400 audit(1771662384.329:1720): avc: denied { bind } for pid=8670 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.209206][ T40] audit: type=1400 audit(1771662384.379:1721): avc: denied { create } for pid=8674 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.216336][ T40] audit: type=1400 audit(1771662384.379:1722): avc: denied { ioctl } for pid=8674 comm="syz.3.811" path="socket:[29156]" dev="sockfs" ino=29156 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.304612][ T8679] netlink: 'syz.3.812': attribute type 2 has an invalid length. [ 126.308071][ T8679] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 126.353284][ T8683] netlink: 'syz.3.813': attribute type 5 has an invalid length. [ 126.408238][ T8686] __nla_validate_parse: 3 callbacks suppressed [ 126.408255][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 126.430007][ T8686] hsr_slave_1 (unregistering): left promiscuous mode [ 126.696700][ T5285] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 126.770323][ T5285] Bluetooth: hci0: unexpected event for opcode 0x080f [ 126.800100][ T8697] syzkaller1: entered promiscuous mode [ 126.801925][ T8697] syzkaller1: entered allmulticast mode [ 126.921538][ T8706] fuse: Bad value for 'fd' [ 127.009038][ T8714] netlink: 68 bytes leftover after parsing attributes in process `syz.0.824'. [ 127.052432][ T40] audit: type=1400 audit(1771662385.217:1723): avc: denied { getopt } for pid=8716 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.278945][ T8737] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 127.282874][ T8737] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.290305][ T8739] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 127.294800][ T40] audit: type=1400 audit(1771662385.466:1724): avc: denied { relabelto } for pid=8738 comm="syz.0.832" name="file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 127.304887][ T40] audit: type=1400 audit(1771662385.466:1725): avc: denied { associate } for pid=8738 comm="syz.0.832" name="file0" dev="tmpfs" ino=1135 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 127.439061][ T60] usb 9-1: USB disconnect, device number 2 [ 127.581336][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 127.736026][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 127.836218][ T40] audit: type=1400 audit(1771662385.994:1726): avc: denied { rmdir } for pid=5924 comm="syz-executor" name="file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 127.976830][ T59] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 128.137038][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 128.139972][ T59] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 128.143371][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.147034][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.150141][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 128.154170][ T59] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 128.157219][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.161091][ T59] usb 9-1: config 0 descriptor?? [ 128.386763][ T8798] nbd: socks must be embedded in a SOCK_ITEM attr [ 128.418841][ T8798] trusted_key: syz.1.849 sent an empty control message without MSG_MORE. [ 128.584053][ T59] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0008/input/input11 [ 128.658496][ T59] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.0008/input/input12 [ 128.710649][ T8806] fuse: Bad value for 'fd' [ 128.713399][ T8806] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 128.738132][ T59] kye 0003:0458:5013.0008: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 128.787859][ T8780] overlayfs: failed to clone lowerpath [ 128.844358][ T8820] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 128.848618][ T8820] batman_adv: batadv0: Adding interface: gretap2 [ 128.851362][ T8820] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.859560][ T8820] batman_adv: batadv0: Interface activated: gretap2 [ 129.069749][ T830] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 129.221608][ T830] usb 8-1: config 4 has an invalid interface number: 28 but max is 0 [ 129.225072][ T830] usb 8-1: config 4 has no interface number 0 [ 129.229684][ T830] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 129.233717][ T830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.237407][ T830] usb 8-1: Product: syz [ 129.239226][ T830] usb 8-1: Manufacturer: syz [ 129.241300][ T830] usb 8-1: SerialNumber: syz [ 129.268161][ T830] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:4.28/input/input13 [ 129.493469][ T8851] binder: 8850:8851 ioctl c0306201 2000000003c0 returned -14 [ 129.521979][ T5319] bcm5974 8-1:4.28: could not read from device [ 129.531264][ T8853] netlink: 'syz.0.869': attribute type 21 has an invalid length. [ 129.534679][ T8853] netlink: 'syz.0.869': attribute type 6 has an invalid length. [ 129.537905][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.869'. [ 129.546400][ T8812] bcm5974 8-1:4.28: could not read from device [ 129.574625][ T830] usb 8-1: USB disconnect, device number 18 [ 129.594612][ T8859] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 129.612711][ T6011] usb 9-1: USB disconnect, device number 3 [ 129.714150][ T8863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.717895][ T8863] bond1: (slave bond2): making interface the new active one [ 129.720725][ T8863] bond1: (slave bond2): Enslaving as an active interface with an up link [ 129.729746][ T8859] bond1: (slave gretap3): Enslaving as a backup interface with an up link [ 129.732873][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 129.736351][ T8859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.767940][ T8812] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 129.770783][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 129.774118][ T8812] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 129.776884][ T8812] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 129.779724][ T8812] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 129.874883][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 130.102025][ T6011] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 130.252436][ T6011] usb 9-1: Using ep0 maxpacket: 16 [ 130.255450][ T6011] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.258500][ T6011] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.261886][ T6011] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.266399][ T6011] usb 9-1: config 1 interface 0 has no altsetting 0 [ 130.269953][ T6011] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.272886][ T6011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.275422][ T6011] usb 9-1: Product: syz [ 130.276751][ T6011] usb 9-1: Manufacturer: syz [ 130.278219][ T6011] usb 9-1: SerialNumber: syz [ 130.486249][ T6011] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 130.528507][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 130.528519][ T40] audit: type=1400 audit(1771662388.687:1728): avc: denied { connect } for pid=8875 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.627751][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.635081][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.685369][ T40] audit: type=1400 audit(1771662388.847:1729): avc: denied { ioctl } for pid=8880 comm="syz.0.878" path="socket:[29397]" dev="sockfs" ino=29397 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.696314][ T40] audit: type=1400 audit(1771662388.847:1730): avc: denied { ioctl } for pid=8869 comm="syz.4.873" path="/dev/usb/lp0" dev="devtmpfs" ino=3176 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 130.706930][ T40] audit: type=1400 audit(1771662388.847:1731): avc: denied { bind } for pid=8880 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.715400][ T40] audit: type=1326 audit(1771662388.847:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.0.878" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd65ed9bf79 code=0x0 [ 130.738882][ T8870] usblp0:failed reading printer status (-32) [ 130.792298][ T8870] netlink: 'syz.4.873': attribute type 39 has an invalid length. [ 130.796908][ T8870] veth0_macvtap: left promiscuous mode [ 130.868663][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.873271][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.907700][ T10] usb 9-1: USB disconnect, device number 4 [ 130.912369][ T10] usblp0: removed [ 130.997596][ T8895] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20003 [ 131.063720][ T40] audit: type=1326 audit(1771662389.216:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e7f9bf79 code=0x7ffc0000 [ 131.073238][ T40] audit: type=1326 audit(1771662389.216:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e7f9bf79 code=0x7ffc0000 [ 131.084925][ T39] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 131.085508][ T40] audit: type=1326 audit(1771662389.216:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40e7f5c84e code=0x7ffc0000 [ 131.098591][ T40] audit: type=1326 audit(1771662389.216:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e7f9bf79 code=0x7ffc0000 [ 131.111480][ T40] audit: type=1326 audit(1771662389.216:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8896 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e7f9bf79 code=0x7ffc0000 [ 131.245950][ T39] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.248699][ T39] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.252230][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.264724][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.268594][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.285909][ T39] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.289618][ T39] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.292283][ T39] usb 8-1: Product: syz [ 131.293809][ T39] usb 8-1: Manufacturer: syz [ 131.309117][ T39] cdc_wdm 8-1:1.0: skipping garbage [ 131.310806][ T39] cdc_wdm 8-1:1.0: skipping garbage [ 131.325464][ T39] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 131.327427][ T39] cdc_wdm 8-1:1.0: Unknown control protocol [ 131.474668][ T8913] netlink: 'syz.1.887': attribute type 7 has an invalid length. [ 131.474799][ T8913] netlink: 'syz.1.887': attribute type 7 has an invalid length. [ 131.498944][ T5285] Bluetooth: hci0: command 0x0405 tx timeout [ 131.517547][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 131.517596][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 131.517850][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 131.517861][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 131.517913][ T24] usb 8-1: USB disconnect, device number 19 [ 131.518033][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 131.518044][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 131.518052][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 131.800454][ T8948] IPVS: sh: FWM 3 0x00000003 - no destination available [ 131.800622][ T8949] IPVS: sh: FWM 3 0x00000003 - no destination available [ 131.831249][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.834623][ T8948] bond1: option mode: unable to set because the bond device is up [ 131.843207][ T8949] bond1: (slave ip6gretap1): making interface the new active one [ 131.846170][ T8949] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 131.849015][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 131.978369][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.904'. [ 132.058825][ T8979] lo speed is unknown, defaulting to 1000 [ 132.196643][ T8986] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 132.211767][ T8986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.482200][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 132.519029][ T9000] bond3: entered promiscuous mode [ 132.521107][ T9000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.528817][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 132.531966][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 132.534777][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 132.766790][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 132.780209][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'. [ 132.868133][ T9033] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 132.888807][ T9016] infiniband syz2: set down [ 132.890782][ T9016] infiniband syz2: added bond_slave_1 [ 132.895632][ T9033] bond5: entered promiscuous mode [ 132.921476][ T9033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.951615][ T9033] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.956441][ T9033] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.958551][ T9016] RDS/IB: syz2: added [ 132.960378][ T9033] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 132.962180][ T9016] smc: adding ib device syz2 with port count 1 [ 132.968510][ T9016] smc: ib device syz2 port 1 has no pnetid [ 133.170981][ T9060] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 133.201268][ T9060] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 133.204026][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.208434][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 133.213808][ T9060] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 133.216588][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.220065][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 133.225165][ T9060] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 133.228099][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.232369][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 133.301008][ T9074] vhci_hcd: connection closed [ 133.301338][ T9070] vhci_hcd: connection closed [ 133.303581][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 133.303899][ T9068] vhci_hcd: connection closed [ 133.305527][ T1164] vhci_hcd vhci_hcd.1: release socket [ 133.305556][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 133.307525][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 133.315553][ T1164] vhci_hcd vhci_hcd.1: release socket [ 133.323038][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 133.325595][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 133.327888][ T1164] vhci_hcd vhci_hcd.1: release socket [ 133.330233][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 133.386550][ T6011] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 133.456320][ T24] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 133.576291][ T5285] Bluetooth: hci0: command 0x0405 tx timeout [ 133.598647][ T9083] tipc: Failed to remove unknown binding: 66,1,1/0:3078805299/3078805301 [ 133.628996][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.634072][ T24] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 133.637523][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.640024][ T24] usb 8-1: Product: syz [ 133.641408][ T24] usb 8-1: Manufacturer: syz [ 133.641732][ T9086] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 133.642915][ T24] usb 8-1: SerialNumber: syz [ 133.650498][ T24] usb 8-1: config 0 descriptor?? [ 133.654769][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 133.658101][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 133.662097][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 133.785746][ T9102] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 133.789371][ T9102] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 133.793340][ T9102] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.797582][ T9102] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 133.974440][ T5285] Bluetooth: hci2: Unable to find connection for big 0x00 [ 134.316258][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 134.446369][ T24] usb 6-1: device descriptor read/64, error -71 [ 134.690663][ T9129] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.693952][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.717917][ T5285] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 134.826268][ T24] usb 6-1: device descriptor read/64, error -71 [ 134.861018][ T5931] usb 8-1: USB disconnect, device number 20 [ 134.936668][ T24] usb usb6-port1: attempt power cycle [ 135.016434][ T5931] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 135.092740][ T9136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 135.095132][ T9136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.099706][ T9136] vhci_hcd vhci_hcd.0: Device attached [ 135.104671][ T9136] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 135.107281][ T9136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.111855][ T9136] vhci_hcd vhci_hcd.0: Device attached [ 135.112189][ T9142] macsec0: entered promiscuous mode [ 135.118078][ T9142] macsec0: entered allmulticast mode [ 135.120416][ T9142] veth1_macvtap: entered allmulticast mode [ 135.128560][ T9136] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 135.131171][ T9136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.135689][ T9136] vhci_hcd vhci_hcd.0: Device attached [ 135.138436][ T9143] vhci_hcd: connection closed [ 135.139272][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 135.143330][ T1164] vhci_hcd vhci_hcd.4: release socket [ 135.145504][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 135.148373][ T9139] vhci_hcd: connection closed [ 135.148408][ T9137] vhci_hcd: connection closed [ 135.148767][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 135.154127][ T1164] vhci_hcd vhci_hcd.4: release socket [ 135.156957][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 135.160368][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 135.162444][ T1164] vhci_hcd vhci_hcd.4: release socket [ 135.164616][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 135.176367][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 135.179179][ T5931] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 135.181755][ T5931] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.185334][ T5931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.188741][ T5931] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.192310][ T5931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.195631][ T5931] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.200608][ T5931] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.203495][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.276841][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 135.296930][ T24] usb 6-1: device descriptor read/8, error -71 [ 135.357939][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=9154 comm=syz.0.952 [ 135.409490][ T5931] usb 8-1: usb_control_msg returned -32 [ 135.411498][ T5931] usbtmc 8-1:16.0: can't read capabilities [ 135.494039][ T9165] gfs2: path_lookup on b::: returned error -2 [ 135.500203][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 135.536858][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 135.567035][ T24] usb 6-1: device descriptor read/8, error -71 [ 135.676650][ T24] usb usb6-port1: unable to enumerate USB device [ 135.764567][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 135.767869][ T9175] usbtmc 8-1:16.0: Unable to send data, error -71 [ 135.770758][ T9175] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 135.811477][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 135.811493][ T40] audit: type=1326 audit(1771662393.961:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.959" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40e7f9bf79 code=0x0 [ 135.903344][ T9180] netlink: 'syz.4.960': attribute type 32 has an invalid length. [ 136.244585][ T9206] netlink: 348 bytes leftover after parsing attributes in process `syz.0.967'. [ 136.326702][ T1459] usb 8-1: USB disconnect, device number 21 [ 136.420753][ T9217] fuse: Unknown parameter 'nd' [ 136.466263][ T5931] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 136.480219][ T40] audit: type=1400 audit(1771662394.631:1761): avc: denied { getopt } for pid=9216 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.619641][ T5931] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.623528][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.627099][ T5931] usb 9-1: Product: syz [ 136.628908][ T5931] usb 9-1: Manufacturer: syz [ 136.630884][ T5931] usb 9-1: SerialNumber: syz [ 136.638411][ T5931] usb 9-1: config 0 descriptor?? [ 136.844349][ T24] usb 9-1: USB disconnect, device number 5 [ 137.038640][ T9226] __nla_validate_parse: 1 callbacks suppressed [ 137.038657][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 137.126123][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 137.168695][ T9234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.975'. [ 137.238542][ T9234] IPVS: lc: FWM 3 0x00000003 - no destination available [ 137.393812][ T9253] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.614878][ T9264] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.138945][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.141001][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.317252][ T40] audit: type=1400 audit(1771662396.471:1762): avc: denied { accept } for pid=9271 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.375458][ T9277] geneve1: entered allmulticast mode [ 138.521693][ T9286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9286 comm=syz.4.991 [ 138.618230][ T40] audit: type=1400 audit(1771662396.771:1763): avc: denied { setattr } for pid=9278 comm="syz.0.988" name="[io_uring]" dev="anon_inodefs" ino=31409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.766991][ T6011] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 138.927915][ T6011] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 138.931079][ T6011] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.934419][ T6011] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.938697][ T6011] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.941465][ T6011] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.951245][ T6011] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.974781][ T6011] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 138.975628][ T6572] udevd[6572]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.149472][ T1459] usb 9-1: USB disconnect, device number 6 [ 139.312470][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 139.316079][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 139.683852][ T40] audit: type=1400 audit(1771662397.831:1764): avc: denied { bind } for pid=9294 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.690058][ T40] audit: type=1400 audit(1771662397.831:1765): avc: denied { name_bind } for pid=9294 comm="syz.4.993" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 139.696662][ T40] audit: type=1400 audit(1771662397.831:1766): avc: denied { node_bind } for pid=9294 comm="syz.4.993" saddr=10.1.1.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 139.763780][ T40] audit: type=1400 audit(1771662397.911:1767): avc: denied { getopt } for pid=9301 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.772511][ T9302] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 139.775133][ T40] audit: type=1400 audit(1771662397.931:1768): avc: denied { relabelfrom } for pid=9301 comm="syz.4.995" name="KCM" dev="sockfs" ino=32799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.783160][ T40] audit: type=1400 audit(1771662397.931:1769): avc: denied { relabelto } for pid=9301 comm="syz.4.995" name="KCM" dev="sockfs" ino=32799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=kcm_socket permissive=1 trawcon="/usr/sbin/ntpd" [ 140.271331][ T9241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.345743][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 140.366531][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 140.369644][ T9310] netlink: 2 bytes leftover after parsing attributes in process `syz.0.997'. [ 140.373031][ T9315] xt_SECMARK: invalid mode: 2 [ 140.469023][ T1459] hid-generic 0005:15C2:0C6F.0009: unknown main item tag 0x0 [ 140.479480][ T1459] hid-generic 0005:15C2:0C6F.0009: item fetching failed at offset 2/3 [ 140.483591][ T1459] hid-generic 0005:15C2:0C6F.0009: probe with driver hid-generic failed with error -22 [ 140.702463][ T9354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.811542][ T9367] 9pnet_virtio: no channels available for device syz [ 140.824552][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1018'. [ 140.859151][ T9371] program syz.1.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.949850][ T9376] netlink: 'syz.0.1021': attribute type 39 has an invalid length. [ 141.146446][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 141.146458][ T40] audit: type=1400 audit(1771662399.301:1779): avc: denied { ioctl } for pid=9382 comm="syz.4.1022" path="socket:[30628]" dev="sockfs" ino=30628 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.204997][ T40] audit: type=1400 audit(1771662399.351:1780): avc: denied { read } for pid=9384 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.276070][ T40] audit: type=1400 audit(1771662399.421:1781): avc: denied { node_bind } for pid=9395 comm="syz.3.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 141.300842][ T9400] veth0_to_bridge: entered promiscuous mode [ 141.310949][ T9405] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1028'. [ 141.312587][ T9406] max out of range [ 141.313856][ T40] audit: type=1400 audit(1771662399.461:1782): avc: denied { mount } for pid=9404 comm="syz.4.1028" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.322280][ T40] audit: type=1400 audit(1771662399.461:1783): avc: denied { remount } for pid=9404 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.325329][ T9402] veth0_to_bridge: left promiscuous mode [ 141.334267][ T40] audit: type=1400 audit(1771662399.481:1784): avc: denied { unmount } for pid=7762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 141.396891][ T40] audit: type=1400 audit(1771662399.551:1785): avc: denied { getopt } for pid=9415 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.553261][ T9424] xt_hashlimit: size too large, truncated to 1048576 [ 141.720942][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.724845][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.825743][ T9444] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.932930][ T9458] SELinux: security policydb version 17 (MLS) not backwards compatible [ 141.936867][ T9458] SELinux: failed to load policy [ 141.942941][ T9458] tipc: Can't bind to reserved service type 2 [ 142.239330][ T9486] __nla_validate_parse: 2 callbacks suppressed [ 142.239348][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 142.287426][ T9486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9486 comm=syz.4.1048 [ 142.356236][ T830] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 142.362319][ T9500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.381896][ T9493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1050'. [ 142.385715][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1050'. [ 142.440569][ T40] audit: type=1400 audit(1771662400.591:1786): avc: denied { create } for pid=9492 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 142.480778][ T9505] lo speed is unknown, defaulting to 1000 [ 142.506271][ T830] usb 6-1: Using ep0 maxpacket: 16 [ 142.509432][ T830] usb 6-1: config 1 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 212, changing to 11 [ 142.513343][ T830] usb 6-1: config 1 interface 0 altsetting 48 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.520246][ T830] usb 6-1: config 1 interface 0 has no altsetting 0 [ 142.522592][ T40] audit: type=1400 audit(1771662400.681:1787): avc: denied { create } for pid=9502 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.529743][ T40] audit: type=1400 audit(1771662400.681:1788): avc: denied { write } for pid=9502 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.537230][ T830] usb 6-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40 [ 142.540308][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.542907][ T830] usb 6-1: Product: syz [ 142.544339][ T830] usb 6-1: Manufacturer: ⴨塕輥뀿屹㭴ϛ왣ꚵꂼ漈徴唦璤쳅德㕗巹쿃慷猶딞娺ᤠ衸䗎폵쬫駐䀙⏶珩끿㈑ࠡ᜷࣯铏揘留쪽ᕿ屶ቷ흁枏⠭כֿ⏙깿˧螲쫔騍巒ꔽ掬堓퀏얠淋庚⹫ѝ쫾飜혔ά쎴畐㘍ﲭ࿏⣇鶹킙重ﳆ╰৉宊ᇚ뵲 [ 142.554006][ T830] usb 6-1: SerialNumber: syz [ 142.588293][ T9507] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 142.638291][ T9507] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 142.645160][ T9507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9507 comm=syz.4.1054 [ 142.651631][ T9507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.652263][ T6086] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.726605][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 142.730278][ T9513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1056'. [ 142.740172][ T9513] geneve2: entered promiscuous mode [ 142.742357][ T9513] geneve2: entered allmulticast mode [ 142.767141][ T6086] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.780382][ T9517] bridge: RTM_NEWNEIGH with invalid ether address [ 142.832562][ T9518] netlink: 'syz.4.1058': attribute type 4 has an invalid length. [ 142.835671][ T9518] netlink: 'syz.4.1058': attribute type 4 has an invalid length. [ 142.846215][ T9518] netlink: 'syz.4.1058': attribute type 2 has an invalid length. [ 142.848815][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 142.988519][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 142.991496][ T9540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1064'. [ 143.024337][ T830] usbhid 6-1:1.0: can't add hid device: -71 [ 143.027195][ T830] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 143.047060][ T1459] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 143.069379][ T830] usb 6-1: USB disconnect, device number 14 [ 143.186471][ T1459] usb 8-1: device descriptor read/64, error -71 [ 143.189288][ T9537] lo speed is unknown, defaulting to 1000 [ 143.303232][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'. [ 143.345046][ T9559] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 143.354605][ T9559] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.436225][ T1459] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 143.576651][ T1459] usb 8-1: device descriptor read/64, error -71 [ 143.589782][ T9575] dns_resolver: Unsupported content type (234) [ 143.673856][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 143.697723][ T1459] usb usb8-port1: attempt power cycle [ 143.717441][ T9571] bond1: option mode: unable to set because the bond device has slaves [ 143.775662][ T6085] tipc: Subscription rejected, illegal request [ 143.872891][ T9593] overlayfs: failed to resolve './bus': -2 [ 143.933875][ T9600] netlink: 'syz.0.1082': attribute type 21 has an invalid length. [ 143.984725][ T9604] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 144.013141][ T9604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.016889][ T9604] bond3: (slave bond4): making interface the new active one [ 144.020049][ T9604] bond3: (slave bond4): Enslaving as an active interface with an up link [ 144.024579][ T9604] 8021q: VLANs not supported on ip6_vti0 [ 144.031744][ T9604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.046356][ T1459] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 144.067087][ T1459] usb 8-1: device descriptor read/8, error -71 [ 144.133612][ T9613] netlink: 'syz.0.1086': attribute type 21 has an invalid length. [ 144.137729][ T9613] netlink: 'syz.0.1086': attribute type 21 has an invalid length. [ 144.326277][ T1459] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 144.357756][ T1459] usb 8-1: device descriptor read/8, error -71 [ 144.440543][ T9628] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 144.444517][ T9628] overlayfs: overlapping lowerdir path [ 144.467705][ T1459] usb usb8-port1: unable to enumerate USB device [ 144.498271][ T9634] syz_tun: refused to change device tx_queue_len [ 145.093416][ T63] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 145.137812][ T9666] XFS (nullb0): Invalid superblock magic number [ 145.373940][ T9679] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 145.376088][ T9679] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.378901][ T9679] vhci_hcd vhci_hcd.0: Device attached [ 145.381161][ T9680] vhci_hcd: connection closed [ 145.382568][ T13] vhci_hcd vhci_hcd.4: stop threads [ 145.385612][ T13] vhci_hcd vhci_hcd.4: release socket [ 145.387333][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 145.506739][ T9690] F2FS-fs: Conflicting test_dummy_encryption options [ 145.803197][ T9692] overlayfs: failed to clone lowerpath [ 145.950440][ T9699] openvswitch: netlink: Missing key (keys=40, expected=100) [ 146.226236][ T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 146.262332][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 146.262349][ T40] audit: type=1400 audit(1771662404.411:1799): avc: denied { setopt } for pid=9707 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.376489][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 146.378759][ T24] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 146.382761][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.385846][ T24] usb 8-1: config 0 has no interface number 0 [ 146.391985][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.394812][ T24] usb 8-1: config 0 has no interface number 0 [ 146.398387][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.401425][ T24] usb 8-1: config 0 has no interface number 0 [ 146.405125][ T9718] tipc: Cannot configure node identity twice [ 146.408138][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.411366][ T24] usb 8-1: config 0 has no interface number 0 [ 146.417203][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.420483][ T24] usb 8-1: config 0 has no interface number 0 [ 146.424157][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.427100][ T24] usb 8-1: config 0 has no interface number 0 [ 146.429742][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.432297][ T24] usb 8-1: config 0 has no interface number 0 [ 146.435103][ T24] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 146.437675][ T24] usb 8-1: config 0 has no interface number 0 [ 146.441283][ T24] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 146.444457][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.447434][ T24] usb 8-1: Product: syz [ 146.448852][ T24] usb 8-1: Manufacturer: syz [ 146.450422][ T24] usb 8-1: SerialNumber: syz [ 146.454565][ T24] usb 8-1: config 0 descriptor?? [ 146.462086][ T24] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 146.569013][ T40] audit: type=1400 audit(1771662404.721:1800): avc: denied { create } for pid=9733 comm="syz.0.1125" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.595870][ T40] audit: type=1400 audit(1771662404.741:1801): avc: denied { unlink } for pid=5924 comm="syz-executor" name="file0" dev="tmpfs" ino=1710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.925431][ T9746] validate_nla: 1 callbacks suppressed [ 146.925443][ T9746] netlink: 'syz.0.1129': attribute type 30 has an invalid length. [ 146.934673][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.938833][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.941579][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.944604][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.132603][ T40] audit: type=1400 audit(1771662405.281:1802): avc: denied { execmod } for pid=9751 comm="syz.0.1132" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 147.320431][ T40] audit: type=1400 audit(1771662405.471:1803): avc: denied { map } for pid=9761 comm="syz.1.1135" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.328214][ T40] audit: type=1400 audit(1771662405.471:1804): avc: denied { execute } for pid=9761 comm="syz.1.1135" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.358277][ T9766] overlayfs: failed to resolve './file2': -2 [ 147.490725][ T9780] 9p: Bad value for 'rfdno' [ 147.500909][ T9780] __nla_validate_parse: 6 callbacks suppressed [ 147.500920][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 147.624207][ T9783] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 147.736667][ T40] audit: type=1400 audit(1771662405.881:1805): avc: denied { create } for pid=9786 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.736965][ T9787] ata1.00: invalid cdb length 6 [ 147.744000][ T40] audit: type=1400 audit(1771662405.891:1806): avc: denied { setopt } for pid=9786 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.785773][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 147.954354][ T9809] ptrace attach of "/syz-executor exec"[5924] was attempted by ""[9809] [ 148.019101][ T9816] team0: Device gtp0 is of different type [ 148.105968][ T40] audit: type=1800 audit(1771662406.251:1807): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1150" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 148.429347][ T9852] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 148.455287][ T9852] : entered promiscuous mode [ 148.502471][ T9860] xt_hashlimit: size too large, truncated to 1048576 [ 148.657486][ T40] audit: type=1400 audit(1771662406.811:1808): avc: denied { listen } for pid=9868 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.714356][ T9880] overlayfs: maximum fs stacking depth exceeded [ 148.725166][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 148.728551][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'. [ 148.731365][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 148.869714][ T24] etas_es58x 8-1:0.2: could not retrieve the product info string [ 148.890300][ T24] usb 8-1: USB disconnect, device number 26 [ 148.893081][ T24] etas_es58x 8-1:0.2: Disconnecting syz syz [ 149.446345][ T9943] loop4: detected capacity change from 0 to 7 [ 149.448997][ T9943] buffer_io_error: 23 callbacks suppressed [ 149.449005][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.453230][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.455609][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.458177][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.460740][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.463169][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.465590][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.468458][ T9943] ldm_validate_partition_table(): Disk read failed. [ 149.470981][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.473305][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.475785][ T9943] Buffer I/O error on dev loop4, logical block 0, async page read [ 149.478362][ T9943] Dev loop4: unable to read RDB block 0 [ 149.480234][ T9943] loop4: unable to read partition table [ 149.482107][ T9943] loop4: partition table beyond EOD, truncated [ 149.484126][ T9943] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 149.605104][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.662383][ T9949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9949 comm=syz.3.1193 [ 149.692450][ T9951] program syz.1.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.916606][ T9380] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 149.946528][ T9974] bond6 (unregistering): Released all slaves [ 150.057943][ T9380] usb 8-1: device descriptor read/64, error -71 [ 150.098286][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1205'. [ 150.117163][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1205'. [ 150.157676][ T59] libceph: connect (1)[c::]:6789 error -101 [ 150.159716][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 150.306207][ T9380] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 150.416508][ T59] libceph: connect (1)[c::]:6789 error -101 [ 150.419226][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 150.446222][ T9380] usb 8-1: device descriptor read/64, error -71 [ 150.556998][ T9380] usb usb8-port1: attempt power cycle [ 150.916740][ T9380] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 150.938016][ T9380] usb 8-1: device descriptor read/8, error -71 [ 150.940581][ T59] libceph: connect (1)[c::]:6789 error -101 [ 150.943062][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 150.985213][ T9992] ceph: No mds server is up or the cluster is laggy [ 150.987282][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 150.991759][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 151.067686][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 151.176605][ T9380] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 151.184050][T10020] usb usb9: usbfs: process 10020 (syz.1.1215) did not claim interface 0 before use [ 151.188628][T10020] loop6: detected capacity change from 0 to 524288000 [ 151.196595][ T9380] usb 8-1: device descriptor read/8, error -71 [ 151.257378][T10020] support for cryptoloop has been removed. Use dm-crypt instead. [ 151.317068][ T9380] usb usb8-port1: unable to enumerate USB device [ 152.782121][T10049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=10049 comm=syz.3.1222 [ 152.788807][T10049] __nla_validate_parse: 3 callbacks suppressed [ 152.788816][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1222'. [ 152.875148][T10056] SELinux: failed to load policy [ 152.881338][T10054] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1224'. [ 152.884185][T10054] openvswitch: netlink: Missing key (keys=40, expected=80) [ 152.918245][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 153.020829][T10059] openvswitch: netlink: IPv6 tunnel dst address is zero [ 153.034867][T10065] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 153.076296][T10074] xt_ecn: cannot match TCP bits for non-tcp packets [ 153.077614][T10073] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 153.096818][T10075] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 153.105329][ T63] Bluetooth: hci2: unexpected event for opcode 0x202f [ 153.184985][T10083] syzkaller0: entered promiscuous mode [ 153.188379][T10083] syzkaller0: entered allmulticast mode [ 153.632075][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 153.681484][T10095] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 153.788151][T10100] overlayfs: failed to resolve './file0/file0/file0': -2 [ 154.699019][T10118] wg1: entered promiscuous mode [ 154.700625][T10118] wg1: entered allmulticast mode [ 154.814458][T10145] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.814458][T10147] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 154.814475][T10147] CIFS mount error: No usable UNC path provided in device string! [ 154.814475][T10147] [ 154.824710][T10145] CIFS mount error: No usable UNC path provided in device string! [ 154.824710][T10145] [ 154.836384][T10147] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.845688][T10145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.870220][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 154.900249][T10157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1252'. [ 154.937763][T10161] netlink: 'syz.1.1254': attribute type 11 has an invalid length. [ 154.940338][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1254'. [ 154.946872][T10159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1253'. [ 155.092244][T10174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10174 comm=syz.1.1258 [ 155.100148][T10173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10173 comm=syz.1.1258 [ 155.108453][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.108621][T10171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 155.113514][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.121762][T10174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10174 comm=syz.1.1258 [ 155.121791][T10177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10177 comm=syz.1.1258 [ 155.130803][T10174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=10174 comm=syz.1.1258 [ 155.338845][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 155.356564][ T9380] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 155.384390][T10198] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 155.397514][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.403595][T10198] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.410203][T10198] netlink: 'syz.4.1266': attribute type 10 has an invalid length. [ 155.413635][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1266'. [ 155.417835][T10198] batadv0: entered promiscuous mode [ 155.420089][T10198] batadv0: entered allmulticast mode [ 155.423688][T10198] bond0: (slave batadv0): Releasing backup interface [ 155.430181][T10198] bridge0: port 3(batadv0) entered blocking state [ 155.433045][T10198] bridge0: port 3(batadv0) entered disabled state [ 155.516529][ T9380] usb 6-1: Using ep0 maxpacket: 8 [ 155.520386][ T9380] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.525546][ T9380] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.531290][ T9380] usb 6-1: config 0 interface 0 has no altsetting 0 [ 155.534301][ T9380] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 155.538760][ T9380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.548903][ T9380] usb 6-1: config 0 descriptor?? [ 155.755139][ T9380] usbhid 6-1:0.0: can't add hid device: -71 [ 155.760156][ T9380] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 155.769409][ T9380] usb 6-1: USB disconnect, device number 15 [ 155.786968][ T6085] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 155.790424][T10219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10219 comm=syz.3.1274 [ 155.791243][ T6085] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 155.810942][T10225] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 155.877769][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.881442][T10227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.072272][T10261] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 156.091178][T10261] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.094727][T10261] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 156.150564][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 156.150576][ T40] audit: type=1400 audit(1771662414.301:1818): avc: denied { setattr } for pid=10271 comm="syz.0.1287" name="ALG" dev="sockfs" ino=35286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.152956][T10270] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 156.167119][T10270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.244315][T10286] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 156.247183][T10286] netlink: 'syz.0.1292': attribute type 2 has an invalid length. [ 156.253398][T10286] netlink: 'syz.0.1292': attribute type 39 has an invalid length. [ 156.278484][T10292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.315053][T10297] : entered promiscuous mode [ 156.373077][ T40] audit: type=1400 audit(1771662414.521:1819): avc: denied { name_bind } for pid=10298 comm="syz.1.1296" src=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 156.474125][T10308] openvswitch: netlink: IP tunnel dst address not specified [ 156.528825][T10313] lo speed is unknown, defaulting to 1000 [ 156.566235][ T1459] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 156.594061][T10315] xt_hashlimit: max too large, truncated to 1048576 [ 156.597306][T10315] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.651918][T10321] lo speed is unknown, defaulting to 1000 [ 156.748141][ T1459] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 156.751303][ T1459] usb 8-1: config 0 interface 0 has no altsetting 0 [ 156.758264][ T1459] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.762256][ T1459] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.765766][ T1459] usb 8-1: Product: syz [ 156.767736][ T1459] usb 8-1: Manufacturer: syz [ 156.769768][ T1459] usb 8-1: SerialNumber: syz [ 156.775567][ T1459] usb 8-1: config 0 descriptor?? [ 156.782339][ T1459] hub 8-1:0.0: bad descriptor, ignoring hub [ 156.784874][ T1459] hub 8-1:0.0: probe with driver hub failed with error -5 [ 156.792507][ T1459] usb 8-1: selecting invalid altsetting 0 [ 156.816564][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 156.981106][ T24] usb 9-1: config 0 has no interfaces? [ 156.985601][ T24] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 156.990119][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.993974][ T24] usb 9-1: Product: syz [ 156.995895][ T24] usb 9-1: Manufacturer: syz [ 156.999930][ T24] usb 9-1: SerialNumber: syz [ 157.003016][ T24] usb 9-1: config 0 descriptor?? [ 157.191493][ T24] lo speed is unknown, defaulting to 1000 [ 157.193341][ T24] syz0: Port: 1 Link ACTIVE [ 157.194820][ T24] lo speed is unknown, defaulting to 1000 [ 157.305986][T10313] veth0_vlan: left promiscuous mode [ 157.316447][T10313] veth0_vlan: entered promiscuous mode [ 157.322695][ T830] usb 9-1: USB disconnect, device number 7 [ 157.363263][T10346] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 157.436957][T10352] overlayfs: failed to resolve './file0': -2 [ 157.519994][T10357] team0 (unregistering): Port device team_slave_0 removed [ 157.524389][T10357] team0 (unregistering): Port device team_slave_1 removed [ 157.807381][T10372] __nla_validate_parse: 7 callbacks suppressed [ 157.807393][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 157.871693][T10382] lo speed is unknown, defaulting to 1000 [ 157.937058][T10386] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1322'. [ 157.940009][T10386] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1322'. [ 158.042599][T10397] random: crng reseeded on system resumption [ 158.050279][T10397] PM: hibernation: Image mismatch: memory size [ 158.260471][T10410] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.423924][T10415] validate_nla: 1 callbacks suppressed [ 158.423943][T10415] netlink: 'syz.1.1329': attribute type 5 has an invalid length. [ 158.471476][ T40] audit: type=1400 audit(1771662416.621:1820): avc: denied { connect } for pid=10417 comm="syz.1.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.561422][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 158.802986][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 159.171538][ T40] audit: type=1400 audit(1771662417.321:1821): avc: denied { create } for pid=10470 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.193341][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1348'. [ 159.409948][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 159.433596][T10482] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 159.576396][ T830] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 159.736972][ T830] usb 9-1: too many configurations: 64, using maximum allowed: 8 [ 159.741609][ T830] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 159.744999][ T830] usb 9-1: can't read configurations, error -22 [ 159.814239][ T40] audit: type=1400 audit(1771662417.961:1822): avc: denied { ioctl } for pid=10490 comm="syz.1.1353" path="socket:[37682]" dev="sockfs" ino=37682 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.896446][ T830] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 160.060038][ T830] usb 9-1: too many configurations: 64, using maximum allowed: 8 [ 160.065513][ T830] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 160.069320][ T830] usb 9-1: can't read configurations, error -22 [ 160.072454][ T830] usb usb9-port1: attempt power cycle [ 160.361135][ T10] usb 8-1: USB disconnect, device number 31 [ 160.374986][T10502] tipc: Enabling of bearer rejected, failed to enable media [ 160.406303][ T830] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 160.421789][T10506] Cannot find add_set index 65532 as target [ 160.428493][ T830] usb 9-1: too many configurations: 64, using maximum allowed: 8 [ 160.432435][T10508] loop9: detected capacity change from 0 to 7 [ 160.433271][ T830] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 160.436607][ T6572] buffer_io_error: 14 callbacks suppressed [ 160.436619][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.438650][ T830] usb 9-1: can't read configurations, error -22 [ 160.442645][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.450677][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.454074][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.457945][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.461256][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.464633][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.468445][ T6572] ldm_validate_partition_table(): Disk read failed. [ 160.471272][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.474572][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.479399][ T6572] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.482687][ T6572] Dev loop9: unable to read RDB block 0 [ 160.485060][ T6572] loop9: unable to read partition table [ 160.489316][ T6572] loop9: partition table beyond EOD, truncated [ 160.493452][T10508] ldm_validate_partition_table(): Disk read failed. [ 160.500720][T10508] Dev loop9: unable to read RDB block 0 [ 160.501073][T10516] netlink: 'syz.0.1359': attribute type 5 has an invalid length. [ 160.503265][T10508] loop9: unable to read partition table [ 160.508423][T10508] loop9: partition table beyond EOD, truncated [ 160.511035][T10508] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.511035][T10508] ) failed (rc=-5) [ 160.524041][T10514] ldm_validate_partition_table(): Disk read failed. [ 160.527224][T10514] Dev loop9: unable to read RDB block 0 [ 160.529612][T10514] loop9: unable to read partition table [ 160.532245][T10514] loop9: partition table beyond EOD, truncated [ 160.566533][ T830] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 160.587702][ T830] usb 9-1: too many configurations: 64, using maximum allowed: 8 [ 160.593083][ T830] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 160.597589][ T830] usb 9-1: can't read configurations, error -22 [ 160.600277][ T830] usb usb9-port1: unable to enumerate USB device [ 160.708202][ T40] audit: type=1400 audit(1771662418.861:1823): avc: denied { watch_mount } for pid=10536 comm="syz.0.1366" path="/396" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.879220][T10546] mkiss: ax0: crc mode is auto. [ 161.644689][T10565] xt_hashlimit: size too large, truncated to 1048576 [ 162.186271][ T1459] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 162.209806][ T40] audit: type=1804 audit(1771662420.361:1824): pid=10582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1379" name="file1" dev="tmpfs" ino=2160 res=1 errno=0 [ 162.327325][ T1459] usb 8-1: device descriptor read/64, error -71 [ 162.329058][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 162.330192][T10596] xt_bpf: check failed: parse error [ 162.356932][T10591] team0 (unregistering): Port device team_slave_0 removed [ 162.363249][T10591] team0 (unregistering): Port device team_slave_1 removed [ 162.395417][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 162.400404][ T40] audit: type=1400 audit(1771662420.551:1825): avc: denied { setopt } for pid=10597 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.492398][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 162.586360][ T1459] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 162.607725][ T40] audit: type=1800 audit(1771662420.761:1826): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1389" name="bus" dev="overlay" ino=1189 res=0 errno=0 [ 162.716213][ T1459] usb 8-1: device descriptor read/64, error -71 [ 162.717596][T10619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 162.720755][T10619] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.723314][T10619] vhci_hcd vhci_hcd.0: Device attached [ 162.728076][T10620] usbip_core: unknown command [ 162.729667][T10620] vhci_hcd: unknown pdu 67108864 [ 162.731338][T10620] usbip_core: unknown command [ 162.731401][ T40] audit: type=1400 audit(1771662420.881:1827): avc: denied { mounton } for pid=10618 comm="syz.4.1391" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 162.733058][ T6084] vhci_hcd vhci_hcd.4: stop threads [ 162.744885][ T6084] vhci_hcd vhci_hcd.4: release socket [ 162.748204][ T6084] vhci_hcd vhci_hcd.4: disconnect device [ 162.754987][T10619] ntfs3(sr0): Primary boot signature is not NTFS. [ 162.758004][T10619] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 162.836469][ T1459] usb usb8-port1: attempt power cycle [ 163.186479][ T1459] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 163.216683][ T1459] usb 8-1: device descriptor read/8, error -71 [ 163.224588][T10627] 9p: Could not find request transport: v [ 163.271080][T10631] bond5: (slave bond_slave_1): Device is not our slave [ 163.274149][T10631] bond5: option active_slave: invalid value (bond_slave_1) [ 163.279728][T10631] bond5 (unregistering): Released all slaves [ 163.307374][T10634] syz_tun: entered allmulticast mode [ 163.316271][T10634] dvmrp6: entered allmulticast mode [ 163.320623][ T63] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 163.359477][T10636] openvswitch: netlink: Missing key (keys=40, expected=80) [ 163.395800][T10643] binder: 10641:10643 ioctl c0306201 2000000003c0 returned -14 [ 163.466300][ T1459] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 163.478034][ T40] audit: type=1400 audit(1771662421.631:1828): avc: denied { connect } for pid=10654 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.486701][ T1459] usb 8-1: device descriptor read/8, error -71 [ 163.516234][ T40] audit: type=1400 audit(1771662421.661:1829): avc: denied { read } for pid=10654 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.531725][T10659] usb 1-1: USB disconnect, device number 2 [ 163.593558][T10665] usb usb1: check_ctrlrecip: process 10665 (syz.1.1405) requesting ep 01 but needs 81 [ 163.606546][ T1459] usb usb8-port1: unable to enumerate USB device [ 163.684626][T10676] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 163.720360][T10673] bridge0: port 3(syz_tun) entered blocking state [ 163.723079][T10673] bridge0: port 3(syz_tun) entered disabled state [ 163.725230][T10673] syz_tun: entered allmulticast mode [ 163.727846][T10673] syz_tun: entered promiscuous mode [ 163.763171][T10686] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 163.770259][ T40] audit: type=1400 audit(1771662421.921:1830): avc: denied { relabelto } for pid=10685 comm="syz.1.1415" name="378" dev="tmpfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 163.780940][ T40] audit: type=1400 audit(1771662421.921:1831): avc: denied { associate } for pid=10685 comm="syz.1.1415" name="378" dev="tmpfs" ino=2053 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 166.787201][T10692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.833023][T10729] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 166.838683][T10731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1425'. [ 166.848047][T10729] binder: 10728:10729 ioctl c0306201 2000000003c0 returned -14 [ 166.849770][T10734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.915044][T10742] vim2m vim2m.0: vidioc_s_fmt queue busy [ 167.065650][T10760] xt_cgroup: path and classid specified [ 167.252493][ T40] audit: type=1400 audit(1771662425.401:1832): avc: denied { write } for pid=10781 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 167.336962][ T39] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 167.497716][ T39] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 167.500418][ T39] usb 8-1: config 0 has no interface number 0 [ 167.504883][ T39] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 167.508687][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.511231][ T39] usb 8-1: Product: syz [ 167.512540][ T39] usb 8-1: Manufacturer: syz [ 167.514088][ T39] usb 8-1: SerialNumber: syz [ 167.516986][ T39] usb 8-1: config 0 descriptor?? [ 167.624409][T10788] tmpfs: User quota inode hardlimit too large. [ 167.624963][T10790] tmpfs: User quota inode hardlimit too large. [ 168.122686][ T39] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 168.125909][ T39] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 168.130315][ T39] asix 8-1:0.251: probe with driver asix failed with error -5 [ 168.143450][ T39] usb 8-1: USB disconnect, device number 36 [ 168.323121][T10826] 9p: Bad value for 'version' [ 168.491580][T10828] loop1: detected capacity change from 0 to 7 [ 168.496422][T10828] Dev loop1: unable to read RDB block 7 [ 168.498202][T10828] loop1: unable to read partition table [ 168.500129][T10828] loop1: partition table beyond EOD, truncated [ 168.502106][T10828] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 168.509899][T10830] hpfs: Bad magic ... probably not HPFS [ 168.532437][T10830] hpfs: Bad magic ... probably not HPFS [ 168.537100][ C2] ------------[ cut here ]------------ [ 168.539390][ C2] sk->sk_forward_alloc [ 168.539398][ C2] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x653/0x800, CPU#2: sshd-session/5891 [ 168.544029][ C2] Modules linked in: [ 168.545700][ C2] CPU: 2 UID: 0 PID: 5891 Comm: sshd-session Tainted: G L syzkaller #0 PREEMPT(full) [ 168.549238][ C2] Tainted: [L]=SOFTLOCKUP [ 168.550632][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.553848][ C2] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 168.555786][ C2] Code: c9 4e ff e9 06 fd ff ff e8 2a af 01 f8 90 0f 0b 90 e9 35 fe ff ff e8 1c af 01 f8 90 0f 0b 90 e9 c5 fe ff ff e8 0e af 01 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 00 af 01 f8 90 0f 0b 90 e9 65 fe ff ff [ 168.561917][ C2] RSP: 0018:ffffc90000648d98 EFLAGS: 00010246 [ 168.563881][ C2] RAX: 0000000000000000 RBX: ffff88803aac9100 RCX: ffffffff8a06e8b7 [ 168.566448][ C2] RDX: ffff88802b002480 RSI: ffffffff8a06e9b2 RDI: ffff88802b002480 [ 168.568988][ C2] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 168.571510][ C2] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff88803aac9100 [ 168.574025][ C2] R13: ffff88803aac9190 R14: ffffffff81ee5bad R15: 0000000000000008 [ 168.576631][ C2] FS: 00007f6a6cb3e300(0000) GS:ffff8880d6552000(0000) knlGS:0000000000000000 [ 168.579461][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.581572][ C2] CR2: 00007f76647e42f8 CR3: 00000000388d1000 CR4: 0000000000352ef0 [ 168.584113][ C2] Call Trace: [ 168.585208][ C2] [ 168.586216][ C2] ? __pfx_udp_destruct_sock+0x10/0x10 [ 168.587978][ C2] ? rcu_core+0x59d/0x10d0 [ 168.589361][ C2] __sk_destruct+0x85/0xbb0 [ 168.590804][ C2] ? rcu_core+0x59d/0x10d0 [ 168.592251][ C2] rcu_core+0x5a2/0x10d0 [ 168.593630][ C2] ? __pfx_rcu_core+0x10/0x10 [ 168.595161][ C2] ? run_timer_base+0x121/0x190 [ 168.596849][ C2] ? rcu_is_watching+0x12/0xc0 [ 168.598400][ C2] handle_softirqs+0x1eb/0x9e0 [ 168.599971][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 168.601680][ C2] __irq_exit_rcu+0xef/0x150 [ 168.603194][ C2] irq_exit_rcu+0x9/0x30 [ 168.604571][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 168.606439][ C2] [ 168.607421][ C2] [ 168.608389][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.610311][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 168.612297][ C2] Code: 04 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 82 54 16 00 00 85 c0 74 f1 8b 82 30 16 00 00 <83> f8 02 75 e6 48 8b 8a 38 16 00 00 8b 92 34 16 00 00 48 8b 01 48 [ 168.618453][ C2] RSP: 0018:ffffc900033df7d8 EFLAGS: 00000246 [ 168.620431][ C2] RAX: 0000000000000000 RBX: ffff88802ababfc0 RCX: ffffffff89f2ac77 [ 168.622964][ C2] RDX: ffff88802b002480 RSI: ffffffff89f2ac86 RDI: ffff88802b002480 [ 168.625511][ C2] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000002 [ 168.628107][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 168.630634][ C2] R13: 1ffff9200067bf01 R14: 0000000000000001 R15: ffffffff828ed2a0 [ 168.633182][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.634779][ C2] ? tcp_poll+0x1b7/0x1260 [ 168.636335][ C2] ? tcp_poll+0x1c6/0x1260 [ 168.637789][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.639381][ C2] tcp_poll+0x1c6/0x1260 [ 168.640767][ C2] ? __pfx_tcp_poll+0x10/0x10 [ 168.642301][ C2] ? poll_select_finish+0x5a1/0x670 [ 168.643996][ C2] ? __pfx_tcp_poll+0x10/0x10 [ 168.645550][ C2] sock_poll+0x160/0x510 [ 168.647004][ C2] ? __pfx_sock_poll+0x10/0x10 [ 168.647322][T10841] program syz.4.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.648548][ C2] do_sys_poll+0x6e5/0xeb0 [ 168.652942][ C2] ? __pfx_do_sys_poll+0x10/0x10 [ 168.654564][ C2] ? reacquire_held_locks+0xce/0x1e0 [ 168.656339][ C2] ? release_sock+0x21/0x220 [ 168.657839][ C2] ? tcp_release_cb+0x271/0x510 [ 168.659440][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.661019][ C2] ? __pfx_pollwake+0x10/0x10 [ 168.662549][ C2] ? __pfx_pollwake+0x10/0x10 [ 168.664102][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.665795][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 168.667546][ C2] ? _raw_spin_unlock_irq+0x2e/0x50 [ 168.669233][ C2] ? set_user_sigmask+0x1e1/0x270 [ 168.670879][ C2] ? __pfx_set_user_sigmask+0x10/0x10 [ 168.672612][ C2] ? read_tsc+0x9/0x20 [ 168.673943][ C2] ? ktime_get_ts64+0x256/0x3f0 [ 168.675546][ C2] __x64_sys_ppoll+0x2b5/0x350 [ 168.677153][ C2] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 168.678774][ C2] ? ksys_write+0x1ac/0x250 [ 168.680230][ C2] ? __pfx_ksys_write+0x10/0x10 [ 168.681777][ C2] do_syscall_64+0x106/0xf80 [ 168.683280][ C2] ? clear_bhb_loop+0x40/0x90 [ 168.684804][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.686758][ C2] RIP: 0033:0x7f6a6c45d407 [ 168.688211][ C2] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.694307][ C2] RSP: 002b:00007ffd29f13370 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 168.697080][ C2] RAX: ffffffffffffffda RBX: 00007f6a6cb3e300 RCX: 00007f6a6c45d407 [ 168.699610][ C2] RDX: 00007ffd29f133b0 RSI: 0000000000000007 RDI: 000055fdec67ece0 [ 168.702143][ C2] RBP: 00007ffd29f13420 R08: 0000000000000008 R09: 0000000000000000 [ 168.704635][ C2] R10: 00007ffd29f134b0 R11: 0000000000000202 R12: 0000000000000001 [ 168.707165][ C2] R13: 00007ffd29f134b0 R14: 00000000000000a7 R15: 0000000000000004 [ 168.709668][ C2] [ 168.710693][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.713043][ C2] CPU: 2 UID: 0 PID: 5891 Comm: sshd-session Tainted: G L syzkaller #0 PREEMPT(full) [ 168.716543][ C2] Tainted: [L]=SOFTLOCKUP [ 168.717933][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.721147][ C2] Call Trace: [ 168.722234][ C2] [ 168.723186][ C2] dump_stack_lvl+0x100/0x190 [ 168.724717][ C2] vpanic+0x552/0x970 [ 168.726040][ C2] ? __pfx_vpanic+0x10/0x10 [ 168.727579][ C2] panic+0xd1/0xe0 [ 168.728804][ C2] ? __pfx_panic+0x10/0x10 [ 168.730255][ C2] ? check_panic_on_warn+0x1f/0x90 [ 168.731933][ C2] check_panic_on_warn.cold+0x19/0x34 [ 168.733654][ C2] ? inet_sock_destruct+0x653/0x800 [ 168.735346][ C2] __warn.cold+0x191/0x348 [ 168.736825][ C2] __report_bug+0x296/0x3d0 [ 168.738296][ C2] ? inet_sock_destruct+0x653/0x800 [ 168.739935][ C2] ? __pfx___report_bug+0x10/0x10 [ 168.741579][ C2] ? do_syscall_64+0x106/0xf80 [ 168.743146][ C2] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.745112][ C2] ? inet_sock_destruct+0x653/0x800 [ 168.746867][ C2] report_bug+0xb2/0x220 [ 168.748235][ C2] ? inet_sock_destruct+0x653/0x800 [ 168.749892][ C2] handle_bug+0x166/0x2a0 [ 168.751315][ C2] exc_invalid_op+0x17/0x50 [ 168.752795][ C2] asm_exc_invalid_op+0x1a/0x20 [ 168.754377][ C2] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 168.756272][ C2] Code: c9 4e ff e9 06 fd ff ff e8 2a af 01 f8 90 0f 0b 90 e9 35 fe ff ff e8 1c af 01 f8 90 0f 0b 90 e9 c5 fe ff ff e8 0e af 01 f8 90 <0f> 0b 90 e9 04 ff ff ff e8 00 af 01 f8 90 0f 0b 90 e9 65 fe ff ff [ 168.762393][ C2] RSP: 0018:ffffc90000648d98 EFLAGS: 00010246 [ 168.764357][ C2] RAX: 0000000000000000 RBX: ffff88803aac9100 RCX: ffffffff8a06e8b7 [ 168.766918][ C2] RDX: ffff88802b002480 RSI: ffffffff8a06e9b2 RDI: ffff88802b002480 [ 168.769429][ C2] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 168.771964][ C2] R10: 0000000000000f70 R11: 0000000000000000 R12: ffff88803aac9100 [ 168.774486][ C2] R13: ffff88803aac9190 R14: ffffffff81ee5bad R15: 0000000000000008 [ 168.777053][ C2] ? rcu_core+0x59d/0x10d0 [ 168.778503][ C2] ? inet_sock_destruct+0x557/0x800 [ 168.780193][ C2] ? inet_sock_destruct+0x652/0x800 [ 168.781894][ C2] ? inet_sock_destruct+0x652/0x800 [ 168.783593][ C2] ? __pfx_udp_destruct_sock+0x10/0x10 [ 168.785361][ C2] ? rcu_core+0x59d/0x10d0 [ 168.786827][ C2] __sk_destruct+0x85/0xbb0 [ 168.788301][ C2] ? rcu_core+0x59d/0x10d0 [ 168.789746][ C2] rcu_core+0x5a2/0x10d0 [ 168.791148][ C2] ? __pfx_rcu_core+0x10/0x10 [ 168.792668][ C2] ? run_timer_base+0x121/0x190 [ 168.794251][ C2] ? rcu_is_watching+0x12/0xc0 [ 168.795811][ C2] handle_softirqs+0x1eb/0x9e0 [ 168.797365][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 168.799079][ C2] __irq_exit_rcu+0xef/0x150 [ 168.800579][ C2] irq_exit_rcu+0x9/0x30 [ 168.801968][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 168.803776][ C2] [ 168.804744][ C2] [ 168.805735][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.807679][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 168.809650][ C2] Code: 04 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 82 54 16 00 00 85 c0 74 f1 8b 82 30 16 00 00 <83> f8 02 75 e6 48 8b 8a 38 16 00 00 8b 92 34 16 00 00 48 8b 01 48 [ 168.815822][ C2] RSP: 0018:ffffc900033df7d8 EFLAGS: 00000246 [ 168.817767][ C2] RAX: 0000000000000000 RBX: ffff88802ababfc0 RCX: ffffffff89f2ac77 [ 168.820292][ C2] RDX: ffff88802b002480 RSI: ffffffff89f2ac86 RDI: ffff88802b002480 [ 168.822841][ C2] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000002 [ 168.825376][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 168.827923][ C2] R13: 1ffff9200067bf01 R14: 0000000000000001 R15: ffffffff828ed2a0 [ 168.830452][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.832057][ C2] ? tcp_poll+0x1b7/0x1260 [ 168.833508][ C2] ? tcp_poll+0x1c6/0x1260 [ 168.834975][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.836573][ C2] tcp_poll+0x1c6/0x1260 [ 168.837961][ C2] ? __pfx_tcp_poll+0x10/0x10 [ 168.839497][ C2] ? poll_select_finish+0x5a1/0x670 [ 168.841194][ C2] ? __pfx_tcp_poll+0x10/0x10 [ 168.842716][ C2] sock_poll+0x160/0x510 [ 168.844106][ C2] ? __pfx_sock_poll+0x10/0x10 [ 168.845665][ C2] do_sys_poll+0x6e5/0xeb0 [ 168.847142][ C2] ? __pfx_do_sys_poll+0x10/0x10 [ 168.848754][ C2] ? reacquire_held_locks+0xce/0x1e0 [ 168.850460][ C2] ? release_sock+0x21/0x220 [ 168.851978][ C2] ? tcp_release_cb+0x271/0x510 [ 168.853550][ C2] ? __pfx___pollwait+0x10/0x10 [ 168.855140][ C2] ? __pfx_pollwake+0x10/0x10 [ 168.856706][ C2] ? __pfx_pollwake+0x10/0x10 [ 168.858252][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.859938][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 168.861636][ C2] ? _raw_spin_unlock_irq+0x2e/0x50 [ 168.863325][ C2] ? set_user_sigmask+0x1e1/0x270 [ 168.864962][ C2] ? __pfx_set_user_sigmask+0x10/0x10 [ 168.866709][ C2] ? read_tsc+0x9/0x20 [ 168.868047][ C2] ? ktime_get_ts64+0x256/0x3f0 [ 168.869623][ C2] __x64_sys_ppoll+0x2b5/0x350 [ 168.871200][ C2] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 168.872910][ C2] ? ksys_write+0x1ac/0x250 [ 168.874391][ C2] ? __pfx_ksys_write+0x10/0x10 [ 168.875987][ C2] do_syscall_64+0x106/0xf80 [ 168.877491][ C2] ? clear_bhb_loop+0x40/0x90 [ 168.879042][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.880950][ C2] RIP: 0033:0x7f6a6c45d407 [ 168.882411][ C2] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.888564][ C2] RSP: 002b:00007ffd29f13370 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 168.891457][ C2] RAX: ffffffffffffffda RBX: 00007f6a6cb3e300 RCX: 00007f6a6c45d407 [ 168.894003][ C2] RDX: 00007ffd29f133b0 RSI: 0000000000000007 RDI: 000055fdec67ece0 [ 168.896587][ C2] RBP: 00007ffd29f13420 R08: 0000000000000008 R09: 0000000000000000 [ 168.899130][ C2] R10: 00007ffd29f134b0 R11: 0000000000000202 R12: 0000000000000001 [ 168.901678][ C2] R13: 00007ffd29f134b0 R14: 00000000000000a7 R15: 0000000000000004 [ 168.904229][ C2] [ 168.905945][ C2] Kernel Offset: disabled [ 168.907369][ C2] Rebooting in 86400 seconds..