last executing test programs: 32.670221337s ago: executing program 1 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) 32.600686017s ago: executing program 1 (id=11): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xac}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4004850) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffff1a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) name_to_handle_at(r6, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xffffffff, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x61}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41100, 0x34, '\x00', r3, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x5, 0xef1e, 0xfe}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000440)=[r6, r7, r8, r9], &(0x7f0000000480)=[{0x4, 0x3, 0x2, 0x7}, {0x4, 0x5, 0xc, 0x5}], 0x10, 0xde3}, 0x94) 32.502050994s ago: executing program 1 (id=12): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="cfe7c7426f605e5b9f5519f5ac7f5f063f", 0x11}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x50}], 0x1, 0x200000d1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001700)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="c46169f6429fc4832d40ef00430f01cbf3420f09c462f91c3cfbb9800000c00f3235000400000f30b9800000c00f3235008000000f300f005c2a982e64f2dc9cb400000000c4e102537604", 0x4b}], 0x1, 0x8, &(0x7f0000000100)=[@dstype3={0x7, 0x3}, @cr0={0x0, 0xc0000012}], 0x2) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}, 0x40000000) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) 32.261929411s ago: executing program 1 (id=18): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x1ff, 0x80, 0xff, 0x3, 0xb86}, 0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @empty}}}, &(0x7f0000000040)=0x84) 32.259777499s ago: executing program 1 (id=20): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000080)=""/112}) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000011c0)={0x0, 0x20, 0xffffffff, 0x7e, 0xfffffe0c, 0x8, 0x20, 0x3, 0x0, 0x5, 0x40, 0x8001, 0x0, 0x0, 0x0}) 32.211167968s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000000efffff808000300", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8006, 0x807, 0x1}, &(0x7f0000000080)=0x10) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x7, 0xa, 0x9, 0x9d, "73b316", 0x3, [0x4, 0x8]}}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) 17.15975555s ago: executing program 32 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000000efffff808000300", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8006, 0x807, 0x1}, &(0x7f0000000080)=0x10) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x7, 0xa, 0x9, 0x9d, "73b316", 0x3, [0x4, 0x8]}}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) 4.160047025s ago: executing program 4 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)="b540bc234aa31963438a3256773c9a4714887e00008ff85b747644a0a56ed2dcfd98", 0x22}], 0x1}, 0x4048805) sendmsg$inet6(r3, &(0x7f0000001840)={&(0x7f0000000280)={0xa, 0x4e24, 0x0, @mcast2, 0x7ff}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001340)="edc15c8102e21a669ff820a563528ad57ff21eca8b8db07dc8134d5e4715a0926ad874c84cfe76941a24edb16a028b72358c9d4bf638e83e0b550d614afd45532d2e83bd29d6d350f8eb8f79d9d0cc14f8c7793dc86916cc9dfccf1c25674374ddd2bce0796d7043b5a05c4323065a646eb4c2ddcae6d4cc647cce96b602319eac5732bd9cd5318532e65aed242ac73330bbb175992718b523a498c5e973f94add65524f40eb6a", 0xa7}, {&(0x7f0000001400)="72593407d0bc208542b9d956d4af3e8c0b652a3658c6984f2848a838094cff3fea94606a6db368891b06ca477661ea927f6168f8adfbeeb132567f23129ee32b83e7a074638adffc37b9a10414e9f953c716bf88f097c4a120532758651101", 0x5f}, {&(0x7f0000001480)="775507e92df5e866620cb9d9df7ec5ed0f01866feec473123af5c1eb7efb063527d7fd761da9926ec550000a41e9ebda94c875fc961a1603be00c11779435498e53c2d89d291a43cc15362d237117ed563a30a4eb52346aae8f97cb1eb621004d4d0e11a30801b6694644ba703d3d036efe768faef200d566a281e54cf24ef767ae01b62265f393b6900c9dfa029f047a05cd0f5101ba12c4649e9fa9ca91524a200cd8ed9782a6c419c2b131709a38c9be7a68ff848b5ca017deb30240c477fa3b01ef09b829c7cc2acda19235ebe1c097b723cbb4b1c3141fd69", 0xdb}, {&(0x7f0000001580)="f0951b9a54631e3e2c655b6b371f98eb6ff808e70d91128727d15d5d42f28fbcec6c632c003f3c3fe11ff90174c39321fe114bd1318e7c2e9a1feda7e3ccf7ac595a339e1fc6bf7ba13f41ef0a5191ebead8a862a3e42ef321213ecfd9a16a19e8e4f1dbb509c2583f74ced98c3a51a3a3709f42e41b4a2f12a71edbba02cb57b7e127ed788941d3edd238997644c439", 0x90}, {&(0x7f0000001640)="75624cf2a44967640bf965cbf1843b387a599d878c6c038f5367", 0x1a}, {&(0x7f0000001680)="863a73bf344891aa1d63123c51c1ca30a3c9176d71c8bd895969955d1586f66cc53a8be575aa609658a3d9b1dfe0b3734dc793f54c1443bb2680b1d54a50acf3a3fd81d44fcb48ce3f3952f3320d007e4be347d1afa2f86dc1b55959b38df9bd56d90915e431c9718e6c50c6dfa47f0b44a4ffd8a42d1654410128310d817f9b2217a2bcf2998f65878958024d74037db55e7cb8859a17973565676408cd5f760dc153e0990d77f1d12162538ded7d15d38b4c0bed82e166adc22653b8d3f43130a76de1727aabe2ab66cd33ea8dba737e1ac6a62c1110329674b4d8b5", 0xdd}], 0x6, &(0x7f0000001800)=[@dontfrag={{0x14}}], 0x18}, 0x800) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="fd1b97a35868b89010840c", 0xb}], 0x1) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x4009, 0x4) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r4, 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x20000, 0x800, 0x7f, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000012c0)={0x2, 0x3}) sendmsg$xdp(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x9, r5, 0x12}, 0x10, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000001c0)="42b39fbf3c28308747a4945c75cebb733d86e897d5e94c537a", 0x19}], 0x2, 0x0, 0x0, 0xc005}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000200001030000000000000000022000000300000300000000dc879201a5378644d6131eccdb95468e1d3f4f8d"], 0x1c}}, 0x0) 3.251707238s ago: executing program 4 (id=361): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1044, &(0x7f0000001400)={[{0x3b, 0x4e00, "13faef089b04ccb7e98947797d92f747bc2c48c9b1a6618ac9833df95deeaeb4584504f1735a0f9cfce73a981a0f17269c3a19370594f8a94c5a10"}, {0x1000, 0x4e00, "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"}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) writev(r1, &(0x7f00000036c0)=[{&(0x7f0000000140)="d07f1ad06dda8559ed011775f24376552bb9a99ad0b25c66fd49dde5bfd0e06ce2c8c04c06627067188d98c5a0b5fdcfd618f70120e6a0968c6920ce4bb0dd8c1523339b0659746ba3b5f20833945d6ae3a114dfbc3f1755837c73c8252bff2bb49881800028e62b9a6e93a748a3acd06cf2ad55909bfcb560c4f0fb9391528fe1c6a37302123648b7f6863c9466ab562d7258f7d09dfbbb45f1db975be1bf7c017f119bb9c62bea5670c5a94e55dcde1d30b426cf5f3bae642e180b16", 0xbd}, {&(0x7f0000000440)="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", 0xfa0}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="162f585c78f8e30b17b41fd52c8acf26d0b3bab18c7e39480be6ff8edb1d6df2d58f887d0508043a63d1c6d828805444ca07820bfd3727ccde9d4cc6d5e7b8a0e9b23179edb135a6640d2766e1117e843feace283f", 0x55}, {&(0x7f0000002540)}], 0x5) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) 2.671495027s ago: executing program 3 (id=370): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$inet(0x2, 0x80802, 0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x3, 0x403, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x1ff, 0x6, 0x80ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa8, 0x8, 0x1ff, 0x5, 0x10, 0x40000, 0x5, 0xe2df, 0x706f, 0x8, 0x5, 0x3, 0x0, 0xfffd, 0x7fff]}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000b00)=[{r4, 0x4009}], 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000000c0)=0x1, 0x2) syz_emit_ethernet(0x11c, &(0x7f0000000200)={@multicast, @local, @val={@val={0x88a8, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0xe, 0x6, "3a000e", 0xde, 0x21, 0xfe, @loopback, @private0, {[@hopopts={0x2e, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xfffe}]}, @hopopts={0x84, 0x1, '\x00', [@ra={0x5, 0x2, 0x3bcf}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}]}], "6d98f457c20700bf89505f394c7df7c33a894d43dc9505fdac313782d8fc96f2061292ac873e610297f92d894dc7489cdb806661cf029cba408a8a5eb77a565a14ca069e207d00ed23ae193640ec3409fd849efbbd7e155c5432342d79437427bd52d73dbad9443f12414fc316f1094b174b3c065701ca967fc5f9d8528e0edd532e94c0345f2e16fa1fcdedc98067f2690addbc73fa1f2c8702ce0ebaa1089e551a297c4e58160f1ec8fa8417cce5d7e4b9ecfc142f"}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect(r5, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) 2.530833783s ago: executing program 3 (id=373): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000d14fb771c5c242860000850000001e0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000001c0)='\x00', 0x1, 0x6, 0x0, 0x2}]) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="14002380060003"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000409000000f35bdf253a00000008000300c8635701eaf8dafa6e9f21aad3de77eabba0abcd4263ff6831d479ece3aa4f427f4f4ca89cd10baecc64c2050293501bdce19f6d3b1b249125e1953fb73f18221c41dbb06c1d92e8863ab888ae831011b1158169b8d2f380f4cf705d09c64ac95c678d15393729dd78f5014428e4149e587991bc95c6e3b6b258e69fce34826a28276120f417b64ca9c52667645b0611ba6b7b062c5cf2e4f57349838fc1cab838e40334edfe65db76e2c9aed867eff0b71c55016105cb4da0", @ANYRES32=0x0, @ANYBLOB="0c009900000000006b000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r8, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="080005000800000066eaa8d5aad14d5d0ef7b0819357e99a96623dfe15f86d53ac92fa4a6c"], 0x24}}, 0x10) socket$kcm(0x10, 0x2, 0x0) 2.369896243s ago: executing program 3 (id=375): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x539fc0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000300)={&(0x7f0000000500)=[0x5, 0xfffffff9, 0x5, 0x0, 0xda, 0xfffffff3, 0x7, 0x3, 0x4, 0x4, 0x5, 0x6, 0x8, 0x2, 0x5, 0x5, 0x1, 0xf, 0x8, 0x4, 0x200, 0x800, 0x5, 0x3, 0x3ff, 0xd, 0xdb81, 0x7, 0x80000001, 0x6, 0xcf4, 0x2, 0x7, 0x8001, 0x2, 0x10000, 0x6, 0x80000000, 0x89, 0x8, 0x0, 0xcf, 0xb, 0x7, 0x9, 0x0, 0x42c8, 0x9, 0x8, 0x400, 0x49ea, 0x4, 0x8, 0x3, 0xfffffff7, 0x0, 0x1ff, 0x8, 0x7f, 0xd, 0x8001, 0xb47c, 0x3, 0x729, 0x4, 0x7, 0xe5f4, 0x7f, 0x7, 0x5, 0x2, 0x4, 0x7dd, 0x40, 0x4, 0x400, 0x9, 0x6, 0x3e, 0x10, 0x7fff, 0x1, 0x5, 0x3, 0x4, 0x9ec3, 0xd, 0x1, 0xffffffff, 0x1, 0x10000, 0x10001, 0x401, 0x5, 0x81, 0x9, 0x4, 0xda, 0x4, 0x1000, 0x2, 0x33, 0x49, 0x81, 0xa, 0x1cd, 0x2, 0x7fffffff, 0xfffffffc, 0x3, 0x9, 0x58, 0x80000000, 0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0xe16, 0x101, 0x6000, 0x8000, 0x8, 0xaa5, 0x0, 0x7fffffff, 0x0, 0xc, 0xba3, 0x2, 0x6, 0x1, 0x8000, 0x401, 0x3ff, 0x7, 0x9, 0x47, 0x4, 0x0, 0xffffbd2d, 0x4, 0x2, 0x4, 0x2, 0x80000000, 0xfffffffa, 0x5, 0x1, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xd, 0xffffffff, 0x5, 0x8, 0x100, 0x7ff, 0x3, 0x6, 0x8, 0x1, 0x4, 0xa, 0xc6ba, 0x1, 0x9, 0x1, 0x9f, 0x1, 0x8318, 0x2b5, 0x7, 0x0, 0x3, 0x1, 0x5, 0x8, 0x6, 0x4, 0x3, 0x3, 0x4, 0x400, 0x8, 0xb3, 0x10, 0x5cf, 0x5, 0x80000001, 0x100, 0x7cd, 0x80, 0x5, 0x7, 0x1, 0x1, 0x2a, 0x8, 0x9, 0x81, 0x10000, 0x0, 0x67cfb436, 0x178, 0x9, 0x2, 0x401, 0x9, 0xfffffe01, 0x5, 0x8000, 0x2, 0x9, 0x9, 0xf, 0x0, 0x1a00, 0x15c, 0x2000000, 0x80, 0x1, 0x46f, 0x9, 0x100, 0x96, 0x7ff, 0x0, 0x0, 0x4, 0xe, 0x400, 0xfffffff9, 0x4, 0x5, 0x7, 0x7f, 0x80000001, 0x1, 0xfffff801, 0x9, 0x9, 0x2, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x3bc5, 0x0, 0xfffffffa, 0x1, 0xfffffff9, 0x3, 0x6, 0xa2, 0x4, 0x0, 0xa, 0x7, 0x8, 0x8, 0x3, 0x5ef, 0x2, 0x2, 0x1, 0x40, 0x7fff, 0x7, 0xfffffeb5, 0x8, 0x100, 0x8, 0x8, 0x30000, 0x6, 0x8, 0x3, 0x4, 0xe, 0x9, 0x7, 0x6, 0x4, 0x5f2, 0x3, 0x80, 0x2, 0x3, 0x8, 0x6, 0x9, 0x2, 0x800, 0x4, 0x4460, 0xad, 0x1, 0xc9b, 0xfffffc01, 0x80, 0x10000, 0x6dda, 0x0, 0x9, 0x3, 0xf, 0x1, 0xa8, 0x1, 0x4, 0x30, 0x634, 0x8, 0x9, 0x8001, 0x1, 0x8001, 0xcce3, 0x4, 0x7, 0x7, 0x4, 0x8, 0x401, 0x7, 0xc6ca, 0x5, 0x2, 0x7, 0x8f21, 0xffffffff, 0x101, 0x4, 0x87d, 0x8001, 0x513, 0x2, 0x6, 0x400, 0x3, 0x1000, 0x5, 0xfffffff9, 0x10001, 0x3, 0x3e, 0x0, 0x0, 0x5382, 0x9, 0x8, 0x2000, 0x2, 0x3, 0x100, 0x2, 0xffff, 0x3ac, 0x100, 0xbe28, 0x7, 0x586f, 0xfffffffd, 0x2, 0x1a56fb61, 0x1, 0xb, 0x9, 0x6, 0x7, 0x5c7, 0x0, 0x7fff, 0x2, 0x8, 0x3, 0x7f, 0x3, 0x1fd5, 0x6379, 0xbc, 0x10, 0x4aa8, 0x1, 0x8, 0x1000, 0x100, 0x4, 0x4, 0x4, 0x3, 0x7, 0x7, 0x9f23, 0x6, 0x2, 0x1, 0x6, 0x7, 0xe, 0xfffff693, 0x8, 0x8, 0x7, 0x5, 0xdf5, 0xeb, 0x3, 0x200, 0x8, 0x0, 0xadff, 0xf, 0x7, 0x9, 0x8, 0x4, 0x3, 0x8, 0x2, 0x5, 0xc, 0x5, 0x80000001, 0x9, 0x1, 0xfffffffd, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x600, 0x9, 0x4, 0x5, 0x41d7, 0x99, 0xe, 0xef4, 0x7b, 0x7fff, 0x1, 0x7f, 0x0, 0xffffff9e, 0x2, 0x8, 0x1000, 0xd7, 0x2, 0x6, 0x5, 0xfffff4fe, 0x7, 0xfb6f, 0x0, 0x3, 0x8, 0x0, 0xfffffffc, 0x7a7d6cc9, 0x7, 0xe5fb, 0x10000, 0x30d, 0x4, 0x5, 0x7, 0x400, 0x894a, 0xfffffff8, 0x8, 0xa4b, 0x81, 0x8000, 0x7, 0xfffffffd, 0xffffffa5, 0x8, 0x5, 0x3, 0x25f5, 0x0, 0x9, 0x8, 0x6, 0x6, 0xffffffb2, 0x6, 0x9, 0x0, 0xff800000, 0x3d, 0x8, 0x2, 0xf, 0x9, 0x2, 0xc8000000, 0xa4, 0x4, 0x4, 0x2, 0x45, 0xfffffff7, 0x8, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x200, 0x7fffffff, 0x101, 0x4, 0x3, 0x3, 0x10001, 0xf, 0x2, 0x9, 0x7, 0x18, 0x3ff, 0x0, 0xf8, 0x6, 0x489, 0x2, 0x8001, 0xa29, 0x6, 0xffffffff, 0x8001, 0x401, 0x9, 0xede, 0x8, 0x9, 0x7, 0x2c, 0x4d19, 0x1, 0xffff, 0xfffffffb, 0x3, 0x8001, 0x1ff, 0x184d, 0x2, 0x1, 0x7, 0x8001, 0x7fff, 0x4, 0x6, 0x5, 0x4, 0x4, 0x20, 0x0, 0x7fffffff, 0x1000, 0x3, 0x0, 0xff, 0x8, 0x7f, 0x6, 0x984c, 0x6, 0x8001, 0x10, 0x0, 0x3, 0xccaa, 0x9, 0x8, 0x3, 0x9, 0x4000, 0x85b, 0x101, 0x9, 0x2, 0x2, 0x8, 0x9, 0x200, 0x3, 0x3, 0x100, 0xfac, 0x7, 0x2, 0x1, 0x4, 0x2, 0x7, 0x7, 0xffffffff, 0x8, 0x54, 0x1, 0x8, 0x4, 0xe0, 0xff, 0xa4, 0x81, 0x40, 0x1, 0x2, 0x6, 0x400, 0x2, 0x4498, 0x9, 0x1, 0x6, 0x8bc, 0x1, 0x7, 0xffffff06, 0x21, 0x5, 0xcc3f, 0x8000, 0x6, 0x9, 0x4, 0x800, 0x9, 0x1, 0x4, 0x4, 0x3, 0x5, 0x1, 0x200, 0x6, 0x4, 0x0, 0x7, 0x80000000, 0x80, 0xfff, 0x5, 0x8000, 0x4, 0x6, 0x6, 0xfffffffe, 0x7, 0xfff, 0x5b, 0x0, 0x1, 0x452, 0x3, 0xffff, 0x8, 0x3, 0x25bd, 0xee8, 0x7, 0xffff, 0x9, 0x8de7, 0xc, 0x7, 0x81, 0x6, 0x7ab7af40, 0x2, 0x0, 0x6f7986b1, 0x9, 0x80000000, 0x1000, 0x0, 0xffffffff, 0x8, 0x9, 0x9, 0x8000, 0x1, 0x7ff, 0x478f585d, 0x1, 0x3, 0x23068a37, 0x2, 0x8, 0xf, 0x1, 0x0, 0x6, 0x400, 0x4, 0x5, 0x9, 0x4, 0x2, 0x3, 0xfff, 0x0, 0x401, 0x0, 0x6, 0x0, 0x4, 0xa, 0x1000, 0xf09, 0x3ff, 0x474, 0x1, 0x2, 0x28c5fb2a, 0x8, 0x9, 0x9, 0x4, 0x2, 0x7, 0xfffffffe, 0x2, 0x8, 0x5, 0x8001, 0x1, 0x0, 0x6, 0x7, 0x6, 0x5, 0xfffffffa, 0x1, 0x3, 0x9, 0x6, 0x8, 0x0, 0x4003, 0x2, 0x1, 0x0, 0x0, 0x1ff, 0x5, 0x1, 0xc, 0xffffffff, 0xffffff31, 0xe4ef, 0x4, 0x2, 0x7, 0xff, 0x9, 0x0, 0x0, 0x41a, 0x6, 0x100, 0xe, 0xefe4, 0x3, 0x10941f40, 0x2, 0x1, 0x4, 0x8, 0xffff9a55, 0x3, 0x2, 0x400, 0x100, 0x7fff, 0x3, 0x80000000, 0x3f, 0xffe5, 0x2, 0xa40, 0xf5, 0x80, 0x145f, 0x3, 0xd51, 0x9, 0x1000, 0x7, 0x4, 0x9, 0x2, 0x1, 0x0, 0x6, 0x80000000, 0x4, 0x6, 0x8, 0xb756, 0x20, 0x1, 0x9, 0xfffffff9, 0x7f, 0xb5, 0x881, 0x2, 0x6, 0xffff, 0xe0b, 0x8, 0x5, 0x3b67, 0x7, 0x246e, 0x0, 0xd, 0x80000000, 0xe36, 0xffff525a, 0x7, 0x4, 0xe, 0x0, 0xd, 0x7, 0x400, 0x6, 0x125, 0xffff, 0x5, 0xfffffffd, 0x7, 0x7, 0x3, 0x5, 0x0, 0x5, 0xb8, 0x10001, 0x0, 0x2, 0x10001, 0x7, 0x1, 0x0, 0x7, 0x9, 0xd00000, 0x6, 0x2, 0xd00, 0x10, 0x9, 0x2, 0x3ff, 0xffffffff, 0x0, 0x5, 0x4, 0x5, 0x4e2, 0x4, 0x2, 0x3, 0x7, 0x8, 0x7, 0x4, 0x5, 0x4, 0xa, 0x9, 0x7, 0x6, 0x40, 0x8, 0x3, 0x2, 0x8, 0x26, 0xa, 0x0, 0x40, 0x7, 0x401, 0x1, 0x9, 0x7fffffff, 0x8, 0x1000, 0x96, 0x952, 0x5, 0x9, 0xa, 0x5, 0x3ff, 0x7, 0x92, 0x0, 0x7fff, 0x6, 0x763, 0xf, 0x5, 0x0, 0x1, 0x1, 0x1, 0x92e, 0x133, 0x56, 0x200, 0x7, 0x3ff, 0x0, 0x8, 0x4ea1, 0xfe0000, 0x0, 0xfffffffe, 0x0, 0x401, 0x1, 0x9, 0xeb, 0x3ff, 0xfd9, 0x6, 0x7fffffff, 0x7fff, 0x7fff, 0x2, 0xc, 0x400, 0x0, 0x3, 0x0, 0x8, 0x6, 0x10000, 0x10, 0x0, 0x9, 0xd8f, 0x3, 0x7, 0x7, 0x9, 0x4, 0x2, 0x3ff, 0x2, 0xffff, 0x7, 0x12, 0x3, 0x6, 0x20000000, 0x9ee4, 0xa2, 0x6, 0x8, 0xf, 0x200, 0x4, 0x7fff, 0x9, 0x9, 0xe, 0xd6, 0x9, 0x1, 0x42fe, 0x80000001, 0x5, 0x5, 0x7e98, 0x7, 0x4, 0x80000000, 0x10, 0x2, 0x0, 0x1, 0x4, 0x4db4, 0x6, 0x1, 0x2, 0xbe9, 0x1, 0xc, 0x5, 0x2, 0x0, 0x5, 0x6, 0x4, 0xfffffffd, 0x9, 0x7fff, 0x6, 0xb, 0x4871, 0x72f3, 0x5c42, 0x1, 0xd], 0x3, 0x400, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r11, 0x1, 0x9, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r12}) close_range(r0, 0xffffffffffffffff, 0x0) 2.301512779s ago: executing program 3 (id=376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x24) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000240)={0x5, 0x0, [{0x301, 0x0, 0x4000000000000000}, {0x482, 0x0, 0x1}, {0xb6c, 0x0, 0x81}, {0x0, 0x0, 0xc1}, {0x8da, 0x0, 0xfffffffffffffff7}]}) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r3, r5, 0x0, 0xc486) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000200), 0x8) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x717e9c38}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x441000, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40015b0b, &(0x7f0000000040)) 1.031589281s ago: executing program 0 (id=383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000000)) getdents(r4, &(0x7f0000002000)=""/4096, 0x1000) ioctl$TIOCSIG(r4, 0x40045436, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 960.287648ms ago: executing program 0 (id=384): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, 0x40900) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}]) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x8000) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000000)={0x3a, 0x2f, 0x1, 0xe, 0x3, 0x3, 0x1, 0xfb, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r4, r4, 0x0, 0x0, 0x2}) 851.300865ms ago: executing program 0 (id=385): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 850.86298ms ago: executing program 3 (id=386): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21}, 0x2a) 791.047023ms ago: executing program 0 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x1b5) lseek(r3, 0x100000000004, 0x1) getdents64(r3, 0x0, 0x4f) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bc2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtclass={0x490, 0x28, 0x800, 0x70bd28, 0x6, {0x0, 0x0, 0x0, r2, {0xe, 0x8}, {0xf, 0xfff1}, {0xc, 0x3}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x64, 0x7, 0x2d33, 0x5, 0x1, 0xd, 0x800, 0x0, 0x81, 0x5, 0x0, 0x6, 0x8, 0x9, 0x6, 0x9, 0x4, 0x1000, 0x6c4, 0xffffffff, 0x8, 0x467, 0x800, 0x3, 0x4, 0x1000, 0x0, 0x976, 0x8b, 0xdf7, 0x10001, 0x10, 0x1a, 0x9, 0xb9b, 0x40, 0x1, 0x2, 0x8, 0x0, 0x5, 0x3, 0x50d3, 0xffff8000, 0x5, 0x10000, 0x5, 0x3, 0x6, 0x4, 0x9, 0x1ffc0, 0x2, 0x0, 0x3, 0x1, 0x3, 0xce, 0xffb, 0x8, 0x5, 0x0, 0x1000, 0x8, 0x0, 0xb65, 0x10, 0xf0ef, 0x0, 0x3, 0x7ff, 0xff, 0x2, 0x1000, 0x200, 0xaa, 0x9, 0x0, 0x3, 0x5, 0x9, 0x7ff, 0x80, 0x4, 0x8, 0x1, 0xf4c, 0x45, 0xffff, 0xf1, 0x7, 0x40, 0x3, 0x1da, 0x0, 0xad, 0x0, 0x5, 0xfffffff8, 0x4, 0x5, 0x8, 0x6, 0x5, 0x4, 0x3, 0x6, 0x0, 0x2, 0x21ef, 0x7fff, 0x5, 0x2, 0x9, 0x8, 0x3, 0xa, 0x2, 0x9, 0x0, 0x818, 0x35871a1c, 0x7, 0xffff8000, 0x1, 0x9, 0x1000, 0x400, 0x8000, 0x2, 0x9, 0x1ff, 0x2, 0xc6f, 0xc, 0x2aaa, 0xff, 0xa1, 0x200, 0x6, 0x9, 0xfffff8bf, 0x5, 0x10, 0xfffffff8, 0x5, 0x5, 0x3ff, 0x4, 0x80000000, 0x5, 0xc, 0xfffffe00, 0x81, 0xfffffffc, 0xfffffc01, 0x2, 0x4000000, 0x3, 0x8, 0x7, 0x7, 0xffffffff, 0xc, 0x8000, 0x7fe, 0x9, 0x8, 0x5, 0x6a1, 0x7, 0x5, 0x2, 0x8, 0xffff, 0x4, 0x9b, 0x81, 0x0, 0x3ff, 0x4, 0x204, 0xff, 0x2, 0x0, 0x2a2f, 0x7fffffff, 0x1000, 0x1, 0x1f01, 0x5, 0x0, 0x5, 0x8, 0x2, 0x3, 0x0, 0x2, 0x1ff, 0x3, 0x6, 0xd, 0x40, 0x1, 0x7fffffff, 0x7fff, 0x237, 0x6, 0x7f, 0x5, 0x5, 0x4, 0x8, 0x9, 0x58f9a78a, 0x3ff, 0x2, 0x0, 0x2, 0xfffffff3, 0x7fff, 0x9bf2, 0x7, 0x2, 0xb, 0x8, 0x4, 0x10000, 0x1, 0x7, 0x7, 0x99, 0x3, 0xe1, 0x101, 0xf, 0x8, 0x6, 0x7ff, 0x81, 0x7, 0x0, 0xc, 0x81, 0x4, 0x0, 0x8, 0x6, 0x7, 0x6, 0x7fff, 0x5, 0x9, 0x3, 0x5, 0x5]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xe}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x20041090}, 0x40408d0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r5 = memfd_create(&(0x7f0000000480)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xd, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r5, &(0x7f0000002080)={0xd, {"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", 0x1000}}, 0x1006) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) 406.895046ms ago: executing program 2 (id=394): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@ldst={0x0, 0x1, 0x1, 0x2, 0x7, 0x80, 0x1d}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 359.708411ms ago: executing program 2 (id=395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x2000, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) unshare(0x18000980) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x88) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1b4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_LABELS_MASK={0xc, 0x17, [0x2, 0x7fff]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb0}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xf, 0xc5e, 0x4]}, @CTA_NAT_SRC={0xe0, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4008840}, 0x20044040) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000a006) 221.442119ms ago: executing program 4 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 220.095289ms ago: executing program 4 (id=397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xce20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 140.796099ms ago: executing program 2 (id=398): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000001c0)=0x9, 0x4) 140.531193ms ago: executing program 4 (id=399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) (async) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x208000, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) acct(&(0x7f0000000100)='./cgroup/file0\x00') (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001040)={{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x8}, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x80000000000002, 0x6, 0x200000000008, 0x7, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2}, {0x40020000058, 0xa5, 0xfffffffffffffff9, 0xc7e}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x0, 0x67a01bcf906970c1, 0x7f, 0x7, 0x0, 0x5e0ba9f6}}, 0xe8) (async) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev, 0x4}, 0x1c, 0x0}}], 0x1, 0x40040d4) 140.128674ms ago: executing program 0 (id=400): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000001300)={@broadcast, @broadcast}, 0x8) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001180), 0x2000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) poll(&(0x7f0000001980)=[{r7, 0x420}], 0x1, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf2571c8000008001c00", @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32=r1, @ANYRESHEX=r5, @ANYRES32=r1, @ANYBLOB="0c0006000300000002000000080001000300000008001d00", @ANYRES32=r7, @ANYBLOB="08001d00", @ANYRES32=r3, @ANYBLOB="08001c00", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0xc000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe, r4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x24040084) r11 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e2405570caa2ed669e6039809a18f5352a0fdc0d2a8695098eaec2ec39be99bf306a5f920e433797abc2e9c00f1d3343e8febeb47061a0cdd772193de5a6049b4ed0ce4acf202fdc437cd19bc3777232a01acd90f871c663e23b8c1162fdfb945714520a6e5b29200ea0834774de9e1ad93328e2bbaaaa8439cbfead3d3c21ad9fe9de277aedd6e7d634268fa83f0675995fe74703cd6662d5412542900839f385bceb2dc2dbdd6af90d0feb950ddbd45934a772c935b20abede17db8b63e36317571c3de666f1403f27ab73e7966169fd4f137da"], 0xa) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xeffffdfc, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0xfffffffffffffe6f}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 135.51131ms ago: executing program 2 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x32201, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000080)={0x48}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="80007e0a0a000200aaaaaaaaaaeeffff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000593f060102000000000000000003a78c1c6b0000000900020073797a31000000000500010007000000240007800c00018008000140ffffffff0c00148008000140ac1414bb08fd1244398aae740a160072d9a51a4a73565dcedd1621e0fecb13a0433b3015029b7e020005fccd60da6f946fdc2471868e16a77c2aa62b5d7b60cfa44f"], 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r3}) 80.657928ms ago: executing program 4 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffefe, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000700df00000008000200", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000100)=0x22) r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000000c0)=0x32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@private=0xa010102, 0x0, 0x0, 0x90, 0x0, [{@local}, {@local}, {@local}, {@remote}, {@multicast1}, {@loopback}, {@broadcast}, {@initdev}, {@loopback}]}}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800418}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000040) 11.884961ms ago: executing program 2 (id=403): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=@random={'security.', '/dev/video#\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a00)={0x38, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0x8, 0x135, 0x0, 0x0, @fd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 3.907332ms ago: executing program 2 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3256663671a5b3d4bbb6759ec2c850b7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b1156ec231238f51"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ac084ba13db6565e2c90ffaa2d9f1a813a75f48921f07b83"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20010084}, 0x800) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x8000000, 0x0, 0x5, 0x0, 0x0, [{0x2, 0xd, 0x7, '\x00', 0xd9}, {0xf8, 0x9, 0x64, '\x00', 0x5}, {0x0, 0xb, 0x7, '\x00', 0xf}, {0x9, 0x0, 0xfc}, {0x2, 0xf8, 0x5d, '\x00', 0x6}, {0x8, 0xe8, 0x5, '\x00', 0x2}, {0x8, 0x3, 0x0, '\x00', 0x6}, {0xb3, 0xf8, 0x3, '\x00', 0xc}, {0x3, 0xbe, 0x7, '\x00', 0xff}, {0x9, 0x4, 0x9, '\x00', 0x3}, {0xe0, 0x4, 0x4, '\x00', 0x4d}, {0x3, 0x9, 0x80, '\x00', 0x5}, {0x2, 0x5, 0x2c, '\x00', 0x4}, {0x5, 0x0, 0x8}, {0x1, 0x3, 0x39, '\x00', 0x8}, {0xfe, 0xa9, 0x8, '\x00', 0x6}, {0x5}, {0x9c, 0x5, 0xff, '\x00', 0x9}, {0x4, 0x5, 0x8, '\x00', 0x6}, {0xfe, 0x64, 0x2, '\x00', 0x5}, {0xa, 0x5, 0x1, '\x00', 0x9}, {0x0, 0x1, 0x2, '\x00', 0xf0}, {0x10, 0x7, 0x4, '\x00', 0x8}, {0x5, 0xe, 0x1, '\x00', 0x8}]}}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f00000001c0)=[@decrefs, @request_death, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x0, 0xc}, @fda={0x66646185, 0x9, 0x1, 0x22}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x42, 0x0, &(0x7f0000000300)="1b1979f2bfc9ef004398bfc946cb36f168fc96ca2e2f31058789c1f487dedfed6cb224e78d3078564f06fe38cfabeeb85dd8cce2483f6b10df35474d052a8050c1cd"}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 0s ago: executing program 3 (id=405): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="6e2f221d93030c5d3132673b2a25439bf4eb2f3482c9faa6bd3aea0256ca8cdefb7bf909e87b103aa59fe9749bb771de3997369d04984db6a0855767449ed500d4d8f476fc8d8729e0bc28959692a2cf3bc438f388049bd299b6288c65431d3a0812908b393e7c28e20df5db6f195263d6fde204723ee245c8babc7149a3d73c3261cd0b", 0x84}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)="c7e9", 0x2}], 0x1}}], 0x3, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x214000, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) sendmmsg$sock(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="6e2f221d93030c5d3132673b2a25439bf4eb2f3482c9faa6bd3aea0256ca8cdefb7bf909e87b103aa59fe9749bb771de3997369d04984db6a0855767449ed500d4d8f476fc8d8729e0bc28959692a2cf3bc438f388049bd299b6288c65431d3a0812908b393e7c28e20df5db6f195263d6fde204723ee245c8babc7149a3d73c3261cd0b", 0x84}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)="c7e9", 0x2}], 0x1}}], 0x3, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) (async) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x214000, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x3c, 0x40000010, 0x15, 0x8, 0xb, 0x10, 0x6, 0x101, 0xffffffffffffffff}) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) (async) kernel console output (not intermixed with test programs): [ 53.024720][ T40] audit: type=1400 audit(1766892428.973:59): avc: denied { write } for pid=5871 comm="sh" path="pipe:[7015]" dev="pipefs" ino=7015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.037209][ T40] audit: type=1400 audit(1766892428.973:60): avc: denied { rlimitinh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.045554][ T40] audit: type=1400 audit(1766892428.973:61): avc: denied { siginh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:48675' (ED25519) to the list of known hosts. [ 55.599362][ T40] audit: type=1400 audit(1766892431.573:62): avc: denied { name_bind } for pid=5920 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.643210][ T40] audit: type=1400 audit(1766892431.623:63): avc: denied { execute } for pid=5921 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.652739][ T40] audit: type=1400 audit(1766892431.623:64): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.625578][ T40] audit: type=1400 audit(1766892433.603:65): avc: denied { mounton } for pid=5921 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.636282][ T40] audit: type=1400 audit(1766892433.613:66): avc: denied { mount } for pid=5921 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.638592][ T5921] cgroup: Unknown subsys name 'net' [ 57.815794][ T5921] cgroup: Unknown subsys name 'cpuset' [ 57.819931][ T5921] cgroup: Unknown subsys name 'rlimit' [ 57.994095][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 57.994110][ T40] audit: type=1400 audit(1766892433.973:75): avc: denied { read } for pid=5647 comm="dhcpcd" name="n102" dev="tmpfs" ino=1958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.006221][ T40] audit: type=1400 audit(1766892433.973:76): avc: denied { open } for pid=5647 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.014905][ T40] audit: type=1400 audit(1766892433.973:77): avc: denied { getattr } for pid=5647 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1958 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.027789][ T5927] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.031252][ T40] audit: type=1400 audit(1766892434.003:78): avc: denied { relabelto } for pid=5927 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.043003][ T40] audit: type=1400 audit(1766892434.003:79): avc: denied { write } for pid=5927 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 58.058909][ T40] audit: type=1400 audit(1766892434.033:80): avc: denied { read } for pid=5921 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.069326][ T40] audit: type=1400 audit(1766892434.043:81): avc: denied { open } for pid=5921 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.820473][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.220394][ T40] audit: type=1400 audit(1766892438.193:82): avc: denied { execmem } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.400181][ T40] audit: type=1400 audit(1766892438.373:83): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.409798][ T40] audit: type=1400 audit(1766892438.383:84): avc: denied { read write } for pid=5936 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.452399][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.458854][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.462778][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.466402][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.466413][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.470544][ T5295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.476631][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.476792][ T5295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.480394][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.481124][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.481357][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.484269][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.484492][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.484911][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.485436][ T5295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.490350][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.492741][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.495011][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.510168][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.513538][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.873296][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 62.891524][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 62.954583][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 63.051210][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 63.086768][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.089314][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.091817][ T5937] bridge_slave_0: entered allmulticast mode [ 63.095145][ T5937] bridge_slave_0: entered promiscuous mode [ 63.117522][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.119901][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.122371][ T5937] bridge_slave_1: entered allmulticast mode [ 63.125348][ T5937] bridge_slave_1: entered promiscuous mode [ 63.172810][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.176134][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.179589][ T5936] bridge_slave_0: entered allmulticast mode [ 63.183489][ T5936] bridge_slave_0: entered promiscuous mode [ 63.210713][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.213246][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.215790][ T5936] bridge_slave_1: entered allmulticast mode [ 63.219015][ T5936] bridge_slave_1: entered promiscuous mode [ 63.224265][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.247135][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.250309][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.254032][ T5947] bridge_slave_0: entered allmulticast mode [ 63.257876][ T5947] bridge_slave_0: entered promiscuous mode [ 63.271562][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.274087][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.276477][ T5947] bridge_slave_1: entered allmulticast mode [ 63.279541][ T5947] bridge_slave_1: entered promiscuous mode [ 63.284366][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.314521][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.317474][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.320737][ T5935] bridge_slave_0: entered allmulticast mode [ 63.324594][ T5935] bridge_slave_0: entered promiscuous mode [ 63.347708][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.350999][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.354397][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.357560][ T5935] bridge_slave_1: entered allmulticast mode [ 63.361400][ T5935] bridge_slave_1: entered promiscuous mode [ 63.381542][ T5937] team0: Port device team_slave_0 added [ 63.384674][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.400708][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.417614][ T5937] team0: Port device team_slave_1 added [ 63.422080][ T5936] team0: Port device team_slave_0 added [ 63.427288][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.444859][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.450580][ T5936] team0: Port device team_slave_1 added [ 63.475603][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.510518][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.513965][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.525599][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.542464][ T5947] team0: Port device team_slave_0 added [ 63.545670][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.548757][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.560162][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.565621][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.567991][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.577725][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.595133][ T5947] team0: Port device team_slave_1 added [ 63.598287][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.601374][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.612686][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.623663][ T5935] team0: Port device team_slave_0 added [ 63.655166][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.658241][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.669420][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.675774][ T5935] team0: Port device team_slave_1 added [ 63.700021][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.703165][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.714613][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.747915][ T5936] hsr_slave_0: entered promiscuous mode [ 63.751620][ T5936] hsr_slave_1: entered promiscuous mode [ 63.780264][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.783557][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.795260][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.819984][ T5937] hsr_slave_0: entered promiscuous mode [ 63.822448][ T5937] hsr_slave_1: entered promiscuous mode [ 63.825521][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 63.827579][ T5937] Cannot create hsr debugfs directory [ 63.830209][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.833370][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.844414][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.873807][ T5947] hsr_slave_0: entered promiscuous mode [ 63.877934][ T5947] hsr_slave_1: entered promiscuous mode [ 63.881018][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 63.883838][ T5947] Cannot create hsr debugfs directory [ 63.939403][ T5935] hsr_slave_0: entered promiscuous mode [ 63.942642][ T5935] hsr_slave_1: entered promiscuous mode [ 63.946343][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 63.949000][ T5935] Cannot create hsr debugfs directory [ 64.244586][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.255808][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.263278][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.278884][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.323855][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.331937][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.339409][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.347127][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.405849][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.412845][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.419029][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.424226][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.494793][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.498511][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.504445][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.509960][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.514216][ T5945] Bluetooth: hci0: command tx timeout [ 64.514408][ T5949] Bluetooth: hci1: command tx timeout [ 64.528739][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.552179][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.576015][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.578939][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.593568][ T5949] Bluetooth: hci2: command tx timeout [ 64.593857][ T5945] Bluetooth: hci3: command tx timeout [ 64.602384][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.605664][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.613973][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.658868][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.680635][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.688005][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.690971][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.710489][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.713488][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.720338][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.739702][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.742796][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.759021][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.762115][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.764097][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 64.764109][ T40] audit: type=1400 audit(1766892440.743:92): avc: denied { sys_module } for pid=5936 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.804802][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.839128][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.848218][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.851204][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.870764][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.874210][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.895084][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.978233][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.996371][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.017526][ T5936] veth0_vlan: entered promiscuous mode [ 65.037665][ T5936] veth1_vlan: entered promiscuous mode [ 65.083730][ T5937] veth0_vlan: entered promiscuous mode [ 65.097085][ T5935] veth0_vlan: entered promiscuous mode [ 65.114863][ T5937] veth1_vlan: entered promiscuous mode [ 65.120624][ T5936] veth0_macvtap: entered promiscuous mode [ 65.130857][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.136248][ T5936] veth1_macvtap: entered promiscuous mode [ 65.140034][ T5935] veth1_vlan: entered promiscuous mode [ 65.169719][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.182630][ T5937] veth0_macvtap: entered promiscuous mode [ 65.190445][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.203426][ T5937] veth1_macvtap: entered promiscuous mode [ 65.208763][ T5947] veth0_vlan: entered promiscuous mode [ 65.218902][ T84] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.221834][ T84] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.232579][ T84] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.240045][ T84] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.244982][ T5935] veth0_macvtap: entered promiscuous mode [ 65.253913][ T5935] veth1_macvtap: entered promiscuous mode [ 65.258020][ T5947] veth1_vlan: entered promiscuous mode [ 65.262662][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.276185][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.287784][ T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.291569][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.305643][ T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.317718][ T84] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.330904][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.353348][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.370244][ T5272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.376265][ T5272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.379316][ T5947] veth0_macvtap: entered promiscuous mode [ 65.385126][ T4902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388575][ T4902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412929][ T4902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.417146][ T5947] veth1_macvtap: entered promiscuous mode [ 65.419834][ T4902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.444508][ T4902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.448047][ T4902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.462800][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.465358][ T40] audit: type=1400 audit(1766892441.443:93): avc: denied { mount } for pid=5936 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.473347][ T40] audit: type=1400 audit(1766892441.443:94): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/syzkaller.MkQqMr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.475349][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.482723][ T40] audit: type=1400 audit(1766892441.443:95): avc: denied { mount } for pid=5936 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.486663][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.493955][ T40] audit: type=1400 audit(1766892441.443:96): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/syzkaller.MkQqMr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.496617][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.506341][ T40] audit: type=1400 audit(1766892441.443:97): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/syzkaller.MkQqMr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.519377][ T40] audit: type=1400 audit(1766892441.443:98): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.527283][ T40] audit: type=1400 audit(1766892441.463:99): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.530090][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.536681][ T40] audit: type=1400 audit(1766892441.463:100): avc: denied { mount } for pid=5936 comm="syz-executor" name="/" dev="gadgetfs" ino=10593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.549701][ T40] audit: type=1400 audit(1766892441.463:101): avc: denied { mount } for pid=5936 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.560654][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.564749][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.579564][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.601841][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.603331][ T6029] overlayfs: workdir and upperdir must reside under the same mount [ 65.610392][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.616204][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.617067][ T4902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.627111][ T4902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.688119][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.696022][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.756568][ T5272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.759909][ T5272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.800261][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.806520][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.809683][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.909935][ T24] IPVS: starting estimator thread 0... [ 66.006330][ T6039] Zero length message leads to an empty skb [ 66.014385][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.018891][ T6047] IPVS: using max 46 ests per chain, 110400 per kthread [ 66.105374][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 66.116094][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 66.214780][ T6074] program syz.2.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.424912][ T828] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.483149][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.558898][ T6092] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 66.593591][ T828] usb 8-1: Using ep0 maxpacket: 8 [ 66.593808][ T5945] Bluetooth: hci1: command tx timeout [ 66.595593][ T5949] Bluetooth: hci0: command tx timeout [ 66.602678][ T828] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 66.612295][ T828] usb 8-1: config 0 has no interface number 0 [ 66.614895][ T828] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.619111][ T828] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 66.625015][ T828] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 66.629642][ T828] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.637058][ T828] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 66.640402][ T828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.643833][ T24] usb 7-1: no configurations [ 66.643860][ T828] usb 8-1: Product: syz [ 66.645650][ T24] usb 7-1: can't read configurations, error -22 [ 66.646926][ T828] usb 8-1: Manufacturer: syz [ 66.650560][ T828] usb 8-1: SerialNumber: syz [ 66.653924][ T828] usb 8-1: config 0 descriptor?? [ 66.683093][ T5949] Bluetooth: hci3: command tx timeout [ 66.684577][ T5945] Bluetooth: hci2: command tx timeout [ 66.773003][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.804713][ T6025] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.950204][ T6070] netlink: 'syz.3.15': attribute type 3 has an invalid length. [ 66.953281][ T24] usb 7-1: no configurations [ 66.954870][ T24] usb 7-1: can't read configurations, error -22 [ 66.957104][ T24] usb usb7-port1: attempt power cycle [ 66.964307][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 66.967398][ T6025] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.970243][ T6025] usb 5-1: config 179 has no interface number 0 [ 66.972370][ T6025] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.979529][ T6025] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.985395][ T6025] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.986940][ T828] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 66.990861][ T6025] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 66.990887][ T6025] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.990925][ T6025] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.005046][ T828] usb 8-1: USB disconnect, device number 2 [ 67.009484][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.025431][ T6092] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 67.238255][ T6025] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 67.314470][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.344125][ T24] usb 7-1: no configurations [ 67.345778][ T24] usb 7-1: can't read configurations, error -22 [ 67.464303][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 67.472182][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.480824][ T6023] usb 5-1: USB disconnect, device number 2 [ 67.480885][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 67.486407][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 67.489833][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.513934][ T24] usb 7-1: no configurations [ 67.515582][ T24] usb 7-1: can't read configurations, error -22 [ 67.517851][ T24] usb usb7-port1: unable to enumerate USB device [ 68.353100][ T6023] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.513609][ T6023] usb 5-1: Using ep0 maxpacket: 8 [ 68.519019][ T6023] usb 5-1: config 2 interface 0 has no altsetting 0 [ 68.524108][ T6023] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 68.527897][ T6023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.531287][ T6023] usb 5-1: Product: syz [ 68.535645][ T6023] usb 5-1: Manufacturer: syz [ 68.538652][ T6023] usb 5-1: SerialNumber: syz [ 68.673701][ T5945] Bluetooth: hci1: command tx timeout [ 68.673731][ T5949] Bluetooth: hci0: command tx timeout [ 68.698826][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 68.753113][ T5949] Bluetooth: hci2: command tx timeout [ 68.753211][ T5945] Bluetooth: hci3: command tx timeout [ 68.786395][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 68.854469][ T6023] usb 5-1: USB disconnect, device number 3 [ 69.013683][ T5949] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 69.474596][ T6158] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.631943][ T6162] can0: slcan on ttyS3. [ 69.703556][ T6162] can0 (unregistered): slcan off ttyS3. [ 69.774643][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 69.774660][ T40] audit: type=1400 audit(1766892445.753:214): avc: denied { ioctl } for pid=6163 comm="syz.0.46" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11063 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.073036][ T828] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.225726][ T828] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.228876][ T828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.231623][ T828] usb 7-1: Product: syz [ 70.233120][ T828] usb 7-1: Manufacturer: syz [ 70.234774][ T828] usb 7-1: SerialNumber: syz [ 70.439594][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.442885][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.448071][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.451661][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.456242][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.462263][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.465648][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.468806][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.471899][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.476559][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.485625][ T828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 70.490870][ T828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 70.495459][ T828] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 70.500824][ T828] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 70.508085][ T828] usb 7-1: USB disconnect, device number 6 [ 70.669449][ T40] audit: type=1400 audit(1766892446.643:215): avc: denied { write } for pid=6180 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.680119][ T40] audit: type=1400 audit(1766892446.653:216): avc: denied { name_connect } for pid=6180 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.685001][ T6181] xt_hashlimit: invalid rate [ 70.687381][ T40] audit: type=1400 audit(1766892446.653:217): avc: denied { shutdown } for pid=6180 comm="syz.0.50" laddr=::ac14:14aa lport=40807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.753589][ T5945] Bluetooth: hci1: command tx timeout [ 70.755533][ T5949] Bluetooth: hci0: command tx timeout [ 70.833302][ T5945] Bluetooth: hci2: command tx timeout [ 70.835252][ T5949] Bluetooth: hci3: command tx timeout [ 70.873855][ T40] audit: type=1400 audit(1766892446.853:218): avc: denied { ioctl } for pid=6183 comm="syz.0.51" path="socket:[7900]" dev="sockfs" ino=7900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.920968][ T40] audit: type=1400 audit(1766892446.893:219): avc: denied { ioctl } for pid=6185 comm="syz.0.52" path="socket:[9711]" dev="sockfs" ino=9711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.921368][ T6186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.52'. [ 70.977106][ T40] audit: type=1400 audit(1766892446.953:220): avc: denied { mount } for pid=6187 comm="syz.0.53" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.998593][ T40] audit: type=1400 audit(1766892446.953:221): avc: denied { read } for pid=6187 comm="syz.0.53" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.006696][ T40] audit: type=1400 audit(1766892446.953:222): avc: denied { ioctl } for pid=6187 comm="syz.0.53" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.062079][ T6194] ======================================================= [ 71.062079][ T6194] WARNING: The mand mount option has been deprecated and [ 71.062079][ T6194] and is ignored by this kernel. Remove the mand [ 71.062079][ T6194] option from the mount to silence this warning. [ 71.062079][ T6194] ======================================================= [ 71.084797][ T6194] cgroup: Invalid name [ 71.084802][ T40] audit: type=1400 audit(1766892447.063:223): avc: denied { remount } for pid=6193 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.087756][ T6196] cgroup: Invalid name [ 71.245507][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'. [ 71.259667][ T6200] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.57'. [ 71.263237][ T6200] netlink: Conntrack attr has 4 unknown bytes [ 71.434441][ T6212] overlayfs: overlapping lowerdir path [ 71.554862][ T6217] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 71.588600][ T6218] gretap1: entered promiscuous mode [ 71.601039][ T6221] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 71.633310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.963649][ T6236] ubi31: attaching mtd0 [ 71.966782][ T6236] ubi31: scanning is finished [ 71.968387][ T6236] ubi31: empty MTD device detected [ 72.031444][ T6237] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 72.055358][ T6237] team0: Port device dummy0 added [ 72.065130][ T6236] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 72.068140][ T6236] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 72.071141][ T6236] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 72.074329][ T6236] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 72.076809][ T6236] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 72.079629][ T6236] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 72.082705][ T6236] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 451102305 [ 72.086644][ T6236] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 72.089998][ T6238] ubi31: background thread "ubi_bgt31d" started, PID 6238 [ 72.304128][ T6244] Bluetooth: MGMT ver 1.23 [ 72.482824][ T6248] process 'syz.2.72' launched './file0' with NULL argv: empty string added [ 72.867202][ T6265] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 73.471191][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 73.474928][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 74.629341][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 74.633957][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 74.720770][ T6323] tipc: Started in network mode [ 74.724675][ T6323] tipc: Node identity 3692e652b36b, cluster identity 4711 [ 74.728203][ T6323] tipc: Enabled bearer , priority 0 [ 74.772728][ T6323] syzkaller0: entered promiscuous mode [ 74.775353][ T6323] syzkaller0: entered allmulticast mode [ 74.778404][ T6323] tipc: Resetting bearer [ 74.857818][ T6325] No such timeout policy "syz1" [ 74.886991][ T6322] tipc: Resetting bearer [ 75.671590][ T6322] tipc: Disabling bearer [ 75.757288][ T6339] geneve2: entered promiscuous mode [ 75.759167][ T6339] geneve2: entered allmulticast mode [ 75.803689][ T6341] netlink: 'syz.2.98': attribute type 23 has an invalid length. [ 75.869354][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 75.869365][ T40] audit: type=1400 audit(1766892451.843:280): avc: denied { kexec_image_load } for pid=6347 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.965929][ T40] audit: type=1400 audit(1766892451.943:281): avc: denied { append } for pid=6349 comm="syz.2.102" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.979271][ T40] audit: type=1400 audit(1766892451.953:282): avc: denied { ioctl } for pid=6349 comm="syz.2.102" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.983942][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 76.073199][ T6367] warning: `syz.0.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.078059][ T6367] exfat: Unknown parameter 'discardfi0' [ 76.120386][ T6370] capability: warning: `syz.0.106' uses 32-bit capabilities (legacy support in use) [ 76.368181][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.370929][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.623920][ T40] audit: type=1400 audit(1766892452.603:283): avc: denied { append } for pid=6397 comm="syz.0.118" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.636987][ T6398] netlink: 56 bytes leftover after parsing attributes in process `syz.0.118'. [ 76.648911][ T40] audit: type=1400 audit(1766892452.633:284): avc: denied { write } for pid=6397 comm="syz.0.118" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.653031][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.675986][ T6398] usb usb4: usbfs: process 6398 (syz.0.118) did not claim interface 0 before use [ 76.697002][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 76.813071][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 76.816239][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 76.821426][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 76.826000][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.830569][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 76.837467][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 76.844138][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.853130][ T24] usb 7-1: Product: syz [ 76.854634][ T24] usb 7-1: Manufacturer: syz [ 76.856220][ T24] usb 7-1: SerialNumber: syz [ 76.864178][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 76.868992][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input6 [ 77.073081][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 77.075952][ T24] (id 0x00) [ 77.123014][ T24] rc_core: IR keymap rc-imon-pad not found [ 77.125406][ T24] Registered IR keymap rc-empty [ 77.127285][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 77.131072][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 77.274333][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 77.279393][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input7 [ 77.287950][ T24] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:7> initialized [ 77.772078][ T40] audit: type=1400 audit(1766892453.743:285): avc: denied { append } for pid=6408 comm="syz.0.120" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.831906][ T40] audit: type=1400 audit(1766892453.803:286): avc: denied { allowed } for pid=6408 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.843411][ T6411] overlay: Unknown parameter 'volatile:fowner>00000000000000000000' [ 77.866111][ T6410] imon:send_packet: packet tx failed (-71) [ 77.869574][ T10] usb 7-1: USB disconnect, device number 7 [ 77.893326][ T6410] imon:vfd_write: send packet #1 failed [ 78.067361][ T40] audit: type=1400 audit(1766892454.043:287): avc: denied { create } for pid=6413 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.077738][ T40] audit: type=1400 audit(1766892454.063:288): avc: denied { write } for pid=6413 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.353609][ T6023] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.503158][ T6023] usb 7-1: Using ep0 maxpacket: 32 [ 78.507542][ T6023] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 78.512085][ T6023] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 78.518223][ T6023] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.523065][ T6023] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 78.530787][ T6023] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 78.534814][ T6023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.538279][ T6023] usb 7-1: Product: syz [ 78.540205][ T6023] usb 7-1: Manufacturer: syz [ 78.542247][ T6023] usb 7-1: SerialNumber: syz [ 78.550223][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 78.555785][ T6023] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input8 [ 78.566240][ T6023] imon:send_packet: packet tx failed (-32) [ 78.595412][ T6023] imon 7-1:155.0: panel buttons/knobs setup failed [ 78.597680][ T6023] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 78.600451][ T6023] (id 0x00) [ 78.653020][ T6023] rc_core: IR keymap rc-imon-pad not found [ 78.655512][ T6023] Registered IR keymap rc-empty [ 78.657861][ T6023] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 78.662218][ T6023] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 78.669153][ T6023] imon:send_packet: packet tx failed (-32) [ 78.685158][ T6023] imon 7-1:155.0: remote input dev register failed [ 78.688325][ T6023] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 78.699774][ T6023] imon 7-1:155.0: unable to initialize intf0, err 0 [ 78.702996][ T6023] imon:imon_probe: failed to initialize context! [ 78.705760][ T6023] imon 7-1:155.0: unable to register, err -19 [ 78.953352][ T6426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 78.955726][ T6426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.960911][ T6426] vhci_hcd vhci_hcd.0: Device attached [ 78.965690][ T6427] vhci_hcd: unknown pdu 1 [ 78.968102][ T46] vhci_hcd vhci_hcd.3: stop threads [ 78.971283][ T46] vhci_hcd vhci_hcd.3: release socket [ 78.974122][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 79.151429][ T6430] netlink: 'syz.0.124': attribute type 11 has an invalid length. [ 79.155365][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.124'. [ 79.160902][ T6431] capability: warning: `syz.0.124' uses deprecated v2 capabilities in a way that may be insecure [ 79.166238][ T40] audit: type=1400 audit(1766892455.143:289): avc: denied { prog_load } for pid=6429 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.241277][ T6439] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 79.297617][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'. [ 79.408551][ T6025] usb 7-1: USB disconnect, device number 8 [ 79.485793][ T6450] binder: BC_ATTEMPT_ACQUIRE not supported [ 79.488223][ T6450] binder: 6449:6450 ioctl c0306201 200000000680 returned -22 [ 79.495476][ T6450] i2c i2c-1: Invalid block write size 34 [ 79.549820][ T6456] SELinux: syz.3.131 (6456) set checkreqprot to 1. This is no longer supported. [ 79.568637][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 79.689572][ T6457] block nbd2: shutting down sockets [ 79.721946][ T6460] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 80.373596][ T6454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.376995][ T6454] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.385201][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.136'. [ 80.387898][ T6454] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.409842][ T6454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.414734][ T6454] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.419488][ T6454] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.432775][ T6454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.437065][ T6454] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.437843][ T6474] netlink: 'syz.0.137': attribute type 13 has an invalid length. [ 80.446778][ T6454] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.454534][ T6454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.457867][ T6454] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.464428][ T6454] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.827670][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.831972][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 80.911927][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 80.911942][ T40] audit: type=1400 audit(1766892456.883:318): avc: granted { setsecparam } for pid=6504 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 81.111916][ T40] audit: type=1400 audit(1766892457.083:319): avc: denied { read write } for pid=6515 comm="syz.0.153" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.114649][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 81.124038][ T40] audit: type=1400 audit(1766892457.093:320): avc: denied { open } for pid=6515 comm="syz.0.153" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.136023][ T40] audit: type=1400 audit(1766892457.093:321): avc: denied { ioctl } for pid=6515 comm="syz.0.153" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.202882][ T5949] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 81.235039][ T40] audit: type=1400 audit(1766892457.213:322): avc: denied { create } for pid=6513 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.293217][ T6528] fuse: Bad value for 'fd' [ 81.311040][ T40] audit: type=1400 audit(1766892457.283:323): avc: denied { mounton } for pid=6531 comm="syz.0.158" path="/" dev="ramfs" ino=9134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 81.375822][ T40] audit: type=1400 audit(1766892457.353:324): avc: denied { execute } for pid=6536 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.383476][ T6537] program syz.3.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.388376][ T40] audit: type=1400 audit(1766892457.353:325): avc: denied { execute_no_trans } for pid=6536 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.404205][ T40] audit: type=1400 audit(1766892457.353:326): avc: denied { write } for pid=6535 comm="syz.3.159" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.431207][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 81.462111][ T6539] tmpfs: Bad value for 'mpol' [ 81.477699][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.483831][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.488543][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.494464][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.498680][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.556562][ T40] audit: type=1400 audit(1766892457.533:327): avc: denied { read } for pid=6548 comm="syz.3.164" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.612255][ T6556] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.621666][ T6556] CIFS mount error: No usable UNC path provided in device string! [ 81.621666][ T6556] [ 81.626206][ T6556] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.633134][ T6556] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 81.694670][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 81.703765][ T6010] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.713532][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.745508][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.747949][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.750422][ T6543] bridge_slave_0: entered allmulticast mode [ 81.766705][ T6543] bridge_slave_0: entered promiscuous mode [ 81.771045][ T6568] tipc: Enabled bearer , priority 0 [ 81.774800][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.777971][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.781091][ T6543] bridge_slave_1: entered allmulticast mode [ 81.785355][ T6543] bridge_slave_1: entered promiscuous mode [ 81.812481][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.820450][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.868925][ T6010] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.874538][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.881021][ T6543] team0: Port device team_slave_0 added [ 81.883869][ T6010] usb 5-1: Product: syz [ 81.885863][ T6010] usb 5-1: Manufacturer: syz [ 81.889196][ T6010] usb 5-1: SerialNumber: syz [ 81.905314][ T6010] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 81.938793][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.954634][ T55] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 81.966609][ T6543] team0: Port device team_slave_1 added [ 82.030343][ T6571] bond2 (unregistering): Released all slaves [ 82.046536][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.049435][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.058255][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.073539][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.083192][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.086291][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.098112][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.157288][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.182010][ T6543] hsr_slave_0: entered promiscuous mode [ 82.186911][ T6543] hsr_slave_1: entered promiscuous mode [ 82.190004][ T6543] debugfs: 'hsr0' already exists in 'hsr' [ 82.192573][ T6543] Cannot create hsr debugfs directory [ 82.237860][ T6010] usb 5-1: USB disconnect, device number 4 [ 82.271765][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.490045][ T1144] bridge_slave_1: left allmulticast mode [ 82.491900][ T6586] kAFS: unable to lookup cell '(,c¾ûL' [ 82.492700][ T1144] bridge_slave_1: left promiscuous mode [ 82.497529][ T6586] kAFS: unable to lookup cell '(,' [ 82.498597][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.509551][ T1144] bridge_slave_0: left allmulticast mode [ 82.511992][ T1144] bridge_slave_0: left promiscuous mode [ 82.515246][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.520243][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.808777][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.816950][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.822115][ T1144] bond0 (unregistering): Released all slaves [ 82.880271][ T6543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.890703][ T6543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.900452][ T6023] tipc: Node number set to 2247747154 [ 82.903958][ T6543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.910442][ T6543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.003392][ T55] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 83.006979][ T55] ath9k_htc: Failed to initialize the device [ 83.011443][ T6010] usb 5-1: ath9k_htc: USB layer deinitialized [ 83.032619][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.046387][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.054511][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.057947][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.083909][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.088078][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.197186][ T1144] hsr_slave_0: left promiscuous mode [ 83.200310][ T1144] hsr_slave_1: left promiscuous mode [ 83.203513][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.206788][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.211168][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.214884][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.230361][ T1144] veth1_macvtap: left promiscuous mode [ 83.232437][ T1144] veth0_macvtap: left promiscuous mode [ 83.234979][ T1144] veth1_vlan: left promiscuous mode [ 83.237200][ T1144] veth0_vlan: left promiscuous mode [ 83.554659][ T5949] Bluetooth: hci4: command tx timeout [ 83.589257][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 83.614601][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 83.805570][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.884657][ T6629] __nla_validate_parse: 1 callbacks suppressed [ 83.884671][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 83.889950][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 83.890781][ T6632] openvswitch: netlink: IP tunnel dst address not specified [ 83.912080][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.987997][ T6638] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.994409][ T6638] xt_l2tp: v2 tid > 0xffff: 2031748 [ 84.064982][ T6543] veth0_vlan: entered promiscuous mode [ 84.074602][ T6543] veth1_vlan: entered promiscuous mode [ 84.090758][ T6543] veth0_macvtap: entered promiscuous mode [ 84.098230][ T6543] veth1_macvtap: entered promiscuous mode [ 84.108403][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.116855][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.125289][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.128210][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.133114][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.136111][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238305][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.241617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.244021][ T1144] IPVS: stop unused estimator thread 0... [ 84.280318][ T6625] syz.3.181 (6625): drop_caches: 1 [ 84.284964][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.288344][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.327637][ T6625] syz.3.181 (6625): drop_caches: 1 [ 84.370949][ T6654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6654 comm=syz.4.161 [ 84.381930][ T6654] netlink: 57 bytes leftover after parsing attributes in process `syz.4.161'. [ 84.562401][ T6664] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.603177][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.683023][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 84.843141][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 84.850857][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.856681][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.861269][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.865212][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.870434][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.876253][ T29] usb 7-1: config 0 descriptor?? [ 85.295755][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 85.299022][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 85.302704][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 85.306121][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 85.309231][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 85.314259][ T29] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 85.380477][ T6023] IPVS: starting estimator thread 0... [ 85.382989][ T6696] IPVS: set_ctl: invalid protocol: 44 42.1.1.1:19997 [ 85.421018][ T6701] netlink: 'syz.4.203': attribute type 12 has an invalid length. [ 85.447442][ T6703] netlink: 'syz.3.204': attribute type 12 has an invalid length. [ 85.485416][ T6697] IPVS: using max 45 ests per chain, 108000 per kthread [ 85.495341][ T6705] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 85.499091][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 85.517020][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 85.521546][ T6705] netlink: 3 bytes leftover after parsing attributes in process `syz.4.205'. [ 85.637029][ T5949] Bluetooth: hci4: command tx timeout [ 85.640598][ T55] usb 7-1: USB disconnect, device number 9 [ 85.644805][ T6660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.664622][ T6718] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 85.825114][ T5949] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 85.829952][ T5949] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 85.830037][ T6733] netlink: 'syz.3.212': attribute type 12 has an invalid length. [ 85.844902][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 85.861895][ T5949] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 85.861998][ T5949] Bluetooth: hci1: Malformed LE Event: 0x02 [ 85.878492][ T1143] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.886301][ T6733] netlink: 'syz.3.212': attribute type 12 has an invalid length. [ 85.889482][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.889976][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 85.896924][ T1143] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.896977][ T1143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.897006][ T1143] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.917569][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'. [ 85.921106][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 85.921117][ T40] audit: type=1400 audit(1766892461.893:369): avc: denied { setopt } for pid=6740 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.921607][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'. [ 85.951917][ T6743] gretap0: entered promiscuous mode [ 85.958666][ T6743] gretap0: left promiscuous mode [ 85.984235][ T40] audit: type=1400 audit(1766892461.963:370): avc: denied { read } for pid=6746 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.005726][ T6749] gretap0: entered promiscuous mode [ 86.009509][ T6749] gretap0: left promiscuous mode [ 86.103857][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.203071][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.256533][ T40] audit: type=1400 audit(1766892462.233:371): avc: denied { write } for pid=6761 comm="syz.3.223" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.256553][ T6762] random: crng reseeded on system resumption [ 86.267254][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 86.269739][ T40] audit: type=1400 audit(1766892462.233:372): avc: denied { ioctl } for pid=6761 comm="syz.3.223" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.276922][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.283591][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.287305][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.297627][ T10] usb 5-1: config 0 descriptor?? [ 86.333307][ T24] usb 7-1: device descriptor read/64, error -71 [ 86.344914][ T6769] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 86.348586][ T6769] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 86.355538][ T6769] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 86.360015][ T6769] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 86.526063][ T6777] binder: 6776:6777 ioctl 40046205 0 returned -22 [ 86.529756][ T6777] binder: 6776:6777 ioctl c0306201 200000000300 returned -11 [ 86.573066][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.614658][ T40] audit: type=1400 audit(1766892462.593:373): avc: denied { execute } for pid=6781 comm="syz.3.231" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.679386][ T40] audit: type=1400 audit(1766892462.653:374): avc: denied { ioctl } for pid=6783 comm="syz.3.232" path="socket:[14597]" dev="sockfs" ino=14597 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.703150][ T24] usb 7-1: device descriptor read/64, error -71 [ 86.716985][ T10] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 86.735893][ T6786] pimreg: entered allmulticast mode [ 86.750873][ T40] audit: type=1400 audit(1766892462.723:375): avc: denied { mounton } for pid=6787 comm="syz.3.234" path="/54/file0" dev="9p" ino=71827615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.762590][ T40] audit: type=1400 audit(1766892462.733:376): avc: denied { getattr } for pid=6787 comm="syz.3.234" name="/" dev="9p" ino=71827615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.773375][ T40] audit: type=1400 audit(1766892462.733:377): avc: denied { mount } for pid=6787 comm="syz.3.234" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.824635][ T24] usb usb7-port1: attempt power cycle [ 86.829492][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.833737][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.856961][ T6791] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 86.859995][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.864037][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 86.870081][ T1144] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.875696][ T6792] vhci_hcd: connection closed [ 86.877410][ T46] vhci_hcd vhci_hcd.4: stop threads [ 86.881793][ T46] vhci_hcd vhci_hcd.4: release socket [ 86.884342][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 86.903388][ T40] audit: type=1400 audit(1766892462.883:378): avc: denied { read } for pid=6794 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.918890][ T55] usb 5-1: USB disconnect, device number 5 [ 87.043272][ T6801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=6801 comm=syz.3.238 [ 87.163063][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 87.184163][ T24] usb 7-1: device descriptor read/8, error -71 [ 87.197596][ T5949] Bluetooth: hci3: unexpected event for opcode 0x041c [ 87.383771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.433102][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 87.465414][ T24] usb 7-1: device descriptor read/8, error -71 [ 87.548652][ T6825] IPv6: addrconf: prefix option has invalid lifetime [ 87.560586][ T6822] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 87.573644][ T24] usb usb7-port1: unable to enumerate USB device [ 87.724434][ T5949] Bluetooth: hci4: command tx timeout [ 88.029025][ T6855] overlayfs: missing 'lowerdir' [ 88.102309][ T6857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.196275][ T6864] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 88.240178][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.274004][ T6864] bond1: (slave veth3): Enslaving as an active interface with a down link [ 88.292618][ T6864] ISOFS: Unable to identify CD-ROM format. [ 88.301045][ T6864] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 88.304673][ T6864] dummy0: entered promiscuous mode [ 88.613129][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.774261][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.778153][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.781553][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.785100][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.792161][ T6871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.802744][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.907063][ T6879] ip6gre1: entered promiscuous mode [ 88.909008][ T6879] ip6gre1: entered allmulticast mode [ 88.959254][ T6881] lo speed is unknown, defaulting to 1000 [ 88.961362][ T6881] lo speed is unknown, defaulting to 1000 [ 88.966769][ T6881] lo speed is unknown, defaulting to 1000 [ 88.971690][ T6881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.986980][ T6881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.014783][ T6881] lo speed is unknown, defaulting to 1000 [ 89.015759][ T24] usb 5-1: USB disconnect, device number 6 [ 89.037079][ T6887] trusted_key: encrypted_key: insufficient parameters specified [ 89.043403][ T6881] lo speed is unknown, defaulting to 1000 [ 89.046844][ T6887] tmpfs: Bad value for 'mpol' [ 89.069727][ T6881] lo speed is unknown, defaulting to 1000 [ 89.076819][ T6881] lo speed is unknown, defaulting to 1000 [ 89.111808][ T6890] __nla_validate_parse: 10 callbacks suppressed [ 89.111825][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 89.195492][ T6894] netlink: 'syz.3.269': attribute type 322 has an invalid length. [ 89.202589][ T6894] netlink: 'syz.3.269': attribute type 12 has an invalid length. [ 89.285999][ T6902] /dev/sg0: Can't lookup blockdev [ 89.315859][ T6909] netlink: 72 bytes leftover after parsing attributes in process `syz.3.273'. [ 89.368927][ T6912] Illegal XDP return value 4294967274 on prog (id 37) dev syz_tun, expect packet loss! [ 89.718211][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.721929][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.725866][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.729561][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.733409][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.743698][ T55] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 89.790539][ T6928] fido_id[6928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.796561][ T5949] Bluetooth: hci4: command tx timeout [ 89.837314][ T6931] cgroup: No subsys list or none specified [ 89.936665][ T6933] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 90.338192][ T6963] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 90.342258][ T6963] SELinux: failed to load policy [ 91.041671][ T6961] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.046002][ T6961] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.048838][ T6961] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.051544][ T6961] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.055745][ T6961] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.180000][ T6994] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 91.351811][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 91.351824][ T40] audit: type=1400 audit(1766892467.323:417): avc: denied { ioctl } for pid=7011 comm="syz.2.299" path="socket:[14318]" dev="sockfs" ino=14318 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.512156][ T7028] xt_nat: multiple ranges no longer supported [ 91.519736][ T7022] bond1: Removing last arp target with arp_interval on [ 91.561340][ T40] audit: type=1400 audit(1766892467.533:418): avc: denied { listen } for pid=7031 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.594600][ T40] audit: type=1400 audit(1766892467.573:419): avc: denied { ioctl } for pid=7040 comm="syz.4.313" path="socket:[13289]" dev="sockfs" ino=13289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.595382][ T7039] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.312'. [ 91.616076][ T40] audit: type=1400 audit(1766892467.583:420): avc: denied { connect } for pid=7038 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.622761][ T40] audit: type=1400 audit(1766892467.583:421): avc: denied { bind } for pid=7038 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.630560][ T40] audit: type=1400 audit(1766892467.583:422): avc: denied { read } for pid=7038 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.657315][ T7051] syz.4.316 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.669688][ T40] audit: type=1400 audit(1766892467.593:423): avc: denied { checkpoint_restore } for pid=7041 comm="syz.2.314" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.678281][ T40] audit: type=1400 audit(1766892467.623:424): avc: denied { accept } for pid=7047 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.685599][ T40] audit: type=1400 audit(1766892467.643:425): avc: denied { write } for pid=7038 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.717151][ T981] cfg80211: failed to load regulatory.db [ 91.732645][ T7057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.317'. [ 91.942171][ T40] audit: type=1400 audit(1766892467.913:426): avc: denied { watch watch_reads } for pid=7060 comm="syz.3.319" path="/81" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.956985][ T7061] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 91.974686][ T7061] bond1: entered promiscuous mode [ 91.977480][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.996496][ T7061] bond1: (slave bridge1): making interface the new active one [ 91.999991][ T7061] bridge1: entered promiscuous mode [ 92.004036][ T7061] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 92.011711][ T5949] Bluetooth: hci3: SCO packet too small [ 92.041283][ T7061] can: request_module (can-proto-3) failed. [ 92.278193][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 92.334616][ T7069] input: syz1 as /devices/virtual/input/input11 [ 92.431681][ T7075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.324'. [ 92.433465][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.813011][ T6027] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 92.964519][ T6027] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.967874][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.970949][ T6027] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.974175][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.978234][ T6027] usb 8-1: config 0 descriptor?? [ 92.981748][ T6027] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 92.993611][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 93.016463][ T6027] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.021691][ T6027] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.026714][ T6027] usb 8-1: media controller created [ 93.031421][ T6027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.041871][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 93.045357][ T6027] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.051256][ T6027] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input12 [ 93.060798][ T6027] dvb-usb: schedule remote query interval to 150 msecs. [ 93.064278][ T6027] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.074163][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.074232][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.235372][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 93.238061][ T6027] dvb-usb: error while querying for an remote control event. [ 93.242747][ T6023] usb 8-1: USB disconnect, device number 3 [ 93.251568][ T7091] dvb-usb: bulk message failed: -22 (2/0) [ 93.544894][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 93.549520][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 93.554088][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 93.569415][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 93.776167][ T6023] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.874423][ T7148] netlink: 'syz.0.344': attribute type 7 has an invalid length. [ 93.877081][ T7148] netlink: 'syz.0.344': attribute type 8 has an invalid length. [ 94.523056][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.599964][ T7203] loop5: detected capacity change from 0 to 7 [ 94.770321][ T7214] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 94.774113][ T7214] __nla_validate_parse: 64 callbacks suppressed [ 94.774126][ T7214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.356'. [ 94.780824][ T7214] team0: entered promiscuous mode [ 94.783221][ T7214] team_slave_0: entered promiscuous mode [ 94.786109][ T7214] team_slave_1: entered promiscuous mode [ 94.788906][ T7214] bridge0: port 3(team0) entered blocking state [ 94.791349][ T7214] bridge0: port 3(team0) entered disabled state [ 94.793845][ T7214] team0: entered allmulticast mode [ 94.796202][ T7214] team_slave_0: entered allmulticast mode [ 94.798275][ T7214] team_slave_1: entered allmulticast mode [ 94.801553][ T7214] bridge0: port 3(team0) entered blocking state [ 94.803820][ T7214] bridge0: port 3(team0) entered forwarding state [ 94.844501][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 94.851130][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 94.890478][ T7223] loop4: detected capacity change from 0 to 2560 [ 94.893525][ T7224] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 94.899525][ T6278] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.902510][ T6278] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.905929][ T6278] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.908737][ T6278] Buffer I/O error on dev loop4, logical block 0, async page read [ 94.911562][ T6278] Buffer I/O error on dev loop4, logical block 0, async page read [ 95.153226][ T5949] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.213157][ T6021] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.385952][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.389726][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.393261][ T6021] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 95.396494][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.401549][ T6021] usb 5-1: config 0 descriptor?? [ 95.514166][ T7234] binder_alloc: binder_alloc_mmap_handler: 7232 200000ffe000-200000fff000 already mapped failed -16 [ 95.604154][ T7240] binder: 7239:7240 ioctl 40046210 0 returned -14 [ 95.679090][ T6023] IPVS: starting estimator thread 0... [ 95.686083][ T5949] Bluetooth: hci1: unexpected event for opcode 0x0006 [ 95.773191][ T7244] IPVS: using max 23 ests per chain, 55200 per kthread [ 95.812855][ T6021] hid_parser_main: 27 callbacks suppressed [ 95.812877][ T6021] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 95.819977][ T6021] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 95.829389][ T6021] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0005/input/input13 [ 95.861922][ T6021] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 95.895886][ T7251] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 95.951564][ T7260] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 96.046307][ T6026] usb 5-1: USB disconnect, device number 7 [ 96.072488][ T7266] NILFS (nullb0): couldn't find nilfs on the device [ 96.168083][ T7270] netlink: 68 bytes leftover after parsing attributes in process `syz.2.374'. [ 96.424175][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 96.424190][ T40] audit: type=1400 audit(1766892472.403:444): avc: denied { setopt } for pid=7278 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.498507][ T7281] netlink: 112 bytes leftover after parsing attributes in process `syz.2.378'. [ 96.501645][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 96.528651][ T6021] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.538369][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 96.713296][ T6021] usb 8-1: Using ep0 maxpacket: 8 [ 96.723784][ T6021] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.728343][ T6021] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.732843][ T6021] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.737984][ T6021] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.744798][ T6021] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.748775][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.958443][ T6021] usb 8-1: GET_CAPABILITIES returned 0 [ 96.960372][ T6021] usbtmc 8-1:16.0: can't read capabilities [ 97.163853][ T6026] usb 8-1: USB disconnect, device number 4 [ 97.233108][ T5949] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.481720][ T7298] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 97.503058][ T7298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.513758][ T7298] bond2: (slave erspan1): making interface the new active one [ 97.517642][ T7298] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 97.827077][ T7319] vlan2: entered promiscuous mode [ 97.829046][ T7319] vlan2: entered allmulticast mode [ 97.830963][ T7319] hsr_slave_1: entered allmulticast mode [ 97.901289][ T7321] cgroup: No subsys list or none specified [ 97.907634][ T7321] cgroup: No subsys list or none specified [ 97.951269][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 97.955453][ T7325] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.052196][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 98.064447][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 98.068467][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.072596][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.077107][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.081168][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.344649][ T40] audit: type=1400 audit(1766892474.323:445): avc: denied { name_bind } for pid=7341 comm="syz.4.397" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 98.407478][ T40] audit: type=1400 audit(1766892474.383:446): avc: denied { setopt } for pid=7343 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.446364][ T7351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7351 comm=syz.2.401 [ 98.465139][ T7354] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 98.522852][ T7357] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 98.586476][ C2] ------------[ cut here ]------------ [ 98.589351][ C2] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#2: swapper/2/0 [ 98.594043][ C2] Modules linked in: [ 98.596396][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.597471][ T7363] random: crng reseeded on system resumption [ 98.601088][ C2] Tainted: [L]=SOFTLOCKUP [ 98.604645][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.608256][ C2] RIP: 0010:subflow_data_ready+0x40b/0x790 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.610236][ C2] Code: 89 ee e8 e8 32 5b f6 40 84 ed 75 21 e8 9e 38 5b f6 44 89 fe bf 07 00 00 00 e8 31 33 5b f6 41 83 ff 07 74 09 e8 86 38 5b f6 90 <0f> 0b 90 e8 7d 38 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 98.617286][ C2] RSP: 0018:ffffc900006484c8 EFLAGS: 00010246 [ 98.617300][ C2] RAX: 0000000000000000 RBX: ffff88802d684240 RCX: ffffffff8b63ae2f [ 98.617308][ C2] RDX: ffff88801decc980 RSI: ffffffff8b63ae3a RDI: 0000000000000005 [ 98.617314][ C2] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 98.617320][ C2] R10: 0000000000000004 R11: ffff88801decd4b0 R12: ffff88803a190c80 [ 98.617326][ C2] R13: 1ffff920000c9099 R14: ffff888033928800 R15: 0000000000000004 [ 98.617333][ C2] FS: 0000000000000000(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 98.617356][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.617365][ C2] CR2: 00007ffcb2e46fc0 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 98.617371][ C2] Call Trace: [ 98.617376][ C2] [ 98.617381][ C2] ? __pfx_subflow_data_ready+0x10/0x10 [ 98.617399][ C2] ? tcp_data_ecn_check+0x54/0x740 [ 98.617414][ C2] tcp_data_ready+0x114/0x5a0 [ 98.617431][ C2] tcp_data_queue+0x1ac2/0x4ff0 [ 98.617450][ C2] ? tcp_urg+0x10f/0xb80 [ 98.650933][ C2] ? __pfx_tcp_data_queue+0x10/0x10 [ 98.652667][ C2] ? tcp_try_undo_loss+0x7f0/0x860 [ 98.654378][ C2] tcp_rcv_state_process+0xfb6/0x6540 [ 98.656153][ C2] ? inet6_ehashfn+0x87/0x4f0 [ 98.657733][ C2] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 98.659627][ C2] ? __lock_acquire+0x436/0x2890 [ 98.661252][ C2] ? sk_filter_trim_cap+0x11a/0xde0 [ 98.663016][ C2] ? lock_acquire+0x179/0x330 [ 98.664561][ C2] ? tcp_v6_do_rcv+0x7b8/0x1dc0 [ 98.666134][ C2] tcp_v6_do_rcv+0x7b8/0x1dc0 [ 98.667777][ C2] tcp_v6_rcv+0x2ab5/0x48f0 [ 98.669292][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 98.670897][ C2] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 98.672820][ C2] ? __pfx_raw6_local_deliver+0x10/0x10 [ 98.674709][ C2] ? find_held_lock+0x2b/0x80 [ 98.676543][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 98.678196][ C2] ip6_protocol_deliver_rcu+0x188/0x1520 [ 98.681162][ C2] ip6_input_finish+0x1e4/0x4b0 [ 98.682786][ C2] ip6_input+0x105/0x2f0 [ 98.684258][ C2] ipv6_rcv+0x264/0x650 [ 98.685688][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 98.687248][ C2] __netif_receive_skb_one_core+0x12d/0x1e0 [ 98.689257][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 98.691370][ C2] ? lock_acquire+0x179/0x330 [ 98.693017][ C2] ? process_backlog+0x450/0x1650 [ 98.694731][ C2] __netif_receive_skb+0x1d/0x160 [ 98.696412][ C2] process_backlog+0x4a2/0x1650 [ 98.698062][ C2] __napi_poll.constprop.0+0xb3/0x540 [ 98.699849][ C2] net_rx_action+0x9f9/0xfa0 [ 98.701412][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 98.703187][ C2] handle_softirqs+0x219/0x950 [ 98.704807][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 98.706599][ C2] __irq_exit_rcu+0x109/0x170 [ 98.708169][ C2] irq_exit_rcu+0x9/0x30 [ 98.709595][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 98.711499][ C2] [ 98.712510][ C2] [ 98.713546][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.715487][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 98.717337][ C2] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 98.723557][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000286 [ 98.725535][ C2] RAX: 0000000000097673 RBX: 0000000000000002 RCX: ffffffff8b7826d9 [ 98.728136][ C2] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 98.730726][ C2] RBP: ffffed1003bd9930 R08: 0000000000000001 R09: ffffed100d4c673d [ 98.733375][ C2] R10: ffff88806a6339eb R11: ffff88801decd4b0 R12: 0000000000000002 [ 98.735962][ C2] R13: ffff88801decc980 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 98.738583][ C2] ? ct_kernel_exit+0x139/0x190 [ 98.740211][ C2] default_idle+0x13/0x20 [ 98.741667][ C2] default_idle_call+0x6c/0xb0 [ 98.743296][ C2] do_idle+0x38d/0x510 [ 98.744688][ C2] ? __pfx_do_idle+0x10/0x10 [ 98.746245][ C2] ? do_idle+0x2e2/0x510 [ 98.747764][ C2] cpu_startup_entry+0x4f/0x60 [ 98.749373][ C2] start_secondary+0x21d/0x2d0 [ 98.750966][ C2] ? __pfx_start_secondary+0x10/0x10 [ 98.752727][ C2] common_startup_64+0x13e/0x148 [ 98.754414][ C2] [ 98.755456][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.757868][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.761279][ C2] Tainted: [L]=SOFTLOCKUP [ 98.762710][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.766204][ C2] Call Trace: [ 98.767329][ C2] [ 98.768345][ C2] dump_stack_lvl+0x3d/0x1f0 [ 98.769887][ C2] vpanic+0x640/0x6f0 [ 98.771225][ C2] ? subflow_data_ready+0x40b/0x790 [ 98.772954][ C2] panic+0xca/0xd0 [ 98.774210][ C2] ? __pfx_panic+0x10/0x10 [ 98.775698][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 98.777376][ C2] check_panic_on_warn+0xab/0xb0 [ 98.779052][ C2] __warn+0x108/0x3c0 [ 98.780402][ C2] __report_bug+0x2a0/0x520 [ 98.781916][ C2] ? subflow_data_ready+0x40b/0x790 [ 98.783639][ C2] ? __pfx___report_bug+0x10/0x10 [ 98.785323][ C2] ? __lock_acquire+0x436/0x2890 [ 98.786970][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.788965][ C2] ? mptcp_get_options+0x19c/0x2c50 [ 98.790694][ C2] ? __pfx_tcp_ack_update_rtt+0x10/0x10 [ 98.792527][ C2] ? subflow_data_ready+0x40b/0x790 [ 98.794241][ C2] report_bug+0xb2/0x220 [ 98.795660][ C2] ? subflow_data_ready+0x40b/0x790 [ 98.797395][ C2] handle_bug+0x127/0x260 [ 98.798870][ C2] exc_invalid_op+0x17/0x50 [ 98.800396][ C2] asm_exc_invalid_op+0x1a/0x20 [ 98.802026][ C2] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 98.803962][ C2] Code: 89 ee e8 e8 32 5b f6 40 84 ed 75 21 e8 9e 38 5b f6 44 89 fe bf 07 00 00 00 e8 31 33 5b f6 41 83 ff 07 74 09 e8 86 38 5b f6 90 <0f> 0b 90 e8 7d 38 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 98.810247][ C2] RSP: 0018:ffffc900006484c8 EFLAGS: 00010246 [ 98.812261][ C2] RAX: 0000000000000000 RBX: ffff88802d684240 RCX: ffffffff8b63ae2f [ 98.814840][ C2] RDX: ffff88801decc980 RSI: ffffffff8b63ae3a RDI: 0000000000000005 [ 98.817426][ C2] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 98.820041][ C2] R10: 0000000000000004 R11: ffff88801decd4b0 R12: ffff88803a190c80 [ 98.822603][ C2] R13: 1ffff920000c9099 R14: ffff888033928800 R15: 0000000000000004 [ 98.825206][ C2] ? subflow_data_ready+0x3ff/0x790 [ 98.826930][ C2] ? subflow_data_ready+0x40a/0x790 [ 98.828665][ C2] ? subflow_data_ready+0x40a/0x790 [ 98.830380][ C2] ? __pfx_subflow_data_ready+0x10/0x10 [ 98.832205][ C2] ? tcp_data_ecn_check+0x54/0x740 [ 98.833928][ C2] tcp_data_ready+0x114/0x5a0 [ 98.835499][ C2] tcp_data_queue+0x1ac2/0x4ff0 [ 98.837138][ C2] ? tcp_urg+0x10f/0xb80 [ 98.838592][ C2] ? __pfx_tcp_data_queue+0x10/0x10 [ 98.840318][ C2] ? tcp_try_undo_loss+0x7f0/0x860 [ 98.842020][ C2] tcp_rcv_state_process+0xfb6/0x6540 [ 98.843783][ C2] ? inet6_ehashfn+0x87/0x4f0 [ 98.845366][ C2] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 98.847299][ C2] ? __lock_acquire+0x436/0x2890 [ 98.849011][ C2] ? sk_filter_trim_cap+0x11a/0xde0 [ 98.850786][ C2] ? lock_acquire+0x179/0x330 [ 98.852363][ C2] ? tcp_v6_do_rcv+0x7b8/0x1dc0 [ 98.853920][ C2] tcp_v6_do_rcv+0x7b8/0x1dc0 [ 98.855441][ C2] tcp_v6_rcv+0x2ab5/0x48f0 [ 98.856933][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 98.858553][ C2] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 98.860454][ C2] ? __pfx_raw6_local_deliver+0x10/0x10 [ 98.862288][ C2] ? find_held_lock+0x2b/0x80 [ 98.863861][ C2] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 98.865511][ C2] ip6_protocol_deliver_rcu+0x188/0x1520 [ 98.867355][ C2] ip6_input_finish+0x1e4/0x4b0 [ 98.868987][ C2] ip6_input+0x105/0x2f0 [ 98.870393][ C2] ipv6_rcv+0x264/0x650 [ 98.871774][ C2] ? __pfx_ipv6_rcv+0x10/0x10 [ 98.873340][ C2] __netif_receive_skb_one_core+0x12d/0x1e0 [ 98.875299][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 98.877407][ C2] ? lock_acquire+0x179/0x330 [ 98.879008][ C2] ? process_backlog+0x450/0x1650 [ 98.880688][ C2] __netif_receive_skb+0x1d/0x160 [ 98.882359][ C2] process_backlog+0x4a2/0x1650 [ 98.883992][ C2] __napi_poll.constprop.0+0xb3/0x540 [ 98.885794][ C2] net_rx_action+0x9f9/0xfa0 [ 98.887346][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 98.889090][ C2] handle_softirqs+0x219/0x950 [ 98.890691][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 98.892462][ C2] __irq_exit_rcu+0x109/0x170 [ 98.894032][ C2] irq_exit_rcu+0x9/0x30 [ 98.895454][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 98.897316][ C2] [ 98.898362][ C2] [ 98.899364][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.901365][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 98.903223][ C2] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 98.909481][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000286 [ 98.911486][ C2] RAX: 0000000000097673 RBX: 0000000000000002 RCX: ffffffff8b7826d9 [ 98.914083][ C2] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 98.916685][ C2] RBP: ffffed1003bd9930 R08: 0000000000000001 R09: ffffed100d4c673d [ 98.919299][ C2] R10: ffff88806a6339eb R11: ffff88801decd4b0 R12: 0000000000000002 [ 98.921896][ C2] R13: ffff88801decc980 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 98.924509][ C2] ? ct_kernel_exit+0x139/0x190 [ 98.926131][ C2] default_idle+0x13/0x20 [ 98.927602][ C2] default_idle_call+0x6c/0xb0 [ 98.929208][ C2] do_idle+0x38d/0x510 [ 98.930580][ C2] ? __pfx_do_idle+0x10/0x10 [ 98.932125][ C2] ? do_idle+0x2e2/0x510 [ 98.933552][ C2] cpu_startup_entry+0x4f/0x60 [ 98.935144][ C2] start_secondary+0x21d/0x2d0 [ 98.936776][ C2] ? __pfx_start_secondary+0x10/0x10 [ 98.938543][ C2] common_startup_64+0x13e/0x148 [ 98.940197][ C2] [ 98.942005][ C2] Kernel Offset: disabled [ 98.943449][ C2] Rebooting in 86400 seconds..