last executing test programs: 3.650579438s ago: executing program 1 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x5839, 0x8, 0xa, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x76, 0x1, 0x100, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="5000002cf500"/18, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c", @ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca25c81}, 0x24008041) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) socket$kcm(0x29, 0x5, 0x0) write$tun(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="080000fa", @ANYRES8=0x0], 0xdc) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2841) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) 3.230808441s ago: executing program 1 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326b57000fddbdf250faddea990b36f086a6e015552f830a90000000c0003800800010006000000040009800c000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xe6070900) r3 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f00000014c0)=ANY=[@ANYRES32=r2, @ANYRES8=r3, @ANYBLOB="3333998b1d37ede1c2c9f236d922c1444b4affda7430ee65d9210376643fa3a052c9263f1e68a5189d8ec6b43e09e41ca8614e41384067ba4783bbf0db26c4e2fdfea0708fe260fced714c0c3b72597f57871f8b22580557bff91329983b44cf79e5c67bee2864ac601d375a4f6a1ffa53b8d611a659a5927d9cd5d196dc90e594364f7b73"], 0xa) r4 = socket$kcm(0x29, 0x7, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fb00) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) read(r5, &(0x7f00000004c0)=""/4096, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r7 = open(&(0x7f0000000280)='./file0\x00', 0x101200, 0x43) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x400, 0x1) r8 = open(&(0x7f00000005c0)='./file1\x00', 0x20000, 0x718bb647156ec2f6) chdir(&(0x7f0000000000)='./bus\x00') linkat(r7, &(0x7f0000000540)='./file0/file0\x00', r8, &(0x7f0000000500)='./file0/file0\x00', 0x1000) open(&(0x7f0000000140)='./file1\x00', 0x10000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 3.226425766s ago: executing program 1 (id=428): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x4000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20024090) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000002c0)={0x0, 0xfff, 0x6, 0xe, 0xfa, "0e3155b1a6d9902da7591082f7714f7a749a2c", 0x7, 0x8}) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, 0x1402, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c880}, 0x8914) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000280)={0x18}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) remap_file_pages(&(0x7f0000bdf000/0x2000)=nil, 0x2000, 0x2000000, 0x4, 0x3) 3.146406813s ago: executing program 1 (id=431): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 3.049838993s ago: executing program 1 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x10) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDGKBMODE(r3, 0x4b44, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f00000008c0)={[0xfffffffffffffffe]}, 0x0, 0x800) (async) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000004c0), &(0x7f0000000500)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x248, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit3={{0x158}, {'lo\x00', {0x1, 0x1, 0x84, 0x800, 0x165, 0x13, 0x5, 0x3ff, 0x80, 0x8}, {0xfffffffffffffff3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x101, 0x8, 0x3, 0xb1, 'syz0\x00', {0x105}}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x44, 0xb2}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x29, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 64) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (rerun: 64) 2.188739333s ago: executing program 1 (id=445): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000016c0)={0x1c, &(0x7f0000001140)={0x20, 0x8}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r3 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001600)={{r4, 0x4, 0x9, 0xffffffffffffff81, 0xd53, 0x10000, 0x17da00000, 0x7, 0x1, 0x2, 0xfffffffa, 0x7fffffff, 0x2, 0x7, 0x3}}) r5 = socket$inet6(0xa, 0x80003, 0xfb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xfffffffd, 0x1, 0x1, 0x0, 0x4, 0x1005}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xc8, "56b0ca946260846e32590cc3a9c4d143f52733d3abd44eda950b389c6eb3f47a91c6bbd4e7aba5d17e7c8123db94b48a3e6a0255040036b332bb0600188d102fe25e81095ac2ef23e797f451d958c788c6ac8280aa469ea89d3dc88076140807d2e57da9f368145f3a764159a1fb96cb287b3bf0d4b6ca1641bfb476826c397deb366f50525c576bba9911296219e61e72d3a212c302cfb46b75213f20f6281a0a8d79c1dc8493b3d035ffe6021acf956a5647d45b323e07bf1400"/200}, &(0x7f00000001c0)=0xd0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r6}, &(0x7f00000002c0)=0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r7, &(0x7f0000000500)=""/166, 0x16) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0x599f, 0x7, 0x1b4, 0xb}, 0x8) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x32240, 0x0) lseek(r8, 0x81, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000100)) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x30000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x3, 0xe99, 0x0, 'queue1\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080086454440a75018f22672a0cdb0b74e450000380000000000019078ac1edd00ac1414aa030490781200183f2500000000000000000100007f"], 0x0) 1.779536438s ago: executing program 3 (id=457): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000004280)=""/4087, &(0x7f00000001c0)=0xff7) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x0, 0xd, 0x72, {0x72, 0xa, "6b582a65269fce712c455b5854e867c1c2323f4410b9c04e64659e0ab60e7397dad8c088a5eff5855fef0a894aab9eb807d505efcdc0a15500ac982928b12845f1890f24a6d088f1e40efc1ff71f3fb5aefb0c6e8a8d4750bbc6d7e2046a82db70ba408b368123ffa879a5d632ef2e84"}}, &(0x7f0000000200)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "4159bad27f0567176ea5b0bfd3b55a2dd7a87c2ea3792e5d9bafee4a03eb73eb434ab53a52e1d00af1ecb8c0d8a1f86fdd9c3300f87f018b04efb0eb0aaf18b68821213ff2c3522a86ee"}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000300)={0x0, 0xf, 0x7d, "4d04cf07cb17d54546369899baa9e1e2053adc81e300a540dcc6e0e447ba68279b1dad6b660f2e8048cb5d69c2342113c78e4ceb938470a6477453ac3e1477a7201bc9835fa813b4f6efa1c430fb1078d00583625a55bb42bee50f0515242f26affc8379ad0c0401a864774c4bbab95a32c70ed8b67ea57505e7eef3f6"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c80)}) (async, rerun: 32) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 32) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000004c0)={0x6ac, &(0x7f0000000400)="29d03bdbfd1f516fa47b4a5109d64b7eb5823277435e2b65709c0e9fd1de3ba84d5987936451b5e26b05c13c72750f1bfa65cdc13821671b897bb428a471bbb4eff2c6f08b4714d3d6701cf552d088f29a6cbba70611e358b1a314efbed7c544948e6863c50d4e767c5e3423da1b5346ad43ac45c46e57fdb7c507020d55ad6a10cea5237cd73cff4761f6454cbbf0351f"}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x2416, 0x0, 0xb, &(0x7f0000000080)="18aff476ef7ba6e1c53eb6"}], 0x1}) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.511535491s ago: executing program 0 (id=459): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') read$FUSE(r0, 0x0, 0xa00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0xffffffffffffff07, 0x15, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2005}]}, 0x20}}, 0x4004004) 1.511245128s ago: executing program 0 (id=460): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000006380)=ANY=[@ANYBLOB="18000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.450195393s ago: executing program 0 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f00000020c0)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c69dacbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0xfffffffffffffffd, {0x7, 0x29, 0x80000000, 0xdb0078e61eb24fff, 0x5, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.221477985s ago: executing program 3 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d85b0fe, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 1.148773989s ago: executing program 3 (id=463): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x34, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 851.51711ms ago: executing program 2 (id=465): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7c]}, 0x8, 0x80800) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) (async, rerun: 32) readv(r0, &(0x7f0000002240)=[{&(0x7f0000002200)=""/58, 0x3a}], 0x1) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x304, 0x22eb, 0x6, 0x4, 0x3, @broadcast, "ab7309fd", @broadcast, "785321db"}}}}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_io_uring_setup(0x4ec9, &(0x7f0000000140)={0x0, 0xd210, 0x20, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 779.83573ms ago: executing program 2 (id=466): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000580)={0x0, 0x3, 0x461}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa23dc1c0a684e8c399a7a65692ebbbbbbbbbbbb86dd6024215700102101fc0000000000000000000000000000017e8000000000000000000000000000bb4e214e200401907894812a4fc6c456c7b8f1067643ddda3c36767a7c1844cfad7fba8872437433b180e665779ad9e21e4f43f750caadc00e22c3b5826b7a8b35d039e31bee706083d570dfa2"], 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000fdffffff000200000009000200730004310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x0) signalfd4(r4, &(0x7f0000000100)={[0x3]}, 0x8, 0x80800) (async) fanotify_init(0x60, 0x0) (async) socket(0x29, 0x803, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) 778.067346ms ago: executing program 2 (id=467): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd70004000000802000000000000000100010008001a"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x3) 701.67729ms ago: executing program 2 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x1) (async) r3 = socket(0x10, 0x803, 0x1) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 290.582307ms ago: executing program 3 (id=469): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0x9f0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x2, 0x5}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000080)=[{0x4bce, 0x5, 0x419fb77c, 0x8}, {0x4, 0x10000, 0x2f, 0x100000001}, {0x7, 0x7, 0x0, 0x3}, {0x6, 0x8, 0xce49, 0x8}], 0x4, 0x20, 0xf000, 0x800}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="eb1a6a76ed78a591c700485565d63dc4daaca9317bd61181bb863b94f5dcf039b956fa5ff06bedad58b5268c7379da52467bdf08aafd03a495b9cf486f7bd8ca787a5c741b41bde799c566e62573ef87a163dedf605acddeaa01fa5a5a8134f7db222bef0d6f95cbfbbcbf879179b1659b3322bef3f00877d3ced900d5281782cea2b98088221059f462a34479874a3ac7dfcb0e71d7334a8518e737bdf1e7b60acd83911186e92ed7db5ca8eaa7a0cf39f9095f6eb5", 0xb6) 230.010417ms ago: executing program 3 (id=470): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x1, {{0x2, 0x4e24, @private=0xa010100}}}, 0x88) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c61000000000c0005800500210000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) fcntl$lock(r0, 0x25, &(0x7f00000002c0)={0x1, 0x3, 0xffffffffffffffff, 0x66, r5}) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x10, 0x800, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast2, @multicast2}}}}) syz_clone(0x2180, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) 160.950257ms ago: executing program 0 (id=471): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mkdir(&(0x7f0000000180)='./bus\x00', 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02200100ca340300140003006e657464657673696d30000000000000300016802c00018028000100"], 0x64}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x6d0, 0x158, 0x3c8, 0xffffffff, 0x3c8, 0x600, 0x600, 0x600, 0xffffffff, 0x600, 0x600, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x1}}, @common=@dst={{0x48}, {0x4, 0x4, 0x1, [0xa, 0x1, 0xd021, 0xffff, 0x1de, 0x9, 0x8, 0x9, 0x9e, 0x81, 0x8, 0x8, 0x6, 0x3ff, 0x3, 0x6], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@frag={{0x30}, {[0x40, 0x6], 0x1, 0x24, 0x2}}, @common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x9, 0x8, 0x5, 0x60a5, 0xff, 0x6, 0x7, 0x18, 0x40}, {0x6d0}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@empty, @ipv4=@broadcast, @port=0x4e20, @icmp_id=0x64}}}, {{@ipv6={@loopback, @remote, [0xffffff00, 0xff000080, 0xffffffff], [0xff, 0xff, 0xffffffff, 0xff], 'pim6reg\x00', 'veth0_to_team\x00', {0xff}, {}, 0x5e, 0x7, 0x4, 0x2}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x29, 0x6, 0x3, 0x56, 0x2, 0x1, 0x3910}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@mcast2, @ipv6=@mcast2, @port=0x4e23, @gre_key=0x7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'veth0_to_bond\x00', 'vlan0\x00', {}, {}, 0x3c, 0x9, 0x4, 0xdfc8592e463ec4d7}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @port=0x4e23, @gre_key=0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x730) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x4, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 160.784018ms ago: executing program 2 (id=472): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000380)="d4c44007", 0x4}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 70.763831ms ago: executing program 2 (id=473): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) r4 = syz_clone(0x2028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10018, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd243a432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000400)="6da8234fdc8e79be", 0x8}], 0x1) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x18, 0x0, 0x6, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x648302) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000180)="bf3e58ca5b264e7dffb3cc16638d29060a3308aaa67675436ab2ccf1761a1ded6c4d06c8dbac7e", 0x27}, {&(0x7f0000000300)="4ca689c75a7f2b1eb845ffa978ff02be7f45a63c87136400b8681001233862ab1cc7abad5bfd220a11be5dc2524b253bcb89a9ee9e92ce57a08fa6a3f9b7042e93e51ce36b7987590f8c10815f313de78941963e20df1c92a21ed59bc8dcb94968f8d17dd98bac771719ba076bf935e347634e68e51842baed5ce65e881466095b171f9dfb7095a89de77cdcf63ed92445badfbb14a7d32af08c7a8c64aad12211eabaab", 0xa4}, {&(0x7f00000003c0)="3aa6", 0x2}, {&(0x7f0000000400)="5e4ed6a04939c65aea6cc6d76386", 0xe}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="9f6b5b9b59d3396d1d", 0x9}], 0x6, 0x4) process_vm_readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/88, 0x58}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/182, 0xb6}], 0x1, 0x0) 484.439µs ago: executing program 3 (id=474): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) r2 = io_uring_setup(0x655c, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x18, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0xc4, r4, 0x1, 0x70bd39, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x34044800) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000100), 0x0, 0xea25, 0x7f10e355022cb6cb, 0x9}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, 0x40}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x1000003, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x8, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x86, 0xfffffff9, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x5, 0x8001, 0x4, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6789, 0x40, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8004, 0x7, 0x1, 0x9, 0x801, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x200005, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x8, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x3, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x6, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x2, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff943, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0xb, 0x8, 0x2, 0x8, 0x2, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x9, 0x77e, 0xb95, 0x8, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x5, 0x8000, 0xa, 0x6, 0x4, 0xdffffff8, 0xd2, 0x4, 0x9, 0x2, 0xa170, 0x81, 0x8000, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0x4, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x100, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x0, 0x4, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x1, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x10001, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0xf, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0xa, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x1, 0xe7, 0xfffffff5, 0x4, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x3, 0x4155, 0xedb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000430045800800018004001c800758c2c5cc7ce9ad5146b672d90b6af79fdd06feea785ba25b2de6bd0b2186db2da986912062d18eab61c2a6cd5b3c60474a244f10cd3e6199b1ec2e7cfd91a908469f00f59b359776d260a3fd6c41e1ce3a87a88e4ddaaa0d73fe99aaa020fc5b58de91205597057e92"], 0x20}}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:4613' (ED25519) to the list of known hosts. [ 54.512141][ T40] audit: type=1400 audit(1775497979.306:62): avc: denied { name_bind } for pid=5924 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.548123][ T40] audit: type=1400 audit(1775497979.346:63): avc: denied { execute } for pid=5925 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.557942][ T40] audit: type=1400 audit(1775497979.346:64): avc: denied { execute_no_trans } for pid=5925 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 56.757191][ T40] audit: type=1400 audit(1775497981.556:65): avc: denied { mounton } for pid=5925 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.766089][ T40] audit: type=1400 audit(1775497981.566:66): avc: denied { mount } for pid=5925 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.767980][ T5925] cgroup: Unknown subsys name 'net' [ 56.975670][ T5925] cgroup: Unknown subsys name 'cpuset' [ 56.979802][ T5925] cgroup: Unknown subsys name 'rlimit' [ 57.224082][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.974483][ T5925] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.151800][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.151813][ T40] audit: type=1400 audit(1775497985.946:82): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.336174][ T40] audit: type=1400 audit(1775497986.136:83): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.357947][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.363414][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.367600][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.371752][ T40] audit: type=1400 audit(1775497986.136:84): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.379766][ T40] audit: type=1400 audit(1775497986.136:85): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.386354][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.388272][ T40] audit: type=1400 audit(1775497986.136:86): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[6681]" dev="sockfs" ino=6681 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.388444][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.388704][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.390764][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.398574][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.401349][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.412799][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.412994][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.415626][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.418794][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.425769][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.429509][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.434819][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.440826][ T40] audit: type=1400 audit(1775497986.226:87): avc: denied { read } for pid=5941 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.447916][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.450973][ T40] audit: type=1400 audit(1775497986.226:88): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.461938][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.464961][ T40] audit: type=1400 audit(1775497986.226:89): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.482970][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.486840][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.671654][ T40] audit: type=1400 audit(1775497986.466:90): avc: denied { module_request } for pid=5941 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.711636][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 61.724176][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 61.765461][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 61.929407][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.933271][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.936315][ T5941] bridge_slave_0: entered allmulticast mode [ 61.939753][ T5941] bridge_slave_0: entered promiscuous mode [ 61.945153][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.947669][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.950690][ T5941] bridge_slave_1: entered allmulticast mode [ 61.956862][ T5941] bridge_slave_1: entered promiscuous mode [ 61.961779][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.965313][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.968071][ T5938] bridge_slave_0: entered allmulticast mode [ 61.970839][ T5938] bridge_slave_0: entered promiscuous mode [ 61.975072][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.978070][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.981298][ T5938] bridge_slave_1: entered allmulticast mode [ 61.984622][ T5938] bridge_slave_1: entered promiscuous mode [ 62.001792][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 62.056370][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.067021][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.070179][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.073772][ T5946] bridge_slave_0: entered allmulticast mode [ 62.078007][ T5946] bridge_slave_0: entered promiscuous mode [ 62.093981][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.098859][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.102963][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.105255][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.107673][ T5946] bridge_slave_1: entered allmulticast mode [ 62.110464][ T5946] bridge_slave_1: entered promiscuous mode [ 62.141980][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.171609][ T5938] team0: Port device team_slave_0 added [ 62.185266][ T5941] team0: Port device team_slave_0 added [ 62.194167][ T5938] team0: Port device team_slave_1 added [ 62.199830][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.206161][ T5941] team0: Port device team_slave_1 added [ 62.235600][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.255802][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.258036][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.266366][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.270535][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.273018][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.275302][ T5952] bridge_slave_0: entered allmulticast mode [ 62.277958][ T5952] bridge_slave_0: entered promiscuous mode [ 62.287000][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.290001][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.293352][ T5952] bridge_slave_1: entered allmulticast mode [ 62.297344][ T5952] bridge_slave_1: entered promiscuous mode [ 62.308475][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.310702][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.318955][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.330423][ T5946] team0: Port device team_slave_0 added [ 62.338598][ T5946] team0: Port device team_slave_1 added [ 62.340765][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.343019][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.350923][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.371617][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.375460][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.377602][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.385767][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.404188][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.419761][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.421967][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.429987][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.449998][ T5952] team0: Port device team_slave_0 added [ 62.452391][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.454651][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.462845][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.484864][ T5952] team0: Port device team_slave_1 added [ 62.501602][ T5941] hsr_slave_0: entered promiscuous mode [ 62.504000][ T5941] hsr_slave_1: entered promiscuous mode [ 62.509017][ T5938] hsr_slave_0: entered promiscuous mode [ 62.511245][ T5938] hsr_slave_1: entered promiscuous mode [ 62.513566][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 62.515379][ T5938] Cannot create hsr debugfs directory [ 62.556693][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.559552][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.569676][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.597515][ T5946] hsr_slave_0: entered promiscuous mode [ 62.600122][ T5946] hsr_slave_1: entered promiscuous mode [ 62.602269][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 62.604569][ T5946] Cannot create hsr debugfs directory [ 62.607558][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.610283][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.620039][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.718724][ T5952] hsr_slave_0: entered promiscuous mode [ 62.721969][ T5952] hsr_slave_1: entered promiscuous mode [ 62.724943][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 62.727055][ T5952] Cannot create hsr debugfs directory [ 62.972203][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.988258][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.994480][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.007435][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.077910][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.089227][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.096756][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.104097][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.180200][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.191025][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.198417][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.203630][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.265882][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.284799][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.292959][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.298724][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.323113][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.353816][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.375616][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.378535][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.384911][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.409731][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.412824][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.428070][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.442710][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.445828][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.458176][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.461025][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.473898][ T63] Bluetooth: hci1: command tx timeout [ 63.476231][ T63] Bluetooth: hci0: command tx timeout [ 63.482557][ T5293] Bluetooth: hci2: command tx timeout [ 63.519378][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.527567][ T40] audit: type=1400 audit(1775497988.326:91): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.528430][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.565058][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.565063][ T5293] Bluetooth: hci3: command tx timeout [ 63.573507][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.585685][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.588424][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.594417][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.597578][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.608407][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.610713][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.621188][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.623625][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.661939][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698517][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.717052][ T5938] veth0_vlan: entered promiscuous mode [ 63.726486][ T5938] veth1_vlan: entered promiscuous mode [ 63.746511][ T5941] veth0_vlan: entered promiscuous mode [ 63.761656][ T5941] veth1_vlan: entered promiscuous mode [ 63.769704][ T5938] veth0_macvtap: entered promiscuous mode [ 63.778391][ T5938] veth1_macvtap: entered promiscuous mode [ 63.798828][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.803180][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.812077][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.830006][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.833716][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.841273][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.844893][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.850038][ T5941] veth0_macvtap: entered promiscuous mode [ 63.856394][ T5941] veth1_macvtap: entered promiscuous mode [ 63.866248][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.888354][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.901745][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.925233][ T1175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.928695][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.939595][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.943653][ T5952] veth0_vlan: entered promiscuous mode [ 63.946445][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.953629][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.958323][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.980857][ T5952] veth1_vlan: entered promiscuous mode [ 64.001719][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.004495][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.037319][ T5952] veth0_macvtap: entered promiscuous mode [ 64.041458][ T5946] veth0_vlan: entered promiscuous mode [ 64.058732][ T5952] veth1_macvtap: entered promiscuous mode [ 64.069688][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.072248][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.075319][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.085501][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.091463][ T5946] veth1_vlan: entered promiscuous mode [ 64.104099][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.118430][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121823][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125181][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.127747][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.141469][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.145683][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.180578][ T5946] veth0_macvtap: entered promiscuous mode [ 64.201274][ T5946] veth1_macvtap: entered promiscuous mode [ 64.218635][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.221713][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.243522][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.245192][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.246084][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.256481][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.264556][ T1175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.267419][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.273125][ T1175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.282063][ T1175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.356893][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.360537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.389188][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.391873][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.440111][ T24] IPVS: starting estimator thread 0... [ 64.501220][ T6057] openvswitch: netlink: Multiple metadata blocks provided [ 64.532973][ T6051] IPVS: using max 43 ests per chain, 103200 per kthread [ 64.624601][ T6067] program syz.1.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.756269][ T6084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16'. [ 65.004995][ T6111] syzkaller1: entered promiscuous mode [ 65.006923][ T6111] syzkaller1: entered allmulticast mode [ 65.019885][ T6111] netlink: 'syz.0.24': attribute type 21 has an invalid length. [ 65.024377][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 65.036588][ T72] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.036804][ T6111] netlink: 'syz.0.24': attribute type 21 has an invalid length. [ 65.040006][ T72] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.043585][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 65.047919][ T72] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.053450][ T72] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.056516][ T6111] Zero length message leads to an empty skb [ 65.120388][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 65.432590][ T6043] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.552646][ T5293] Bluetooth: hci2: command tx timeout [ 65.553482][ T5950] Bluetooth: hci1: command tx timeout [ 65.555356][ T63] Bluetooth: hci0: command tx timeout [ 65.582604][ T6043] usb 8-1: Using ep0 maxpacket: 8 [ 65.594238][ T6043] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 65.596837][ T6043] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 65.600869][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.605093][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.609180][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.613130][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.617014][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 65.621454][ T6043] usb 8-1: config 168 interface 0 has no altsetting 0 [ 65.626238][ T6043] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 65.628838][ T6043] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 65.633616][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.637878][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.643345][ T63] Bluetooth: hci3: command tx timeout [ 65.643374][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.653406][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.662571][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 65.667692][ T6043] usb 8-1: config 168 interface 0 has no altsetting 0 [ 65.672062][ T6043] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 65.675469][ T6043] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 65.679490][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 65.684252][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.688702][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.694087][ T6043] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.697739][ T6043] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 65.702316][ T6043] usb 8-1: config 168 interface 0 has no altsetting 0 [ 65.707963][ T6043] usb 8-1: string descriptor 0 read error: -22 [ 65.710537][ T6043] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.714789][ T6043] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.719876][ T6126] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 65.726125][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 65.731135][ T6043] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.732932][ T6126] team0: entered promiscuous mode [ 65.735690][ T6126] team_slave_0: entered promiscuous mode [ 65.742684][ T6126] team_slave_1: entered promiscuous mode [ 65.745344][ T6126] team0: entered allmulticast mode [ 65.748217][ T6126] team_slave_0: entered allmulticast mode [ 65.750087][ T6126] team_slave_1: entered allmulticast mode [ 65.754052][ T6126] bridge0: port 3(team0) entered blocking state [ 65.756446][ T6126] bridge0: port 3(team0) entered disabled state [ 65.762185][ T6126] bridge0: port 3(team0) entered blocking state [ 65.764754][ T6126] bridge0: port 3(team0) entered forwarding state [ 65.799924][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 65.826006][ T6134] ======================================================= [ 65.826006][ T6134] WARNING: The mand mount option has been deprecated and [ 65.826006][ T6134] and is ignored by this kernel. Remove the mand [ 65.826006][ T6134] option from the mount to silence this warning. [ 65.826006][ T6134] ======================================================= [ 65.932966][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 65.936493][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 65.943070][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 65.946193][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 65.962063][ T6043] usb 8-1: USB disconnect, device number 2 [ 66.147193][ T6166] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 66.176283][ T6122] FAT-fs (loop3): unable to read boot sector [ 66.226727][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 66.226739][ T40] audit: type=1400 audit(1775497991.026:191): avc: denied { bind } for pid=6167 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.237720][ T40] audit: type=1400 audit(1775497991.026:192): avc: denied { listen } for pid=6167 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.244680][ T40] audit: type=1400 audit(1775497991.026:193): avc: denied { accept } for pid=6167 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.253805][ T40] audit: type=1400 audit(1775497991.056:194): avc: denied { write } for pid=6172 comm="syz.0.45" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.265924][ T40] audit: type=1400 audit(1775497991.056:195): avc: denied { execute } for pid=6172 comm="syz.0.45" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 66.281054][ T40] audit: type=1400 audit(1775497991.056:196): avc: denied { ioctl } for pid=6172 comm="syz.0.45" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.338594][ T40] audit: type=1400 audit(1775497991.136:197): avc: denied { watch } for pid=6180 comm="syz.0.47" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.353555][ T40] audit: type=1400 audit(1775497991.136:198): avc: denied { watch_sb watch_reads } for pid=6180 comm="syz.0.47" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.432956][ T40] audit: type=1400 audit(1775497991.236:199): avc: denied { create } for pid=6186 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.483646][ T40] audit: type=1400 audit(1775497991.286:200): avc: denied { wake_alarm } for pid=6189 comm="syz.0.50" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.494416][ T6190] fuse: blksize only supported for fuseblk [ 66.780916][ T6213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.024111][ T6232] SELinux: policydb magic number 0x903000 does not match expected magic number 0xf97cff8c [ 67.028044][ T6232] SELinux: failed to load policy [ 67.352648][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.472587][ T5659] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.517238][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 67.522276][ T50] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 67.528525][ T50] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.531876][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.534694][ T50] usb 8-1: Product: syz [ 67.536051][ T50] usb 8-1: Manufacturer: syz [ 67.537639][ T50] usb 8-1: SerialNumber: syz [ 67.632898][ T63] Bluetooth: hci1: command tx timeout [ 67.632926][ T5950] Bluetooth: hci0: command tx timeout [ 67.633160][ T5293] Bluetooth: hci2: command tx timeout [ 67.662549][ T5659] usb 7-1: Using ep0 maxpacket: 16 [ 67.667560][ T5659] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 67.672347][ T5659] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.676534][ T5659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.679125][ T5659] usb 7-1: Product: syz [ 67.680510][ T5659] usb 7-1: Manufacturer: syz [ 67.681992][ T5659] usb 7-1: SerialNumber: syz [ 67.686895][ T5659] r8152-cfgselector 7-1: Unknown version 0x0000 [ 67.689185][ T5659] r8152-cfgselector 7-1: config 0 descriptor?? [ 67.722607][ T5950] Bluetooth: hci3: command tx timeout [ 67.819196][ T50] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.821998][ T50] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 67.824635][ T50] usb 8-1: unit 56 not found! [ 67.841130][ T50] usb 8-1: USB disconnect, device number 3 [ 67.858148][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.100086][ T5659] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 68.652783][ T5303] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.802592][ T5303] usb 8-1: Using ep0 maxpacket: 16 [ 68.806484][ T5303] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.810605][ T5303] usb 8-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 68.813704][ T5303] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.820865][ T5303] usb 8-1: config 0 descriptor?? [ 68.902774][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.052664][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 69.056598][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.059927][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 69.062810][ T50] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 69.066446][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.071726][ T50] usb 7-1: config 0 descriptor?? [ 69.236181][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.238756][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.241531][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.247091][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.249547][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.252273][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.255095][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.257273][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.260116][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.262863][ T5303] wacom 0003:056A:0017.0002: unknown main item tag 0x0 [ 69.439469][ T29] usb 8-1: USB disconnect, device number 4 [ 69.488574][ T50] logitech 0003:046D:CA04.0003: hidraw1: USB HID v10.09 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 69.493183][ T50] logitech 0003:046D:CA04.0003: no inputs found [ 69.684830][ T5659] usb 7-1: USB disconnect, device number 3 [ 69.712924][ T5950] Bluetooth: hci1: command tx timeout [ 69.712962][ T63] Bluetooth: hci0: command tx timeout [ 69.714817][ T5950] Bluetooth: hci2: command tx timeout [ 69.794376][ T5950] Bluetooth: hci3: command tx timeout [ 70.014258][ T6314] __nla_validate_parse: 2 callbacks suppressed [ 70.014274][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.93'. [ 70.077351][ T6316] overlayfs: missing 'lowerdir' [ 70.485648][ T5303] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.652519][ T5303] usb 8-1: Using ep0 maxpacket: 16 [ 70.656708][ T5303] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.661627][ T5303] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.668826][ T5303] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.672608][ T5303] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.675918][ T5303] usb 8-1: Product: syz [ 70.677715][ T5303] usb 8-1: Manufacturer: syz [ 70.679815][ T5303] usb 8-1: SerialNumber: syz [ 71.094972][ T5303] usb 8-1: cannot find UAC_HEADER [ 71.116901][ T5303] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.140349][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.167539][ T6332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.107'. [ 71.261315][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 71.298938][ T5659] usb 8-1: USB disconnect, device number 5 [ 71.532514][ T6043] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.684551][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.689433][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.693671][ T6043] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.698362][ T6043] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.701553][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.705876][ T6043] usb 5-1: config 0 descriptor?? [ 71.925304][ T6348] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.138778][ T6043] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.155222][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 72.155244][ T40] audit: type=1400 audit(1775497996.956:233): avc: denied { read } for pid=6354 comm="syz.1.108" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.166457][ T40] audit: type=1400 audit(1775497996.956:234): avc: denied { open } for pid=6354 comm="syz.1.108" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.174574][ T40] audit: type=1400 audit(1775497996.966:235): avc: denied { ioctl } for pid=6354 comm="syz.1.108" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.254476][ T6357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.366711][ T40] audit: type=1400 audit(1775497997.166:236): avc: denied { read write } for pid=6367 comm="syz.1.114" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.388781][ T40] audit: type=1400 audit(1775497997.166:237): avc: denied { open } for pid=6367 comm="syz.1.114" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.418136][ T40] audit: type=1400 audit(1775497997.216:238): avc: denied { shutdown } for pid=6369 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.455830][ T40] audit: type=1400 audit(1775497997.256:239): avc: denied { getopt } for pid=6374 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.500503][ T40] audit: type=1400 audit(1775497998.296:240): avc: denied { map } for pid=6385 comm="syz.2.121" path="socket:[10988]" dev="sockfs" ino=10988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.511314][ T40] audit: type=1400 audit(1775497998.296:241): avc: denied { read accept } for pid=6385 comm="syz.2.121" path="socket:[10988]" dev="sockfs" ino=10988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.525656][ T40] audit: type=1400 audit(1775497998.306:242): avc: denied { mounton } for pid=6385 comm="syz.2.121" path="/proc/61/task" dev="proc" ino=10989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.595216][ T6393] support for the xor transformation has been removed. [ 73.702651][ T6043] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 73.865675][ T6043] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 73.868954][ T6043] usb 6-1: config 0 has no interface number 0 [ 73.871374][ T6043] usb 6-1: config 0 interface 41 has no altsetting 0 [ 73.875944][ T6043] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.879339][ T6043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.882031][ T6043] usb 6-1: Product: syz [ 73.883544][ T6043] usb 6-1: Manufacturer: syz [ 73.884994][ T6043] usb 6-1: SerialNumber: syz [ 73.888715][ T6043] usb 6-1: config 0 descriptor?? [ 74.353725][ T5659] usb 5-1: USB disconnect, device number 2 [ 74.382486][ T6265] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.553152][ T6265] usb 7-1: Using ep0 maxpacket: 16 [ 74.565303][ T6265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.569377][ T6265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.573823][ T6265] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.578032][ T6265] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 74.581419][ T6265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.588384][ T6265] usb 7-1: config 0 descriptor?? [ 74.706116][ T6043] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 74.907122][ T1234] Bluetooth: hci4: Frame reassembly failed (-84) [ 75.003196][ T6265] hid_parser_main: 63 callbacks suppressed [ 75.003213][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.008284][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.010504][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.013007][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.015393][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.017594][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.019723][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.021787][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.024194][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.026355][ T6265] kye 0003:0458:0087.0005: unknown main item tag 0x0 [ 75.031080][ T6265] kye 0003:0458:0087.0005: hidraw1: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 75.202885][ T6265] usb 7-1: USB disconnect, device number 4 [ 76.052590][ T6265] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.123256][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.155000][ T6043] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 76.161882][ T6043] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 76.166812][ T6043] usb 6-1: USB disconnect, device number 2 [ 76.202563][ T6265] usb 7-1: Using ep0 maxpacket: 8 [ 76.206309][ T6265] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 76.209236][ T6265] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 76.212897][ T6265] usb 7-1: config 135 has no interface number 0 [ 76.214826][ T6265] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 76.218273][ T6265] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 76.222931][ T6265] usb 7-1: config 135 interface 230 has no altsetting 0 [ 76.227087][ T6265] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 76.230145][ T6265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.232830][ T6265] usb 7-1: Product: syz [ 76.234208][ T6265] usb 7-1: Manufacturer: syz [ 76.235747][ T6265] usb 7-1: SerialNumber: syz [ 76.243508][ T6265] uvcvideo 7-1:135.230: Found Unit with invalid ID 0 [ 76.272604][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 76.275934][ T34] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 76.279570][ T34] usb 8-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 76.283972][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 76.286389][ T34] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 76.289558][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.294967][ T34] usb 8-1: config 0 descriptor?? [ 76.444486][ T6265] uvcvideo 7-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 76.447016][ T6265] uvcvideo 7-1:135.230: No valid video chain found. [ 76.645883][ T10] usb 7-1: USB disconnect, device number 5 [ 76.708638][ T34] logitech 0003:046D:C24F.0006: hidraw1: USB HID v0.08 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 76.712996][ T34] logitech 0003:046D:C24F.0006: no inputs found [ 76.839246][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.841770][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.905299][ T5303] usb 8-1: USB disconnect, device number 6 [ 76.912581][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.912754][ T5293] Bluetooth: hci4: command 0x1003 tx timeout [ 76.996799][ T6446] syz.1.143 uses obsolete (PF_INET,SOCK_PACKET) [ 77.222668][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.234265][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 77.234283][ T40] audit: type=1400 audit(1775498002.036:252): avc: denied { ioctl } for pid=6450 comm="syz.2.145" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.374478][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 77.379991][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 77.383593][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.388646][ T29] usb 5-1: config 0 descriptor?? [ 77.821234][ T29] logitech-hidpp-device 0003:046D:C088.0007: hidraw1: USB HID v0.24 Device [HID 046d:c088] on usb-dummy_hcd.0-1/input0 [ 78.014623][ T6265] usb 5-1: USB disconnect, device number 3 [ 78.542971][ T6479] process 'syz.1.153' launched './file0' with NULL argv: empty string added [ 78.548786][ T40] audit: type=1400 audit(1775498003.346:253): avc: denied { execute_no_trans } for pid=6478 comm="syz.1.153" path="/32/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.549434][ T6479] Invalid argument reading file caps for ./file0 [ 78.684595][ T6489] usb usb8: usbfs: process 6489 (syz.0.158) did not claim interface 0 before use [ 78.720387][ T40] audit: type=1400 audit(1775498003.516:254): avc: denied { ioctl } for pid=6490 comm="syz.0.160" path="socket:[12044]" dev="sockfs" ino=12044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.852795][ T6265] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.005800][ T6265] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.010905][ T6265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.017607][ T6265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.021880][ T6265] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.029202][ T6265] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.033270][ T6265] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 79.036711][ T6265] usb 6-1: Manufacturer: syz [ 79.043921][ T6265] usb 6-1: config 0 descriptor?? [ 79.461558][ T6265] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 79.852421][ T40] audit: type=1400 audit(1775498004.646:255): avc: denied { map } for pid=6506 comm="syz.2.166" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 79.897127][ T6512] Invalid argument reading file caps for ./file0 [ 79.955995][ T40] audit: type=1400 audit(1775498004.756:256): avc: denied { bind } for pid=6515 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.453839][ T834] usb 6-1: USB disconnect, device number 3 [ 80.917606][ T40] audit: type=1400 audit(1775498005.716:257): avc: denied { map } for pid=6527 comm="syz.0.174" path="socket:[11165]" dev="sockfs" ino=11165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.925940][ T40] audit: type=1400 audit(1775498005.716:258): avc: denied { accept } for pid=6527 comm="syz.0.174" path="socket:[11165]" dev="sockfs" ino=11165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.106983][ T40] audit: type=1400 audit(1775498005.906:259): avc: denied { read write } for pid=6537 comm="syz.2.177" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.116416][ T40] audit: type=1400 audit(1775498005.916:260): avc: denied { open } for pid=6537 comm="syz.2.177" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 81.125477][ T5659] hid_parser_main: 107 callbacks suppressed [ 81.125498][ T5659] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 81.136437][ T5659] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 81.329011][ T6544] VFS: Mount too revealing [ 81.382518][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.437286][ T40] audit: type=1400 audit(1775498006.236:261): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.565000][ T34] usb 7-1: config 0 has no interfaces? [ 81.572995][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.578518][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.581589][ T34] usb 7-1: SerialNumber: syz [ 81.585580][ T34] usb 7-1: config 0 descriptor?? [ 81.707340][ T6550] bridge1: entered promiscuous mode [ 81.709268][ T6550] bridge1: entered allmulticast mode [ 81.849233][ T5976] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.859586][ T34] usb 7-1: USB disconnect, device number 6 [ 82.037024][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.041770][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.045838][ T5976] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.050052][ T5976] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.054040][ T5976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.067865][ T5976] usb 8-1: config 0 descriptor?? [ 82.405426][ T6558] xt_hashlimit: size too large, truncated to 1048576 [ 82.490731][ T5976] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.854208][ T5659] usb 8-1: USB disconnect, device number 7 [ 82.943537][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 82.943557][ T40] audit: type=1400 audit(1775498007.746:263): avc: denied { read } for pid=6576 comm="syz.0.188" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.957662][ T40] audit: type=1400 audit(1775498007.756:264): avc: denied { open } for pid=6576 comm="syz.0.188" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.967861][ T40] audit: type=1400 audit(1775498007.766:265): avc: denied { ioctl } for pid=6576 comm="syz.0.188" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.083630][ T40] audit: type=1326 audit(1775498007.886:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.126548][ T40] audit: type=1326 audit(1775498007.886:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.139426][ T40] audit: type=1326 audit(1775498007.886:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.146367][ T40] audit: type=1326 audit(1775498007.886:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.155008][ T40] audit: type=1326 audit(1775498007.886:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.162713][ T40] audit: type=1326 audit(1775498007.886:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.170009][ T40] audit: type=1326 audit(1775498007.926:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.0.193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9540d9c819 code=0x7ffc0000 [ 83.256592][ T1234] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.292698][ T1234] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.752580][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.904541][ T10] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 83.907941][ T10] usb 6-1: config 0 has no interface number 0 [ 83.909989][ T10] usb 6-1: config 0 interface 36 altsetting 215 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.915279][ T10] usb 6-1: config 0 interface 36 altsetting 215 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.919502][ T10] usb 6-1: config 0 interface 36 has no altsetting 0 [ 83.924114][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.927819][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 83.931500][ T10] usb 6-1: Manufacturer: syz [ 83.936444][ T10] usb 6-1: config 0 descriptor?? [ 84.369297][ T10] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 84.558357][ T5303] usb 6-1: USB disconnect, device number 4 [ 84.612763][ T6043] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 84.774513][ T6043] usb 8-1: unable to get BOS descriptor or descriptor too short [ 84.780864][ T6043] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 84.785074][ T6043] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.788178][ T6043] usb 8-1: Product: syz [ 84.789539][ T6043] usb 8-1: Manufacturer: syz [ 84.791278][ T6043] usb 8-1: SerialNumber: syz [ 84.801764][ T6043] usb 8-1: selecting invalid altsetting 1 [ 84.805259][ T6043] usb 8-1: unit 6 not found! qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc4000) [ 84.993342][ T1111] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 84.995567][ T1111] ata1: failed to read log page 10h (errno=-5) [ 84.997525][ T1111] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 85.000277][ T1111] ata1.00: irq_stat 0x40000000 [ 85.001994][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.004631][ T1111] ata1.00: cmd 61/98:00:86:1f:08/04:00:00:00:00/40 tag 0 ncq dma 602112 out [ 85.004631][ T1111] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.010262][ T1111] ata1.00: status: { DRDY } [ 85.011786][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.014378][ T1111] ata1.00: cmd 61/20:f0:66:19:08/06:00:00:00:00/40 tag 30 ncq dma 802816 out [ 85.014378][ T1111] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.020284][ T1111] ata1.00: status: { DRDY } [ 85.023554][ T1111] ata1.00: configured for UDMA/100 [ 85.026355][ T1111] ata1: EH complete [ 85.201828][ T6606] Illegal XDP return value 4294967294 on prog (id 8) dev syz_tun, expect packet loss! [ 85.312609][ T5293] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 85.312626][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.313969][ T5950] Bluetooth: hci5: command 0x1003 tx timeout [ 85.653661][ T6043] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 85.656875][ T6043] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.661717][ T6043] usb 8-1: selecting invalid altsetting 1 [ 85.666159][ T6043] usb 8-1: unit 6 not found! [ 85.668091][ T6043] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 85.671148][ T6043] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 85.676352][ T6043] usb 8-1: selecting invalid altsetting 1 [ 85.678457][ T6043] usb 8-1: unit 6 not found! [ 85.680200][ T6043] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2) [ 85.702225][ T6043] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 85.711719][ T6043] usb 8-1: USB disconnect, device number 8 [ 85.755318][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.792585][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.966770][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.974605][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 85.978629][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 85.982090][ T10] usb 7-1: Product: syz [ 85.984334][ T10] usb 7-1: Manufacturer: syz [ 85.986488][ T10] usb 7-1: SerialNumber: syz [ 86.217681][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 86.267934][ T6645] KVM: debugfs: duplicate directory 6645-4 [ 86.425191][ T10] usb 7-1: USB disconnect, device number 7 [ 86.444673][ T10] usblp0: removed [ 87.081810][ T3248] cfg80211: failed to load regulatory.db [ 87.599124][ T6681] tipc: Started in network mode [ 87.600900][ T6681] tipc: Node identity fffffff8, cluster identity 4711 [ 87.603817][ T6681] tipc: Node number set to 4294967288 [ 87.612533][ T34] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 87.765742][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 87.783138][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 87.787396][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 87.802610][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 87.806281][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.834569][ T34] usb 7-1: config 0 descriptor?? [ 87.839011][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.842122][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.262585][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.305605][ T34] lg-g15 0003:046D:C22D.000C: unknown main item tag 0x7 [ 88.308297][ T34] lg-g15 0003:046D:C22D.000C: item fetching failed at offset 24/40 [ 88.311796][ T34] lg-g15 0003:046D:C22D.000C: probe with driver lg-g15 failed with error -22 [ 88.332995][ T6689] batadv_slave_1: entered promiscuous mode [ 88.343697][ T6688] batadv_slave_1: left promiscuous mode [ 88.386220][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 88.386233][ T40] audit: type=1400 audit(1775498013.186:295): avc: denied { name_bind } for pid=6690 comm="syz.3.232" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.416113][ T6693] loop4: detected capacity change from 0 to 2 [ 88.419866][ T6693] loop4: detected capacity change from 2 to 5 [ 88.425189][ T5976] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.438265][ T5976] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 88.442664][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 88.446090][ T5976] usb 6-1: Product: syz [ 88.447602][ T5976] usb 6-1: Manufacturer: syz [ 88.449174][ T5976] usb 6-1: SerialNumber: syz [ 88.462969][ T10] usb 7-1: USB disconnect, device number 8 [ 88.661939][ T5976] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 88.762618][ T6041] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 88.883250][ T5976] usb 6-1: USB disconnect, device number 5 [ 88.900169][ T5976] usblp0: removed [ 88.915314][ T6041] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.918574][ T6041] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.921600][ T6041] usb 8-1: config 1 has no interface number 0 [ 88.924214][ T6041] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.927640][ T6041] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 88.931182][ T6041] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 88.936381][ T6041] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.939411][ T6041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.942038][ T6041] usb 8-1: Product: syz [ 88.943897][ T6041] usb 8-1: Manufacturer: syz [ 88.945449][ T6041] usb 8-1: SerialNumber: syz [ 88.948908][ T6695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 89.361019][ T6695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 89.429867][ T40] audit: type=1400 audit(1775498014.226:296): avc: denied { ioctl } for pid=6716 comm="syz.1.243" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.738896][ T6735] xt_hashlimit: size too large, truncated to 1048576 [ 89.809378][ T6041] cdc_ncm 8-1:1.1: bind() failure [ 89.896264][ T40] audit: type=1400 audit(1775498014.696:297): avc: denied { write } for pid=6741 comm="syz.1.251" path="socket:[14824]" dev="sockfs" ino=14824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.917545][ T40] audit: type=1400 audit(1775498014.716:298): avc: denied { map } for pid=6730 comm="syz.0.247" path="socket:[14829]" dev="sockfs" ino=14829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.009910][ T3248] usb 8-1: USB disconnect, device number 9 [ 90.042522][ T6265] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 90.184329][ T6750] xt_hashlimit: size too large, truncated to 1048576 [ 90.206311][ T6265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.211424][ T6265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.216106][ T6265] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 90.219869][ T6265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.225896][ T6265] usb 7-1: config 0 descriptor?? [ 90.613256][ T40] audit: type=1400 audit(1775498015.416:299): avc: denied { write } for pid=6758 comm="syz.0.256" name="psched" dev="proc" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.620406][ T40] audit: type=1400 audit(1775498015.416:300): avc: denied { write } for pid=6758 comm="syz.0.256" path="/proc/201/net/psched" dev="proc" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.643514][ T6265] hid-led 0003:1D34:000A.000D: unbalanced collection at end of report description [ 90.647036][ T6265] hid-led 0003:1D34:000A.000D: probe with driver hid-led failed with error -22 [ 90.810118][ T40] audit: type=1400 audit(1775498015.606:301): avc: denied { create } for pid=6764 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.818981][ T40] audit: type=1400 audit(1775498015.616:302): avc: denied { setopt } for pid=6764 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.827541][ T40] audit: type=1400 audit(1775498015.616:303): avc: denied { ioctl } for pid=6764 comm="syz.3.258" path="socket:[14919]" dev="sockfs" ino=14919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.838895][ T40] audit: type=1400 audit(1775498015.616:304): avc: denied { write } for pid=6764 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.853508][ T6766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.618245][ T6790] tipc: Started in network mode [ 91.619899][ T6790] tipc: Node identity fffffff8, cluster identity 4711 [ 91.622276][ T6790] tipc: Node number set to 4294967288 [ 91.812535][ T834] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 91.974125][ T834] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.978557][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 91.982602][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.988201][ T834] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 91.991600][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.996005][ T834] usb 5-1: config 0 descriptor?? [ 91.998415][ T6789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 92.410137][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.413003][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.415496][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.418118][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.420605][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.423597][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.426394][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.428881][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.431254][ T834] itetech 0003:258A:6A88.000E: unknown main item tag 0x0 [ 92.437398][ T834] itetech 0003:258A:6A88.000E: hidraw1: USB HID v0.20 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 92.608187][ T10] usb 5-1: USB disconnect, device number 4 [ 92.822940][ T6043] usb 7-1: USB disconnect, device number 9 [ 92.994720][ T6826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.122708][ T6830] xt_hashlimit: size too large, truncated to 1048576 [ 94.451252][ T6870] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 94.454830][ T6870] kvm: kvm [6869]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 94.491509][ T6877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.495305][ T6877] IPv6: NLM_F_CREATE should be set when creating new route [ 94.994147][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 95.024024][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 95.024068][ T40] audit: type=1400 audit(1775498019.816:322): avc: denied { read } for pid=6887 comm="syz.1.306" path="socket:[16442]" dev="sockfs" ino=16442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.046208][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 95.164235][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.169507][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.176113][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.181802][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.185496][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.220169][ T34] usb 7-1: config 0 descriptor?? [ 95.638791][ T34] hid_parser_main: 28 callbacks suppressed [ 95.638807][ T34] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x1 [ 95.649118][ T34] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.841350][ T10] usb 7-1: USB disconnect, device number 10 [ 95.905111][ T40] audit: type=1400 audit(1775498020.706:323): avc: denied { setopt } for pid=6896 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.913288][ T40] audit: type=1400 audit(1775498020.716:324): avc: denied { read } for pid=6896 comm="syz.0.316" lport=34164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.873082][ T40] audit: type=1400 audit(1775498021.676:325): avc: denied { read } for pid=6924 comm="syz.3.320" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.071138][ T5976] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 97.092204][ T6934] capability: warning: `syz.3.324' uses deprecated v2 capabilities in a way that may be insecure [ 97.142761][ T3248] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.235072][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.239468][ T5976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.250964][ T5976] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.292613][ T5976] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.295437][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.313995][ T5976] usb 7-1: config 0 descriptor?? [ 97.314564][ T3248] usb 6-1: Using ep0 maxpacket: 32 [ 97.323282][ T3248] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.326662][ T3248] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.336348][ T3248] usb 6-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 97.339327][ T3248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.342211][ T3248] usb 6-1: Product: syz [ 97.343859][ T3248] usb 6-1: Manufacturer: syz [ 97.345375][ T3248] usb 6-1: SerialNumber: syz [ 97.560625][ T3248] usb 6-1: unit 2 not found! [ 97.563827][ T3248] usb 6-1: unit 83 not found! [ 97.586316][ T3248] usb 6-1: USB disconnect, device number 6 [ 97.604550][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.730788][ T5976] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.097576][ T3248] usb 7-1: USB disconnect, device number 11 [ 98.228354][ T40] audit: type=1400 audit(1775498023.026:326): avc: denied { write } for pid=6950 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.572870][ T5985] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 98.745884][ T5985] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 98.749508][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.749874][ T7000] kvm: Disabled LAPIC found during irq injection [ 98.754382][ T5985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.754407][ T5985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 98.755473][ T5985] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 98.768452][ T5985] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 98.771022][ T5985] usb 6-1: Manufacturer: syz [ 98.774000][ T5985] usb 6-1: config 0 descriptor?? [ 98.875280][ T40] audit: type=1400 audit(1775498023.676:327): avc: denied { read write } for pid=7016 comm="syz.0.337" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.885505][ T40] audit: type=1400 audit(1775498023.676:328): avc: denied { open } for pid=7016 comm="syz.0.337" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.902818][ T40] audit: type=1400 audit(1775498023.686:329): avc: denied { ioctl } for pid=7016 comm="syz.0.337" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.172629][ T3248] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 99.184880][ T5985] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 99.190184][ T5985] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 99.324999][ T3248] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.330221][ T3248] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.335782][ T3248] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.339412][ T3248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.345311][ T3248] usb 7-1: config 0 descriptor?? [ 99.472785][ T5985] usb 6-1: USB disconnect, device number 7 [ 99.486645][ T40] audit: type=1400 audit(1775498024.286:330): avc: denied { accept } for pid=7029 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.752299][ T3248] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 99.756012][ T3248] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 99.758719][ T3248] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 99.761304][ T3248] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 99.763767][ T3248] elan 0003:04F3:0755.0012: unknown main item tag 0x0 [ 99.766462][ T3248] elan 0003:04F3:0755.0012: failed to start in urb: -90 [ 99.773094][ T3248] elan 0003:04F3:0755.0012: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 99.826467][ T7039] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.027210][ T34] usb 7-1: USB disconnect, device number 12 [ 100.262584][ T3248] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.298140][ T40] audit: type=1400 audit(1775498025.096:331): avc: denied { create } for pid=7044 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.306277][ T40] audit: type=1400 audit(1775498025.096:332): avc: denied { connect } for pid=7044 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.316253][ T40] audit: type=1400 audit(1775498025.106:333): avc: denied { write } for pid=7044 comm="syz.3.346" path="socket:[18445]" dev="sockfs" ino=18445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.432532][ T3248] usb 6-1: Using ep0 maxpacket: 8 [ 100.435948][ T3248] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 100.444035][ T3248] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 100.447240][ T3248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.449871][ T3248] usb 6-1: Product: syz [ 100.451348][ T3248] usb 6-1: Manufacturer: syz [ 100.453213][ T3248] usb 6-1: SerialNumber: syz [ 100.933029][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 100.948670][ T3248] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.952785][ T3248] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 100.958873][ T3248] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.961976][ T3248] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 100.967328][ T3248] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.991267][ T3248] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 100.995572][ T3248] usb 6-1: USB disconnect, device number 8 [ 101.007186][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.084326][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.088813][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 101.091797][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.096813][ T34] usb 7-1: config 0 descriptor?? [ 101.192579][ T5976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.342626][ T5976] usb 5-1: Using ep0 maxpacket: 16 [ 101.347599][ T5976] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.351279][ T5976] usb 5-1: config 1 interface 0 has no altsetting 0 [ 101.355481][ T5976] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 101.358506][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.361395][ T5976] usb 5-1: Product: syz [ 101.363062][ T5976] usb 5-1: Manufacturer: syz [ 101.364562][ T5976] usb 5-1: SerialNumber: syz [ 101.511635][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.518271][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.521850][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.526791][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.530553][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.536919][ T34] logitech-hidpp-device 0003:046D:C088.0013: unknown main item tag 0x0 [ 101.540288][ T34] logitech-hidpp-device 0003:046D:C088.0013: item fetching failed at offset 9/40 [ 101.544868][ T34] logitech-hidpp-device 0003:046D:C088.0013: hidpp_probe:parse failed [ 101.548925][ T34] logitech-hidpp-device 0003:046D:C088.0013: probe with driver logitech-hidpp-device failed with error -22 [ 101.575708][ T5976] usbhid 5-1:1.0: can't add hid device: -71 [ 101.577697][ T5976] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 101.581939][ T5976] usb 5-1: USB disconnect, device number 5 [ 101.704488][ T34] usb 7-1: USB disconnect, device number 13 [ 101.880816][ T7083] SELinux: failed to load policy [ 102.182651][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.332580][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 102.335791][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.339350][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.342835][ T10] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 102.348124][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.350648][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 102.352587][ T5985] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.354466][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.360990][ T10] usb 6-1: config 0 descriptor?? [ 102.530834][ T5985] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 102.533921][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.536417][ T5985] usb 5-1: Product: syz [ 102.537742][ T5985] usb 5-1: Manufacturer: syz [ 102.539374][ T5985] usb 5-1: SerialNumber: syz [ 102.754902][ T5985] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 102.758986][ T5985] usb 5-1: cannot setup if 2: error -71 [ 102.773999][ T5985] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 102.778091][ T5985] usb 5-1: USB disconnect, device number 6 [ 102.794613][ T10] wacom 0003:056A:0063.0014: unknown main item tag 0x0 [ 102.798824][ T10] wacom 0003:056A:0063.0014: unknown main item tag 0x0 [ 102.802002][ T10] wacom 0003:056A:0063.0014: unknown main item tag 0x0 [ 102.804792][ T6150] udevd[6150]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.810894][ T10] wacom 0003:056A:0063.0014: unknown main item tag 0x0 [ 102.981887][ T10] usb 6-1: USB disconnect, device number 9 [ 103.144198][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.157277][ T40] audit: type=1400 audit(1775498027.956:334): avc: denied { ioctl } for pid=7102 comm="syz.3.369" path="socket:[17802]" dev="sockfs" ino=17802 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.163199][ T7103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 103.239444][ T40] audit: type=1400 audit(1775498028.036:335): avc: denied { watch watch_reads } for pid=7102 comm="syz.3.369" path="/101" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.285678][ T40] audit: type=1400 audit(1775498028.086:336): avc: denied { getattr } for pid=7104 comm="syz.3.370" path="socket:[17806]" dev="sockfs" ino=17806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.373032][ T7113] batadv_slave_1: entered promiscuous mode [ 103.397889][ T6043] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 103.411677][ T7112] batadv_slave_1: left promiscuous mode [ 103.413759][ T7107] kvm: kvm [7106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 103.418742][ T7107] kvm: kvm [7106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 103.509836][ T40] audit: type=1400 audit(1775498028.306:337): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.532517][ T40] audit: type=1400 audit(1775498028.316:338): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.541665][ T40] audit: type=1400 audit(1775498028.316:339): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.555749][ T6043] usb 7-1: config 0 interface 0 has no altsetting 0 [ 103.558699][ T6043] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 103.561972][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.572563][ T6043] usb 7-1: config 0 descriptor?? [ 103.608043][ T40] audit: type=1400 audit(1775498028.406:340): avc: denied { sys_module } for pid=7118 comm="syz.3.375" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.786860][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 103.790665][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 103.831587][ T7146] team0 (unregistering): Port device team_slave_0 removed [ 103.842045][ T7146] team0 (unregistering): Port device team_slave_1 removed [ 103.952492][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 103.985659][ T6043] wacom 0003:056A:0094.0015: Using device in hidraw-only mode [ 103.997659][ T6043] wacom 0003:056A:0094.0015: hidraw1: USB HID v0.26 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 104.039909][ T7170] kernel read not supported for file /zero (pid: 7170 comm: syz.0.392) [ 104.058799][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 104.114727][ T7174] evm: overlay not supported [ 104.180023][ T34] usb 7-1: USB disconnect, device number 14 [ 104.279731][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 104.811110][ T7183] kvm: kvm [7182]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 104.818393][ T7183] kvm: kvm [7182]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 104.971319][ T7201] binder: 7200:7201 ioctl 400c620e 200000001540 returned -22 [ 104.981347][ T7201] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 104.995459][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 104.997903][ T7201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.033431][ T7204] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 105.161173][ T7228] program syz.1.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.205948][ T7234] netlink: 68 bytes leftover after parsing attributes in process `syz.0.413'. [ 105.305751][ T7245] syzkaller1: entered promiscuous mode [ 105.307740][ T7245] syzkaller1: entered allmulticast mode [ 105.380927][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 105.380981][ T40] audit: type=1400 audit(1775498030.176:373): avc: denied { create } for pid=7244 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.408391][ T7245] loop2: detected capacity change from 0 to 128 [ 105.433264][ T40] audit: type=1400 audit(1775498030.236:374): avc: denied { nlmsg_read } for pid=7249 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.461076][ T7252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.476878][ T40] audit: type=1400 audit(1775498030.276:375): avc: denied { create } for pid=7254 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.486438][ T40] audit: type=1400 audit(1775498030.286:376): avc: denied { ioctl } for pid=7254 comm="syz.0.420" path="socket:[17074]" dev="sockfs" ino=17074 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.511037][ T7257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.512498][ T40] audit: type=1400 audit(1775498030.306:377): avc: denied { mount } for pid=7254 comm="syz.0.420" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.516755][ T7257] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.523420][ T40] audit: type=1400 audit(1775498030.306:378): avc: denied { mounton } for pid=7254 comm="syz.0.420" path="/110/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.535345][ T40] audit: type=1400 audit(1775498030.326:379): avc: denied { read } for pid=7254 comm="syz.0.420" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.540342][ T7257] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 105.544037][ T40] audit: type=1400 audit(1775498030.326:380): avc: denied { read } for pid=7254 comm="syz.0.420" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.544083][ T40] audit: type=1400 audit(1775498030.326:381): avc: denied { read } for pid=7254 comm="syz.0.420" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.544120][ T40] audit: type=1400 audit(1775498030.326:382): avc: denied { open } for pid=7254 comm="syz.0.420" path="/110/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.572662][ T7257] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 105.576435][ T7257] overlayfs: d_ino too big (110, ino=9223372036854776400, xinobits=3) [ 105.579761][ T7257] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 105.585082][ T7257] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 105.586994][ T7263] i2c i2c-1: dtv_property_process_set: SET cmd 0x31656c69 undefined [ 105.588204][ T7257] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 105.596427][ T7257] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 105.599718][ T7257] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 105.603063][ T7257] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 105.606985][ T7257] overlayfs: d_ino too big (instances, ino=4611686018427389058, xinobits=3) [ 105.619038][ T7266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.422'. [ 105.621946][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 105.666152][ T7270] xt_hashlimit: size too large, truncated to 1048576 [ 105.708770][ T5293] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 105.767597][ T7285] mmap: syz.1.428 (7285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.854767][ T7296] hugetlbfs: syz.1.431 (7296): Using mlock ulimits for SHM_HUGETLB is obsolete [ 106.162582][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.352626][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 106.357535][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.360613][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.364861][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.368209][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.372065][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.376020][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 106.380428][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 106.384751][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.389580][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.393246][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.400705][ T10] usb 6-1: config 0 descriptor?? [ 106.404566][ T7307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.629938][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.633323][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.635698][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.637883][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.640105][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.642312][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.645876][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.648546][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.651237][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.654139][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.657683][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.657805][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.657849][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.657901][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.657992][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658040][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658140][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658187][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658232][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658334][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658380][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658501][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658549][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658649][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658699][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658800][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658854][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.658972][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.659026][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.659132][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.659185][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.659299][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.659353][ T5950] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 106.757995][ T7344] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.761989][ T7344] Cannot find set identified by id 3 to match [ 106.764571][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.769921][ T10] usb 6-1: USB disconnect, device number 10 [ 106.781991][ T10] usblp0: removed [ 106.882287][ T7358] openvswitch: netlink: IPv4 tunnel dst address is zero [ 107.089763][ T7380] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 107.092564][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 107.253682][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 107.268421][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.278051][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.282045][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.285596][ T10] usb 6-1: Product: syz [ 107.287273][ T10] usb 6-1: Manufacturer: syz [ 107.289407][ T10] usb 6-1: SerialNumber: syz [ 107.296612][ T10] usb 6-1: config 0 descriptor?? [ 107.308949][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.312809][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 107.456575][ T7399] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.792915][ T5950] Bluetooth: hci1: command 0x2016 tx timeout [ 107.910713][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 107.952282][ T7418] overlayfs: overlapping lowerdir path [ 108.112990][ T7421] gfs2: error -5 reading superblock [ 108.259688][ T7434] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 108.263311][ T7437] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 108.354974][ T7433] __nla_validate_parse: 1 callbacks suppressed [ 108.355052][ T7433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.468'. [ 108.581995][ T10] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 108.586158][ T10] em28xx 6-1:0.0: board has no eeprom [ 108.624630][ T7416] 9pnet_fd: p9_fd_create_tcp (7416): problem connecting socket to 127.0.0.1 [ 108.732104][ T7405] Set syz1 is full, maxelem 65536 reached [ 108.796197][ T7347] em28xx 6-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 108.811796][ T7450] nvme_fabrics: missing parameter 'transport=%s' [ 108.817939][ T7450] nvme_fabrics: missing parameter 'nqn=%s' [ 108.821663][ T7453] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 108.822016][ T7450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7450 comm=syz.2.472 [ 108.824996][ T7453] overlayfs: missing 'lowerdir' [ 108.996128][ T7463] ------------[ cut here ]------------ [ 108.997964][ T7463] 1 [ 108.997973][ T7463] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#2: syz.0.475/7463 [ 109.002604][ T7463] Modules linked in: [ 109.004055][ T7463] CPU: 2 UID: 0 PID: 7463 Comm: syz.0.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.008019][ T7463] Tainted: [L]=SOFTLOCKUP [ 109.009972][ T7463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.013690][ T7463] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.015957][ T7463] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 ae 8d 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 109.022217][ T7463] RSP: 0018:ffffc9000618f790 EFLAGS: 00010246 [ 109.024443][ T7463] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.027380][ T7463] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040cc0 [ 109.030584][ T7463] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000009 [ 109.033780][ T7463] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000040cc0 [ 109.036404][ T7463] R13: 1ffff92000c31f41 R14: 0000000000000010 R15: 1ffff92000c31f0b [ 109.039004][ T7463] FS: 00007f9541c7f6c0(0000) GS:ffff8880d6539000(0000) knlGS:0000000000000000 [ 109.042216][ T7463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.045124][ T7463] CR2: 000000110c3edcce CR3: 0000000039f65000 CR4: 0000000000352ef0 [ 109.048553][ T7463] Call Trace: [ 109.050126][ T7463] [ 109.051588][ T7463] ? is_bpf_text_address+0x8a/0x1a0 [ 109.054236][ T7463] ? bpf_ksym_find+0x128/0x1c0 [ 109.056343][ T7463] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.058558][ T7463] ? is_bpf_text_address+0x94/0x1a0 [ 109.060313][ T7463] ? kernel_text_address+0x8d/0x100 [ 109.062210][ T7463] ? __kernel_text_address+0xd/0x30 [ 109.064406][ T7463] ? unwind_get_return_address+0x59/0xa0 [ 109.067612][ T7463] ? arch_stack_walk+0xa6/0xf0 [ 109.069622][ T7463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.071904][ T7463] ? tomoyo_path_number_perm+0x46d/0x580 [ 109.073970][ T7463] ? stack_trace_save+0x8e/0xc0 [ 109.075950][ T7463] ? stack_depot_save_flags+0x27/0x9d0 [ 109.078330][ T7463] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.080932][ T7463] ? policy_nodemask+0xed/0x4f0 [ 109.082534][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.082900][ T7463] alloc_pages_mpol+0x1fb/0x550 [ 109.086651][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 109.087484][ T7463] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.090170][ T6237] em28xx 6-1:0.0: Binding DVB extension [ 109.091655][ T7463] ? find_held_lock+0x2b/0x80 [ 109.097633][ T7463] ? avc_has_extended_perms+0x33a/0x1080 [ 109.099756][ T7463] ? drm_syncobj_array_find+0x34/0x3b0 [ 109.101578][ T7463] ___kmalloc_large_node+0x104/0x150 [ 109.103316][ T10] usb 6-1: USB disconnect, device number 11 [ 109.103631][ T7463] __kmalloc_large_node_noprof+0x1c/0x70 [ 109.106475][ T7458] hpfs: hpfs_map_sector(): read error [ 109.107819][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 109.108120][ T7463] __kmalloc_noprof+0x5be/0x850 [ 109.115289][ T7463] ? __lock_acquire+0x4a5/0x2630 [ 109.116935][ T7463] drm_syncobj_array_find+0x34/0x3b0 [ 109.118676][ T7463] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 109.120650][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.123102][ T7463] ? find_held_lock+0x2b/0x80 [ 109.125044][ T7463] ? drm_dev_exit+0x41/0x60 [ 109.127439][ T7463] ? drm_dev_exit+0x41/0x60 [ 109.129500][ T7463] drm_ioctl_kernel+0x1f3/0x3e0 [ 109.131872][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.134406][ T7463] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 109.136147][ T7463] drm_ioctl+0x5e6/0xc60 [ 109.137315][ T6237] em28xx 6-1:0.0: Registering input extension [ 109.137555][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.139842][ T10] em28xx 6-1:0.0: Closing input extension [ 109.141724][ T7463] ? __pfx_drm_ioctl+0x10/0x10 [ 109.145441][ T7463] ? selinux_file_ioctl+0x139/0x290 [ 109.147150][ T7463] ? selinux_file_ioctl+0xb4/0x290 [ 109.149035][ T7463] ? __pfx_drm_ioctl+0x10/0x10 [ 109.151126][ T7463] __x64_sys_ioctl+0x18e/0x210 [ 109.153358][ T7463] do_syscall_64+0x106/0xf80 [ 109.155025][ T7463] ? clear_bhb_loop+0x40/0x90 [ 109.156551][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.157628][ T10] em28xx 6-1:0.0: Freeing device [ 109.158342][ T7463] RIP: 0033:0x7f9540d9c819 [ 109.161427][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.167883][ T7463] RSP: 002b:00007f9541c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.170762][ T7463] RAX: ffffffffffffffda RBX: 00007f9541015fa0 RCX: 00007f9540d9c819 [ 109.174085][ T7463] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000005 [ 109.177230][ T7463] RBP: 00007f9540e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.179846][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.182638][ T7463] R13: 00007f9541016038 R14: 00007f9541015fa0 R15: 00007fff498d5d58 [ 109.185229][ T7463] [ 109.186243][ T7463] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.188546][ T7463] CPU: 2 UID: 0 PID: 7463 Comm: syz.0.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.192229][ T7463] Tainted: [L]=SOFTLOCKUP [ 109.193824][ T7463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.197320][ T7463] Call Trace: [ 109.198474][ T7463] [ 109.199445][ T7463] dump_stack_lvl+0x100/0x190 [ 109.201045][ T7463] vpanic+0x552/0x970 [ 109.202317][ T7463] ? __pfx_vpanic+0x10/0x10 [ 109.203858][ T7463] panic+0xd1/0xe0 [ 109.205153][ T7463] ? __pfx_panic+0x10/0x10 [ 109.206588][ T7463] ? check_panic_on_warn+0x1f/0x90 [ 109.208320][ T7463] check_panic_on_warn.cold+0x19/0x34 [ 109.210603][ T7463] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.213418][ T7463] __warn.cold+0x191/0x348 [ 109.215052][ T7463] __report_bug+0x296/0x3d0 [ 109.216521][ T7463] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.218493][ T7463] ? __pfx___report_bug+0x10/0x10 [ 109.220150][ T7463] ? __lock_acquire+0x4a5/0x2630 [ 109.221762][ T7463] ? __lock_acquire+0x4a5/0x2630 [ 109.223346][ T7463] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.225352][ T7463] report_bug+0xb2/0x220 [ 109.226755][ T7463] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.228838][ T7463] handle_bug+0x16a/0x2a0 [ 109.230287][ T7463] exc_invalid_op+0x17/0x50 [ 109.232363][ T7463] asm_exc_invalid_op+0x1a/0x20 [ 109.234805][ T7463] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 109.237572][ T7463] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 ae 8d 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 109.245584][ T7463] RSP: 0018:ffffc9000618f790 EFLAGS: 00010246 [ 109.248231][ T7463] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.251657][ T7463] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040cc0 [ 109.254341][ T7463] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000009 [ 109.256886][ T7463] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000040cc0 [ 109.259813][ T7463] R13: 1ffff92000c31f41 R14: 0000000000000010 R15: 1ffff92000c31f0b [ 109.263035][ T7463] ? is_bpf_text_address+0x8a/0x1a0 [ 109.265128][ T7463] ? bpf_ksym_find+0x128/0x1c0 [ 109.267654][ T7463] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.270928][ T7463] ? is_bpf_text_address+0x94/0x1a0 [ 109.273101][ T7463] ? kernel_text_address+0x8d/0x100 [ 109.275277][ T7463] ? __kernel_text_address+0xd/0x30 [ 109.277376][ T7463] ? unwind_get_return_address+0x59/0xa0 [ 109.279705][ T7463] ? arch_stack_walk+0xa6/0xf0 [ 109.281638][ T7463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.284469][ T7463] ? tomoyo_path_number_perm+0x46d/0x580 [ 109.286612][ T7463] ? stack_trace_save+0x8e/0xc0 [ 109.288324][ T7463] ? stack_depot_save_flags+0x27/0x9d0 [ 109.290237][ T7463] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.292356][ T7463] ? policy_nodemask+0xed/0x4f0 [ 109.293969][ T7463] alloc_pages_mpol+0x1fb/0x550 [ 109.295574][ T7463] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.297488][ T7463] ? find_held_lock+0x2b/0x80 [ 109.299512][ T7463] ? avc_has_extended_perms+0x33a/0x1080 [ 109.301907][ T7463] ? drm_syncobj_array_find+0x34/0x3b0 [ 109.304488][ T7463] ___kmalloc_large_node+0x104/0x150 [ 109.306898][ T7463] __kmalloc_large_node_noprof+0x1c/0x70 [ 109.309263][ T7463] __kmalloc_noprof+0x5be/0x850 [ 109.311311][ T7463] ? __lock_acquire+0x4a5/0x2630 [ 109.313449][ T7463] drm_syncobj_array_find+0x34/0x3b0 [ 109.315674][ T7463] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 109.317643][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.319979][ T7463] ? find_held_lock+0x2b/0x80 [ 109.322094][ T7463] ? drm_dev_exit+0x41/0x60 [ 109.324216][ T7463] ? drm_dev_exit+0x41/0x60 [ 109.326470][ T7463] drm_ioctl_kernel+0x1f3/0x3e0 [ 109.328479][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.330623][ T7463] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 109.332355][ T7463] drm_ioctl+0x5e6/0xc60 [ 109.333760][ T7463] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 109.336519][ T7463] ? __pfx_drm_ioctl+0x10/0x10 [ 109.338352][ T7463] ? selinux_file_ioctl+0x139/0x290 [ 109.340497][ T7463] ? selinux_file_ioctl+0xb4/0x290 [ 109.342675][ T7463] ? __pfx_drm_ioctl+0x10/0x10 [ 109.344510][ T7463] __x64_sys_ioctl+0x18e/0x210 [ 109.346255][ T7463] do_syscall_64+0x106/0xf80 [ 109.348110][ T7463] ? clear_bhb_loop+0x40/0x90 [ 109.349808][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.352316][ T7463] RIP: 0033:0x7f9540d9c819 [ 109.354226][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.360812][ T7463] RSP: 002b:00007f9541c7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.363547][ T7463] RAX: ffffffffffffffda RBX: 00007f9541015fa0 RCX: 00007f9540d9c819 [ 109.366331][ T7463] RDX: 0000200000000200 RSI: 00000000c03064ca RDI: 0000000000000005 [ 109.368887][ T7463] RBP: 00007f9540e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.371863][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.374622][ T7463] R13: 00007f9541016038 R14: 00007f9541015fa0 R15: 00007fff498d5d58 [ 109.377080][ T7463] [ 109.378833][ T7463] Kernel Offset: disabled [ 109.380269][ T7463] Rebooting in 86400 seconds..