last executing test programs: 2m22.610301609s ago: executing program 3 (id=254): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0) 2m21.221152721s ago: executing program 3 (id=266): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x17) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}, 0x1, 0x0, 0x0, 0x4c880}, 0x0) 2m21.152945813s ago: executing program 3 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x4, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x4, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044010}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}}}, 0xd) 2m21.073045229s ago: executing program 3 (id=271): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="bc9fbc7e", 0x4}], 0x1, 0x0, 0x0, 0x4000008}, 0x40) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000ac0)='syscall\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) io_uring_setup(0x5be7, &(0x7f0000000180)={0x0, 0x8d45, 0x8, 0x3, 0x372, 0x0, r0}) pread64(r4, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 2m20.992253334s ago: executing program 3 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x4000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x14, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018"], 0x34}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="660f38299007680f1800e3e3f082a082826266b8d0b700000f23c00f21f86635020000000f23f8660f38809e1c3366b8090000000f23d80f21f86635c00000c00f23f80fd113b83c028ec0ba420066ed", 0x50}], 0x1, 0x1, &(0x7f0000000180)=[@dstype3={0x7, 0x5}], 0x1) (async) unshare(0x4000400) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0xfffffffe}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x15) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r5, 0xffffffffffffffff, 0x2c}, 0x20) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x29, 0x8202) (async) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x20001f, 0x0) 2m20.837178452s ago: executing program 3 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xc, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x7, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xe, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (fail_nth: 9) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 2m5.822641868s ago: executing program 32 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xc, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x7, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xe, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (fail_nth: 9) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m59.892030612s ago: executing program 0 (id=524): bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) symlink(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x17) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4c880}, 0x0) 1m59.76290555s ago: executing program 0 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) 1m59.21283859s ago: executing program 0 (id=530): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001480)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x120a1620, 0x0, 0x2000, 0x25d, 0x0, 0x0, 0x0, 0x80, 0x806}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103081, 0x34) umount2(&(0x7f0000000000)='./file0\x00', 0x9) write$FUSE_ENTRY(r7, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x6, 0x2, 0x7, 0x0, 0x6, 0xfe04, {0x1, 0x85, 0x1, 0x5, 0x4, 0x2, 0x6, 0xfffeffff, 0x1, 0x4000, 0x0, r5, r6, 0x80000001, 0x1000}}}, 0x90) 1m58.382265352s ago: executing program 0 (id=541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000280)="6bcf5df79a36bb67fa5f79f4c88c78ad763164686b1110cfb35ae26aa4b84a1a1ba417144ee1291d8f36dec656f1282216138341c8eee1420dad246d9a6b03a70bb0012c8452d8cb2bcb081f05e434e89911486653d74811eaf0cb75e5fb00368f59cc4c61d318d2567ed5a7abc7a69f6f9c9ba223780fa5ee012d1c122bc2d93c9458a402e564d848199d59bad3639eb9b4cf35988be30706e30092ad7fa0985b52fca98c003be3f55dea73afbc494cb3d3ead4d4ee4608d487eee95752b800116096718dba2cfa0d4cef12e59a8154ebf408f8e74882c48664e93ab66aa224176bb7bb9c2eb9ff90", 0xe9}, {&(0x7f0000000040)="742dfb300ad66c67c549fd", 0xb}, {&(0x7f0000000380)="7cdc198d93dd32f5233516f03b33a2e1c4dfce744ac944a9a36a1f1872db5714f162a1fed62feff9f347d7cab3077f9e4ae04abeb110809b15185e6513a81cdbd47a4bd547995a3b5f28bdcb7a2b302e5f9205da3ae8790b2fa9682a50465086e1564a878525b6fa9074924741070f00e0a6b3ccb2396d14c6a5f7058e53a48a71493afab1b15f5a76561100d5eea3747ef356ace5affd0c3797dd9a07009d1752858c43cb5f14216bbe08856e365d3e6c7766056e99e74d764f7f9d45b44ac86763abce3d8d7421c5050a25d79765c172d22cf76a357bc799", 0xd9}, {&(0x7f0000000480)="4fc5f01cf36a0d8f3950f742dccef2e585dcaa24de0a96cbe6d01578eb20975349be8831e0e16c54683898b12eae4c71c1b718f106396b8cc6b5455021236eefbdf52740a3f7faceeb7cb4441ae40bd3f20b845065503559d0ef733925bf02ffc2e1ec79cafbe824f9309f296807939c091203409ed28f4a964ec1e307cbfe9c55a00f867c0bad67c3a6b8d603c9e024914aa6c97ba9e2c334fb571b63fb85a217f461f26a855efde7cede8528158621221d8a8251c83a631cc7c5e39c3f45f243e29cc8e2185e5a53", 0xc9}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="0a433025b24241503a38242f43d3e8f105778751ee8f24d821952b6f87ef103f45a522c0b2f856e435798d26c59f8f4874b9df2ba9524cda926b4cd2e5bf7fe883721d80874f244abad69c193eee733118cb6f6f043074124df6ac19b8749584042a8f9df09137ab09f90ce7fe348bdb4dc14b6650688bddd321003209534c0649f0c5b9c4acb392b8e08dfe307ea7bc715b2d", 0x93}, {&(0x7f0000001780)="b9b18fab6e70b690b91db5fb9ae8650bfa1e18b2a7ca49be112202009c32a780d083595fe02c99e591ba580e343f9fe462470a132a37eb21c50175796859d21aeb3db5afa9ff1e4c5ff29b862c5a3760655c658252df4942a468bbfb7eb7abd374cccb90c1efd4657b72df6c5221559239375cebdb23a1979c6e4848de42f5bbf229dabae4551b624201688cc934c52e7cabab5d8a14fe40618844c5979116d93247d84d8aaa3c337f16bb70abb623a6ec199c6136c06f0d273089eb9069ca75c99a6b41f5f002e595", 0xc9}], 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m58.150095395s ago: executing program 0 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x5, 0xffffffff}}) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_delete(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x3b, 0x84}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@in_dx={0x69, 0x20, {0x51bf, 0x2}}, @nested_load_code={0x12e, 0x6c, {0x2, "c4c3b978c9f766450fc7b55e9c000066baf80cb8f139238fef66bafc0cb000ee0f08c4c1fd11ce0f07f30f2c66dbb9800000c00f3235000400000f30b8010000000f01d966baf80cb82c3c5e83ef66bafc0c66ed"}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xdcf6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x3, 0x8000000000000001, 0x1}}, @nested_load_syzos={0x136, 0x40, {0x1, 0x1, [@nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0xbe91}}]}}, @nested_load_code={0x12e, 0x55, {0x1, "8f296897514cb9800000c00f3235002000000f30470f30c4a1fe1116f30fc730c4627d93740f0ec461f571e500670f01d1c44229b7843e480000000f09"}}, @nested_create_vm={0x12d, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18, 0x7fffffff}, @wr_crn={0x67, 0x20, {0x3, 0x8000000000000000}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x637d}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xece8}}, @wr_drn={0x68, 0x20, {0x5, 0xbe16}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xbc, 0xfffffffffffffffc, 0x5a, 0x6}}, @nested_load_code={0x12e, 0x56, {0x1, "440f6813c4620d9ffdb9800000c00f3235010000000f30f3f236440f35420fdd57e5c4a17c53df660f388108f241ae660f38800266ba410066b8cc5d66ef"}}, @set_irq_handler={0xc8, 0x20, {0x24}}], 0x33f}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000180)=@x86={0x1, 0x9, 0x3, 0x0, 0x8, 0x5, 0x2, 0x13, 0x5, 0xb, 0x3, 0x2, 0x0, 0x5, 0x0, 0x2, 0x1, 0xdb, 0x1, '\x00', 0x0, 0x91d}) 1m57.942299674s ago: executing program 0 (id=545): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m57.853161036s ago: executing program 33 (id=545): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.34742332s ago: executing program 2 (id=2208): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x34e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffa", 0x81}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x91) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000740)='veth0_to_bond\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 3.335573416s ago: executing program 2 (id=2210): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) landlock_restrict_self(r2, 0xa) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x8864000000000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.849219204s ago: executing program 5 (id=2218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.'], 0x20) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@random={'user.', '-.\x00'}, &(0x7f00000008c0)='^,/\x00', 0x4, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x50bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x1ff, 0x4, 0xfffffff9, 0x0, r1, 0x4, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r9, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f00000000c0)={0xc, r11}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000800)) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000100)={0xc}) r12 = syz_open_dev$audion(&(0x7f00000004c0), 0xffffffffffffffff, 0x84240) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x16, &(0x7f0000000080)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000002c0)='GPL\x00', 0x8, 0x88, &(0x7f0000000300)=""/136, 0x40f00, 0x9, '\x00', 0x0, @sk_reuseport=0x27, r2, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x8}, 0x10, r4, r0, 0x0, &(0x7f0000000600)=[0x1, r5, r9, r12, r13], 0x0, 0x10, 0xa44b}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 2.774980796s ago: executing program 5 (id=2220): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.774419407s ago: executing program 5 (id=2221): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_SSID={0x22, 0x34, @random="196078bee3502beaf3dc33ac66a5c45c12b881dfc280ddf7b08350d3b912"}, @NL80211_ATTR_PMK={0x14, 0xfe, "42193e0452113539610ca02d4a389956"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x100}, @NL80211_ATTR_PMKID={0x14, 0x55, "916abccf87ece3b2ea21a823d850fb52"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x295}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "494fc185cef9d2cce4ff6247d914db96"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) 2.710902824s ago: executing program 5 (id=2223): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 2.377332383s ago: executing program 2 (id=2225): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia-generic)\x00'}, 0x58) ptrace(0x10, r0) exit(0x100000000000035) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close(0x3) tkill(r0, 0x12) syz_pidfd_open(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 2.10213125s ago: executing program 5 (id=2228): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)={0x14, 0x1d, 0x300, 0x70bd2b, 0x0, {0x7}}, 0x14}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8a040, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x1, 0x2}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_io_uring_setup(0x7e76, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r1, 0x92, 0x2, 0x9, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x40) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000000)) 1.439221961s ago: executing program 2 (id=2230): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.438821961s ago: executing program 2 (id=2231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 1.095972071s ago: executing program 2 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r5, 0x0, 0x38f9, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) splice(r4, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x7) write(r1, &(0x7f0000000040), 0xffffff4a) 1.095662281s ago: executing program 1 (id=2240): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/196, 0xc4}], 0x1, 0x7, 0xffffffff) 1.0331935s ago: executing program 1 (id=2241): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) capget(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x3, 0xf8, 0x3, 0xdba6, 0x4df7, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.032835968s ago: executing program 1 (id=2242): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x5, 0xc38, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x7800, 0x9, 0x653}}) 979.047986ms ago: executing program 1 (id=2243): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0xf00000000000000) 550.138241ms ago: executing program 5 (id=2246): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000000)) 359.533474ms ago: executing program 4 (id=2248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x8000, 0x8, 0x0, 0x8, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x3, 0x0, 0x87, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, {[@end, @timestamp_addr={0x44, 0x44, 0x16, 0x1, 0x2, [{@multicast2, 0x8000}, {@rand_addr=0x64010102, 0xcc3}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010101, 0x6}, {@multicast2, 0x3}, {@broadcast, 0x3}, {@multicast1, 0xffffffff}, {@rand_addr=0x64010100, 0x2}]}]}}}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x4000000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r10, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$XFS_IOC_GETBMAPA(r10, 0xc020582c, &(0x7f0000000140)={0x7, 0x1ff, 0x0, 0x10001}) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r11 = fcntl$dupfd(r9, 0x406, r9) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000180), 0x4) getpeername$packet(r11, 0x0, &(0x7f0000000300)) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000000080)={0xc}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {0xfff3}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 186.803131ms ago: executing program 4 (id=2249): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/196, 0xc4}], 0x1, 0x7, 0xffffffff) 92.505754ms ago: executing program 4 (id=2250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r1, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="9941", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback={0x900}, 0x9}, 0x1c) 92.04725ms ago: executing program 4 (id=2251): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x5, 0xc38, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x7800, 0x9, 0x653}}) 91.645274ms ago: executing program 1 (id=2252): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/2, 0x1018800, 0x0, 0xfffffffd, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0d86dd60f53a0400303a00fe8000000000000000000000000000bbff0200000000000000000000000000015b0090780000050060507e5900000000fc010000000000000000000000000000ff00"/102], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afcaa4757f0000000000000000030000000000000000000400"/160], 0xa0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x34c, 0x24, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x5}, {0x4, 0x9}, {0xb, 0xfff8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000000, 0xfff, 0x2, 0x2, 0xb, 0x8, 0xa, 0x7, 0x67}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffff8d7}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x0, 0x1, 0x2, 0xb2, 0x6, 0x6}}, {0x10, 0x2, [0x0, 0x2, 0x401, 0x8000, 0x7, 0x7fff]}}, {{0x1c, 0x1, {0xfe, 0x7, 0xb6e, 0xff, 0x0, 0xc000000, 0x8, 0x1}}, {0x6, 0x2, [0xf000]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xff, 0x1, 0x80000000, 0x2, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0x8001, 0x1000, 0x0]}}, {{0x1c, 0x1, {0x3, 0x2, 0x0, 0x2, 0x0, 0xffffda03, 0x7, 0x9}}, {0x16, 0x2, [0xe, 0xd, 0x81, 0xe2, 0x4, 0x8, 0x2, 0x1ff, 0x8]}}, {{0x1c, 0x1, {0x9, 0x0, 0xfffb, 0x0, 0x1, 0x0, 0x7, 0x5}}, {0xe, 0x2, [0x6, 0x1ff, 0xfb09, 0xfff9, 0x8]}}, {{0x1c, 0x1, {0x9, 0x9, 0x4, 0x4, 0x2, 0x8, 0x8000, 0x5}}, {0xe, 0x2, [0x8e39, 0x401, 0xfff9, 0x5, 0x4]}}, {{0x1c, 0x1, {0xe7, 0x4, 0x0, 0x5, 0x2, 0x2, 0x3, 0x3}}, {0xa, 0x2, [0x4, 0x8a47, 0x400]}}, {{0x1c, 0x1, {0x0, 0x7, 0x7, 0x2, 0x1, 0x4, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x7, 0x1, 0x7, 0x4, 0x7, 0x5800, 0x1, 0x5, 0x9]}}, {{0x1c, 0x1, {0x2, 0x31, 0x401, 0x9, 0x1, 0x8, 0x2ba, 0x7}}, {0x12, 0x2, [0x7, 0x5, 0x71, 0x7, 0x8, 0x4, 0x6]}}, {{0x1c, 0x1, {0x1, 0x5, 0x3, 0x4, 0x0, 0x1, 0x3b, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0x4, 0x4, 0xdf28, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xf9, 0x5, 0x6, 0x6, 0x0, 0x80000001, 0x83, 0x8}}, {0x14, 0x2, [0x0, 0xd5, 0x1, 0x6, 0x692, 0x9, 0x4, 0x4de]}}]}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xf, 0x400, 0x8, 0x0, 0x7, 0x81, 0x5}}, {0xe, 0x2, [0x4, 0xffff, 0x5, 0x1ac, 0x7f]}}, {{0x1c, 0x1, {0x6, 0x2, 0x5, 0x9, 0x1, 0x8, 0x3fb, 0x5}}, {0xe, 0x2, [0x7, 0x8, 0x400, 0xa5, 0x7]}}, {{0x1c, 0x1, {0xb, 0x3, 0x0, 0x3, 0x2, 0x2, 0xa, 0x2}}, {0x8, 0x2, [0x0, 0x81]}}, {{0x1c, 0x1, {0xe, 0x7b, 0x3ff, 0x6, 0x2, 0x7, 0x5, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0x1]}}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000300)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000001c0)={r5, r5, 0x5, 0x2000, 0x2}) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0xe0942) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000100)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000040)={0x0, r10}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000000)) fallocate(r6, 0x11, 0x0, 0x5345) 308.689µs ago: executing program 4 (id=2253): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000016000000000100007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000191c1c7f5bfcc2491be58a59137c478f50e47325e117"], 0x50) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x70bd2d, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6}}]}, 0x4c}}, 0x4044040) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000002280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x3, [@float={0x10, 0x0, 0x0, 0x10, 0x8}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0xc, 0x7f06}, {0x10, 0x401}, {0xd, 0x7}]}, @datasec={0xa, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x1, 0x479}, {0x5, 0x0, 0x3ada981}], "3adf9c"}, @enum64={0x4, 0x4, 0x0, 0x13, 0x1, 0x0, [{0xb, 0x9, 0xfffffffc}, {0x5, 0x6, 0x832}, {0x3, 0x7ff, 0xfffffff7}, {0x8, 0x10000, 0x7}]}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000002380)=""/120, 0xc7, 0x78, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0xe, &(0x7f00000020c0)=@raw=[@alu={0x7, 0x0, 0x2, 0x8, 0xb, 0x40, 0x4}, @alu={0x7, 0x0, 0xd, 0xa, 0xb, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000002140)='syzkaller\x00', 0x1ff, 0xef, &(0x7f0000002180)=""/239, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002480)={0x2, 0xc, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000024c0)=[{0x2, 0x4, 0xc}, {0x1, 0x5, 0xd, 0x8}, {0x3, 0x3, 0xa, 0x2}, {0x4, 0x2, 0xa, 0x5}], 0x10, 0xff}, 0x94) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000001000000000000000000851000000600000018100000", @ANYRES16=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 195.833µs ago: executing program 4 (id=2254): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x80004519, 0x0) 0s ago: executing program 1 (id=2255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) kernel console output (not intermixed with test programs): octl+0x18e/0x210 [ 152.942658][ T9525] do_syscall_64+0x106/0xf80 [ 152.942676][ T9525] ? clear_bhb_loop+0x40/0x90 [ 152.942692][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.942706][ T9525] RIP: 0033:0x7fba11f9c799 [ 152.942717][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.942730][ T9525] RSP: 002b:00007fba12ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.942742][ T9525] RAX: ffffffffffffffda RBX: 00007fba12215fa0 RCX: 00007fba11f9c799 [ 152.942750][ T9525] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 152.942758][ T9525] RBP: 00007fba12ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 152.942765][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.942773][ T9525] R13: 00007fba12216038 R14: 00007fba12215fa0 R15: 00007fffe0d83148 [ 152.942789][ T9525] [ 152.995111][ T9531] netlink: 'syz.4.1199': attribute type 2 has an invalid length. [ 152.999617][ T9532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.007974][ T9531] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 153.009385][ T9532] IPv6: NLM_F_CREATE should be set when creating new route [ 153.015637][ T9531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.213602][ T9544] Bluetooth: MGMT ver 1.23 [ 153.605975][ T6016] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 153.646317][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 153.679817][ T9571] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.736170][ T6016] usb 7-1: device descriptor read/64, error -71 [ 153.815694][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 153.820067][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.823324][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.827540][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.830880][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.835174][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.838374][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.047697][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 154.049605][ T9] usbtmc 6-1:16.0: can't read capabilities [ 154.284838][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.288469][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.399571][ T54] usb 6-1: USB disconnect, device number 12 [ 154.506019][ T6016] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 154.640496][ T9588] forcing mempool usage for netfs_alloc_subrequest+0xc1/0x3c0 [ 154.645601][ T6016] usb 7-1: device descriptor read/64, error -71 [ 154.713448][ T9590] overlayfs: failed to clone upperpath [ 154.756181][ T6016] usb usb7-port1: attempt power cycle [ 154.801525][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 154.801536][ T40] audit: type=1326 audit(1774311937.654:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.5.1220" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6679f9c799 code=0x0 [ 154.804166][ T9595] macsec2: entered promiscuous mode [ 154.812602][ T9595] macsec2: entered allmulticast mode [ 154.852803][ T9595] __nla_validate_parse: 11 callbacks suppressed [ 154.852819][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1223'. [ 154.963760][ T9608] btrfs: Unknown parameter 'acl614' [ 155.023284][ T9612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9612 comm=syz.5.1227 [ 155.029647][ T9612] netlink: 'syz.5.1227': attribute type 1 has an invalid length. [ 155.046102][ T9612] 8021q: adding VLAN 0 to HW filter on device bond9 [ 155.056060][ T9612] bond9: (slave dummy0): making interface the new active one [ 155.064419][ T9612] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 155.095751][ T6016] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 155.107312][ T40] audit: type=1400 audit(1774311937.964:533): avc: denied { append } for pid=9616 comm="syz.5.1229" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.116148][ T6016] usb 7-1: device descriptor read/8, error -71 [ 155.121448][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 155.146580][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 155.152271][ T40] audit: type=1400 audit(1774311938.004:534): avc: denied { ioctl } for pid=9620 comm="syz.5.1231" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.181412][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1233'. [ 155.199156][ T9625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 155.231035][ T40] audit: type=1400 audit(1774311938.084:535): avc: denied { ioctl } for pid=9622 comm="syz.1.1232" path="/243/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 155.241734][ T40] audit: type=1400 audit(1774311938.094:536): avc: denied { create } for pid=9628 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.358764][ T6016] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 155.386122][ T6016] usb 7-1: device descriptor read/8, error -71 [ 155.400622][ T9638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9638 comm=syz.1.1237 [ 155.410230][ T9638] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 155.439828][ T9638] 8021q: adding VLAN 0 to HW filter on device bond12 [ 155.458042][ T9638] bond12: (slave dummy0): Enslaving as an active interface with a down link [ 155.496340][ T6016] usb usb7-port1: unable to enumerate USB device [ 155.543223][ T9642] FAULT_INJECTION: forcing a failure. [ 155.543223][ T9642] name failslab, interval 1, probability 0, space 0, times 0 [ 155.548925][ T9642] CPU: 1 UID: 0 PID: 9642 Comm: syz.5.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.548953][ T9642] Tainted: [L]=SOFTLOCKUP [ 155.548959][ T9642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.548968][ T9642] Call Trace: [ 155.548976][ T9642] [ 155.548982][ T9642] dump_stack_lvl+0x100/0x190 [ 155.549025][ T9642] should_fail_ex.cold+0x5/0xa [ 155.549051][ T9642] should_failslab+0xc2/0x120 [ 155.549071][ T9642] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 155.549096][ T9642] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 155.549130][ T9642] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 155.549186][ T9642] mmu_topup_memory_caches+0x25/0x170 [ 155.549210][ T9642] kvm_mmu_load+0xd6/0x23e0 [ 155.549230][ T9642] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 155.549255][ T9642] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 155.549283][ T9642] ? __pfx_kvm_mmu_load+0x10/0x10 [ 155.549301][ T9642] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 155.549329][ T9642] ? kvm_check_and_inject_events+0x961/0x10c0 [ 155.549350][ T9642] ? record_steal_time+0x3f0/0xbe0 [ 155.549379][ T9642] vcpu_run+0x39f4/0x5ca0 [ 155.549409][ T9642] ? __pfx_vcpu_run+0x10/0x10 [ 155.549443][ T9642] ? rcu_is_watching+0x12/0xc0 [ 155.549470][ T9642] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 155.549491][ T9642] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 155.549521][ T9642] kvm_vcpu_ioctl+0x730/0x1730 [ 155.549550][ T9642] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.549577][ T9642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.549604][ T9642] ? do_vfs_ioctl+0x226/0x13e0 [ 155.549632][ T9642] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 155.549659][ T9642] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.549702][ T9642] ? __fget_files+0x215/0x3d0 [ 155.549722][ T9642] ? hook_file_ioctl_common+0x146/0x410 [ 155.549747][ T9642] ? selinux_file_ioctl+0x139/0x290 [ 155.549773][ T9642] ? selinux_file_ioctl+0xb4/0x290 [ 155.549799][ T9642] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.549828][ T9642] __x64_sys_ioctl+0x18e/0x210 [ 155.549856][ T9642] do_syscall_64+0x106/0xf80 [ 155.549888][ T9642] ? clear_bhb_loop+0x40/0x90 [ 155.549912][ T9642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.549930][ T9642] RIP: 0033:0x7f6679f9c799 [ 155.549946][ T9642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.549963][ T9642] RSP: 002b:00007f667ae00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.549981][ T9642] RAX: ffffffffffffffda RBX: 00007f667a215fa0 RCX: 00007f6679f9c799 [ 155.549993][ T9642] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 155.550003][ T9642] RBP: 00007f667ae00090 R08: 0000000000000000 R09: 0000000000000000 [ 155.550013][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.550023][ T9642] R13: 00007f667a216038 R14: 00007f667a215fa0 R15: 00007ffd280fe618 [ 155.550047][ T9642] [ 155.661754][ T9644] capability: warning: `syz.1.1239' uses 32-bit capabilities (legacy support in use) [ 155.679840][ T9649] ªªªªªª: renamed from wg2 (while UP) [ 155.721498][ T9651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9651 comm=syz.4.1241 [ 156.275129][ T9681] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 156.291757][ T9681] 8021q: adding VLAN 0 to HW filter on device bond11 [ 156.560828][ T9697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.667725][ T40] audit: type=1400 audit(1774311939.524:537): avc: denied { setopt } for pid=9704 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.690057][ T40] audit: type=1400 audit(1774311939.544:538): avc: denied { getopt } for pid=9706 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.803474][ T40] audit: type=1400 audit(1774311939.654:539): avc: denied { setopt } for pid=9715 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.819428][ T9717] can0: slcan on ttyS3. [ 156.937049][ T9717] can0 (unregistered): slcan off ttyS3. [ 156.951213][ T9722] FAULT_INJECTION: forcing a failure. [ 156.951213][ T9722] name failslab, interval 1, probability 0, space 0, times 0 [ 156.956940][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: syz.1.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.956970][ T9722] Tainted: [L]=SOFTLOCKUP [ 156.956975][ T9722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.956984][ T9722] Call Trace: [ 156.956990][ T9722] [ 156.956996][ T9722] dump_stack_lvl+0x100/0x190 [ 156.957034][ T9722] should_fail_ex.cold+0x5/0xa [ 156.957056][ T9722] should_failslab+0xc2/0x120 [ 156.957074][ T9722] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 156.957102][ T9722] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.957133][ T9722] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 156.957198][ T9722] mmu_topup_memory_caches+0x25/0x170 [ 156.957219][ T9722] kvm_mmu_load+0xd6/0x23e0 [ 156.957238][ T9722] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 156.957264][ T9722] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 156.957290][ T9722] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 156.957313][ T9722] ? __pfx_kvm_mmu_load+0x10/0x10 [ 156.957334][ T9722] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 156.957367][ T9722] ? kvm_check_and_inject_events+0x961/0x10c0 [ 156.957394][ T9722] vcpu_run+0x39f4/0x5ca0 [ 156.957428][ T9722] ? __pfx_vcpu_run+0x10/0x10 [ 156.957454][ T9722] ? rcu_is_watching+0x12/0xc0 [ 156.957481][ T9722] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 156.957505][ T9722] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 156.957533][ T9722] kvm_vcpu_ioctl+0x730/0x1730 [ 156.957565][ T9722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.957592][ T9722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.957617][ T9722] ? do_vfs_ioctl+0x226/0x13e0 [ 156.957647][ T9722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 156.957673][ T9722] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 156.957708][ T9722] ? __fget_files+0x215/0x3d0 [ 156.957727][ T9722] ? hook_file_ioctl_common+0x146/0x410 [ 156.957750][ T9722] ? selinux_file_ioctl+0x139/0x290 [ 156.957773][ T9722] ? selinux_file_ioctl+0xb4/0x290 [ 156.957801][ T9722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 156.957825][ T9722] __x64_sys_ioctl+0x18e/0x210 [ 156.957854][ T9722] do_syscall_64+0x106/0xf80 [ 156.957881][ T9722] ? clear_bhb_loop+0x40/0x90 [ 156.957901][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.957917][ T9722] RIP: 0033:0x7fba11f9c799 [ 156.957952][ T9722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.957967][ T9722] RSP: 002b:00007fba12ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.957984][ T9722] RAX: ffffffffffffffda RBX: 00007fba12215fa0 RCX: 00007fba11f9c799 [ 156.957995][ T9722] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 156.958006][ T9722] RBP: 00007fba12ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 156.958017][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.958028][ T9722] R13: 00007fba12216038 R14: 00007fba12215fa0 R15: 00007fffe0d83148 [ 156.958049][ T9722] [ 157.193904][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 157.197573][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 157.200898][ T9737] netlink: 'syz.2.1271': attribute type 15 has an invalid length. [ 157.311595][ T40] audit: type=1400 audit(1774311940.164:540): avc: denied { map } for pid=9738 comm="syz.2.1272" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.321675][ T40] audit: type=1400 audit(1774311940.164:541): avc: denied { execute } for pid=9738 comm="syz.2.1272" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.348484][ T9743] xt_limit: Overflow, try lower: 271964/0 [ 157.558465][ T9753] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 158.235496][ T6017] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 158.365850][ T6017] usb 7-1: device descriptor read/64, error -71 [ 158.416397][ T9771] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 158.434183][ T9771] 8021q: adding VLAN 0 to HW filter on device bond13 [ 158.609321][ T9781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9781 comm=syz.1.1286 [ 158.626096][ T6017] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 158.656281][ T9783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=9783 comm=syz.1.1287 [ 158.661844][ T9783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9783 comm=syz.1.1287 [ 158.754242][ T9792] netlink: 'syz.4.1291': attribute type 1 has an invalid length. [ 158.765607][ T6017] usb 7-1: device descriptor read/64, error -71 [ 158.780092][ T9792] 8021q: adding VLAN 0 to HW filter on device bond20 [ 158.805049][ T9802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9802 comm=syz.5.1294 [ 158.886054][ T6017] usb usb7-port1: attempt power cycle [ 158.921032][ T9813] netlink: 'syz.5.1297': attribute type 15 has an invalid length. [ 158.923605][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1297'. [ 158.929247][ T9813] netlink: 'syz.5.1297': attribute type 13 has an invalid length. [ 159.138699][ T9814] 9pnet_fd: p9_fd_create_unix (9814): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.142620][ T9821] tipc: Started in network mode [ 159.182699][ T9821] tipc: Node identity ac14140f, cluster identity 4711 [ 159.185868][ T9821] tipc: New replicast peer: 255.255.255.255 [ 159.189180][ T9821] tipc: Enabled bearer , priority 10 [ 159.235538][ T6017] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 159.255849][ T6017] usb 7-1: device descriptor read/8, error -71 [ 159.452739][ T9849] xt_hashlimit: max too large, truncated to 1048576 [ 159.495488][ T6017] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 159.506095][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 159.517681][ T6017] usb 7-1: device descriptor read/8, error -71 [ 159.547996][ T9855] bridge4: port 1(veth3) entered blocking state [ 159.550633][ T9855] bridge4: port 1(veth3) entered disabled state [ 159.552772][ T9855] veth3: entered allmulticast mode [ 159.556858][ T9855] veth3: entered promiscuous mode [ 159.573978][ T9855] bond19: (slave veth0_to_bond): Releasing active interface [ 159.579897][ T9855] bridge4: port 2(veth0_to_bond) entered blocking state [ 159.582706][ T9855] bridge4: port 2(veth0_to_bond) entered disabled state [ 159.588733][ T9855] veth0_to_bond: entered promiscuous mode [ 159.625670][ T6017] usb usb7-port1: unable to enumerate USB device [ 160.205710][ T6017] tipc: Node number set to 2886997007 [ 160.375671][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 160.536077][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 160.539673][ T9] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.542911][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.547216][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.550716][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.554730][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.557754][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.566168][ T9] usbtmc 10-1:16.0: bulk endpoints not found [ 160.591927][ T9898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1327'. [ 160.644635][ T9904] wg1 speed is unknown, defaulting to 1000 [ 160.923058][ T9918] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 160.938394][ T9918] 8021q: adding VLAN 0 to HW filter on device bond14 [ 160.944214][ T9918] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1331'. [ 161.031309][ T9925] fuse: Bad value for 'fd' [ 161.314353][ T9948] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 161.332081][ T9948] 8021q: adding VLAN 0 to HW filter on device bond15 [ 161.338045][ T9948] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1340'. [ 161.480986][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 161.480999][ T40] audit: type=1400 audit(1774311944.324:551): avc: denied { audit_read } for pid=9956 comm="syz.1.1344" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.509195][ T40] audit: type=1326 audit(1774311944.364:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.1.1345" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x0 [ 162.695640][ T9993] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 162.739280][ T9996] xt_hashlimit: overflow, rate too high: 0 [ 162.772175][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 162.779540][T10002] fuse: Bad value for 'fd' [ 162.781170][T10000] xfrm1: entered promiscuous mode [ 162.782799][T10000] xfrm1: entered allmulticast mode [ 162.908466][T10012] bond0: Error: Cannot enslave bond to itself. [ 163.152063][ T6019] usb 10-1: USB disconnect, device number 7 [ 163.193076][ T40] audit: type=1400 audit(1774311946.044:553): avc: denied { bind } for pid=10027 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.240918][T10028] netlink: 'syz.5.1363': attribute type 1 has an invalid length. [ 163.247118][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1363'. [ 163.295523][ T5288] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 163.299365][ T5288] Bluetooth: hci1: Injecting HCI hardware error event [ 163.304354][ T5288] Bluetooth: hci1: hardware error 0x00 [ 163.588514][T10043] xt_socket: unknown flags 0xc [ 164.064094][T10065] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 164.077020][T10065] 8021q: adding VLAN 0 to HW filter on device bond16 [ 164.090892][T10065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1373'. [ 164.226219][ T1329] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 164.377302][ T1329] usb 7-1: Using ep0 maxpacket: 8 [ 164.383740][ T1329] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.388370][ T1329] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.393089][ T1329] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.398388][ T1329] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.403847][ T1329] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.410384][ T1329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.426468][ T1329] usbtmc 7-1:16.0: bulk endpoints not found [ 164.719526][T10095] fuse: Unknown parameter '¦“•j«ÅÚïËÆ%´cî[Ÿt`ÔºÄãoïÂE¤' [ 164.806724][T10105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10105 comm=syz.5.1388 [ 164.813926][T10105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10105 comm=syz.5.1388 [ 164.989747][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1389'. [ 165.195911][T10122] Bluetooth: MGMT ver 1.23 [ 165.237892][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1396'. [ 165.249462][T10127] fuse: Bad value for 'fd' [ 165.328388][T10135] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 165.351562][T10135] 8021q: adding VLAN 0 to HW filter on device bond21 [ 165.362491][T10135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1398'. [ 165.375588][ T5288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 165.460782][T10148] block nbd1: not configured, cannot reconfigure [ 165.490078][T10152] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 165.492874][T10152] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.496727][T10152] vhci_hcd vhci_hcd.0: Device attached [ 165.502663][T10153] vhci_hcd: connection closed [ 165.504154][ T1161] vhci_hcd vhci_hcd.5: stop threads [ 165.510962][ T1161] vhci_hcd vhci_hcd.5: release socket [ 165.513673][ T1161] vhci_hcd vhci_hcd.5: disconnect device [ 166.115007][T10170] fuse: Bad value for 'user_id' [ 166.117253][T10170] fuse: Bad value for 'user_id' [ 166.555174][ T40] audit: type=1400 audit(1774311949.404:554): avc: denied { write } for pid=10191 comm="syz.4.1417" path="socket:[40933]" dev="sockfs" ino=40933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.563449][ T40] audit: type=1400 audit(1774311949.414:555): avc: denied { accept } for pid=10191 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.571254][ T40] audit: type=1400 audit(1774311949.414:556): avc: denied { read } for pid=10191 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.593617][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 166.813047][ T40] audit: type=1400 audit(1774311949.664:557): avc: denied { map } for pid=10203 comm="syz.4.1423" path="socket:[41767]" dev="sockfs" ino=41767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.849680][T10206] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 166.862438][T10206] 8021q: adding VLAN 0 to HW filter on device bond22 [ 166.869918][T10206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1424'. [ 166.986874][ T6016] usb 7-1: USB disconnect, device number 35 [ 167.046155][T10220] netlink: 'syz.1.1428': attribute type 1 has an invalid length. [ 167.356498][T10235] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1434'. [ 167.359890][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'. [ 167.606011][ T6016] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 167.755447][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 167.760573][ T6016] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.764347][ T6016] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.768846][ T6016] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.773641][ T6016] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.779345][ T6016] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.783153][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.798149][ T6016] usbtmc 7-1:16.0: bulk endpoints not found [ 168.899834][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 169.037430][ T40] audit: type=1400 audit(1774311951.894:558): avc: denied { getattr } for pid=10259 comm="syz.1.1443" path="socket:[43038]" dev="sockfs" ino=43038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.099501][T10281] fuse: Bad value for 'fd' [ 169.106119][ T40] audit: type=1400 audit(1774311951.964:559): avc: denied { getopt } for pid=10282 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.246753][ T29] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 169.301557][ T40] audit: type=1400 audit(1774311952.154:560): avc: denied { connect } for pid=10301 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.425392][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 169.435219][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.439628][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.443991][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.445996][T10307] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1461'. [ 169.448438][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.457980][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.462283][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.677424][ T29] usb 10-1: usb_control_msg returned -32 [ 169.679304][ T29] usbtmc 10-1:16.0: can't read capabilities [ 169.689242][ T29] usb 10-1: USB disconnect, device number 8 [ 170.310090][T10318] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1465'. [ 170.326681][T10330] fuse: Unknown parameter 'U' [ 170.384305][ T29] usb 7-1: USB disconnect, device number 36 [ 170.534441][ T40] audit: type=1400 audit(1774311953.384:561): avc: denied { accept } for pid=10343 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.751286][ T40] audit: type=1400 audit(1774311953.604:562): avc: denied { unmount } for pid=7635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.807183][ T29] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 170.938641][T10354] kAFS: unable to lookup cell '(,c¾ûL' [ 170.959674][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 170.965505][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.968592][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.972088][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.977050][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.981729][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.984787][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.062915][ T40] audit: type=1400 audit(1774311953.914:563): avc: denied { ioctl } for pid=10360 comm="syz.5.1483" path="socket:[44124]" dev="sockfs" ino=44124 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 171.220290][ T29] usb 7-1: usb_control_msg returned -32 [ 171.222631][ T29] usbtmc 7-1:16.0: can't read capabilities [ 171.257833][ T29] usb 7-1: USB disconnect, device number 37 [ 171.710579][T10388] FAULT_INJECTION: forcing a failure. [ 171.710579][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 171.715261][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.5.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.715293][T10388] Tainted: [L]=SOFTLOCKUP [ 171.715298][T10388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.715321][T10388] Call Trace: [ 171.715330][T10388] [ 171.715337][T10388] dump_stack_lvl+0x100/0x190 [ 171.715375][T10388] should_fail_ex.cold+0x5/0xa [ 171.715391][T10388] should_failslab+0xc2/0x120 [ 171.715405][T10388] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 171.715434][T10388] ? alloc_empty_file+0x55/0x1c0 [ 171.715449][T10388] ? is_bpf_text_address+0x8a/0x1a0 [ 171.715470][T10388] alloc_empty_file+0x55/0x1c0 [ 171.715485][T10388] path_openat+0xe8/0x31a0 [ 171.715497][T10388] ? __kernel_text_address+0xd/0x30 [ 171.715512][T10388] ? unwind_get_return_address+0x59/0xa0 [ 171.715528][T10388] ? arch_stack_walk+0xa6/0xf0 [ 171.715545][T10388] ? __pfx_path_openat+0x10/0x10 [ 171.715559][T10388] ? stack_trace_save+0x8e/0xc0 [ 171.715575][T10388] ? __pfx_stack_trace_save+0x10/0x10 [ 171.715593][T10388] do_file_open+0x20e/0x430 [ 171.715607][T10388] ? __pfx_do_file_open+0x10/0x10 [ 171.715618][T10388] ? kasan_save_track+0x14/0x30 [ 171.715635][T10388] ? __kasan_slab_alloc+0x89/0x90 [ 171.715645][T10388] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 171.715670][T10388] ? _raw_spin_unlock+0x28/0x50 [ 171.715693][T10388] ? alloc_fd+0x476/0x790 [ 171.715711][T10388] io_openat2+0x1f9/0x7d0 [ 171.715739][T10388] ? __pfx_io_openat2+0x10/0x10 [ 171.715760][T10388] __io_issue_sqe+0xe8/0x7a0 [ 171.715781][T10388] io_issue_sqe+0x89/0x1410 [ 171.715794][T10388] ? delayed_getname+0x5d/0x90 [ 171.715804][T10388] ? __io_openat_prep+0x2f4/0x3d0 [ 171.715821][T10388] io_submit_sqes+0xaf8/0x2370 [ 171.715841][T10388] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 171.715858][T10388] ? __fget_files+0x21f/0x3d0 [ 171.715870][T10388] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 171.715886][T10388] ? fput+0x79/0x100 [ 171.715899][T10388] ? ksys_write+0x1ac/0x250 [ 171.715909][T10388] ? __pfx_ksys_write+0x10/0x10 [ 171.715923][T10388] do_syscall_64+0x106/0xf80 [ 171.715939][T10388] ? clear_bhb_loop+0x40/0x90 [ 171.715954][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.715966][T10388] RIP: 0033:0x7f6679f9c799 [ 171.715978][T10388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.715989][T10388] RSP: 002b:00007f667ae00028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 171.716001][T10388] RAX: ffffffffffffffda RBX: 00007f667a215fa0 RCX: 00007f6679f9c799 [ 171.716008][T10388] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 171.716014][T10388] RBP: 00007f667ae00090 R08: 0000000000000000 R09: 0000000000000000 [ 171.716021][T10388] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 171.716027][T10388] R13: 00007f667a216038 R14: 00007f667a215fa0 R15: 00007ffd280fe618 [ 171.716041][T10388] [ 171.884966][T10399] binder: 10398:10399 ioctl c0286415 200000000040 returned -22 [ 172.119061][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 172.119077][ T40] audit: type=1400 audit(1774311954.974:566): avc: denied { create } for pid=10404 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 172.131112][ T40] audit: type=1400 audit(1774311954.974:567): avc: denied { write } for pid=10404 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 172.187594][T10411] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 172.192097][ T40] audit: type=1400 audit(1774311955.044:568): avc: denied { relabelto } for pid=10404 comm="syz.2.1499" name="cpu.stat" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 172.203184][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 172.205421][ T40] audit: type=1400 audit(1774311955.044:569): avc: denied { associate } for pid=10404 comm="syz.2.1499" name="cpu.stat" dev="tmpfs" ino=1446 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 172.217926][ T40] audit: type=1400 audit(1774311955.054:570): avc: denied { append } for pid=10404 comm="syz.2.1499" path="/273/cpu.stat" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 172.219550][T10411] batman_adv: batadv0: Adding interface: gretap1 [ 172.228621][ T40] audit: type=1400 audit(1774311955.064:571): avc: denied { module_request } for pid=10408 comm="syz.1.1501" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.230191][T10411] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.247040][T10411] batman_adv: batadv0: Interface activated: gretap1 [ 172.792772][T10447] loop5: detected capacity change from 0 to 2640 [ 172.797504][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.801562][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.804432][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.809197][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.813706][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.818102][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.821602][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.824820][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.829756][T10447] ldm_validate_partition_table(): Disk read failed. [ 172.832520][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.835857][T10447] Buffer I/O error on dev loop5, logical block 0, async page read [ 172.840294][T10447] Dev loop5: unable to read RDB block 0 [ 172.843566][T10447] loop5: unable to read partition table [ 172.848111][T10447] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 172.886600][T10447] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1512'. [ 172.975376][ T40] audit: type=1400 audit(1774311955.824:572): avc: denied { unlink } for pid=5930 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 173.040502][T10457] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 173.042686][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.047776][T10457] vhci_hcd vhci_hcd.0: Device attached [ 173.052051][T10458] vhci_hcd: connection closed [ 173.052492][ T1197] vhci_hcd vhci_hcd.2: stop threads [ 173.061812][ T1197] vhci_hcd vhci_hcd.2: release socket [ 173.066060][ T1197] vhci_hcd vhci_hcd.2: disconnect device [ 173.128059][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1517'. [ 173.169798][ T40] audit: type=1400 audit(1774311956.024:573): avc: denied { map } for pid=10460 comm="syz.5.1517" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.201408][T10461] sch_fq: defrate 0 ignored. [ 173.579505][T10479] fuse: Unknown parameter 'U' [ 173.630483][ T40] audit: type=1400 audit(1774311956.484:574): avc: denied { create } for pid=10480 comm="syz.4.1524" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.652268][T10481] kAFS: unparsable volume name [ 173.689835][ T40] audit: type=1400 audit(1774311956.544:575): avc: denied { unlink } for pid=7315 comm="syz-executor" name="file0" dev="tmpfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.211481][T10512] FAULT_INJECTION: forcing a failure. [ 174.211481][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.215677][T10512] CPU: 2 UID: 0 PID: 10512 Comm: syz.5.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.215695][T10512] Tainted: [L]=SOFTLOCKUP [ 174.215699][T10512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.215706][T10512] Call Trace: [ 174.215710][T10512] [ 174.215714][T10512] dump_stack_lvl+0x100/0x190 [ 174.215738][T10512] should_fail_ex.cold+0x5/0xa [ 174.215754][T10512] _copy_to_user+0x32/0xd0 [ 174.215768][T10512] simple_read_from_buffer+0xcb/0x170 [ 174.215782][T10512] proc_fail_nth_read+0x1af/0x230 [ 174.215800][T10512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.215809][ T6019] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 174.215817][T10512] ? rw_verify_area+0xce/0x6d0 [ 174.215833][T10512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.215849][T10512] vfs_read+0x1e4/0xb30 [ 174.215869][T10512] ? __pfx_vfs_read+0x10/0x10 [ 174.215886][T10512] ? __fget_files+0x215/0x3d0 [ 174.215901][T10512] ? __fget_files+0x21f/0x3d0 [ 174.215917][T10512] ksys_read+0x12a/0x250 [ 174.215927][T10512] ? __pfx_ksys_read+0x10/0x10 [ 174.215940][T10512] do_syscall_64+0x106/0xf80 [ 174.215956][T10512] ? clear_bhb_loop+0x40/0x90 [ 174.215970][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.215981][T10512] RIP: 0033:0x7f6679f5cfce [ 174.215992][T10512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.216003][T10512] RSP: 002b:00007f667addefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.216014][T10512] RAX: ffffffffffffffda RBX: 00007f667addf6c0 RCX: 00007f6679f5cfce [ 174.216021][T10512] RDX: 000000000000000f RSI: 00007f667addf0a0 RDI: 0000000000000008 [ 174.216027][T10512] RBP: 00007f667addf090 R08: 0000000000000000 R09: 0000000000000000 [ 174.216034][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.216040][T10512] R13: 00007f667a216128 R14: 00007f667a216090 R15: 00007ffd280fe618 [ 174.216054][T10512] [ 174.445440][ T6019] usb 7-1: Using ep0 maxpacket: 8 [ 174.454960][ T6019] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.460357][ T6019] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.464314][ T6019] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.468823][ T6019] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.474549][ T6019] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.479057][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.567726][T10525] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1539'. [ 174.685910][T10532] xt_hashlimit: size too large, truncated to 1048576 [ 174.702822][ T6019] usb 7-1: GET_CAPABILITIES returned 0 [ 174.704862][ T6019] usbtmc 7-1:16.0: can't read capabilities [ 174.907076][T10545] fuse: Bad value for 'fd' [ 174.913512][ T6019] usb 7-1: USB disconnect, device number 38 [ 174.971198][T10552] fuse: Unknown parameter 'U' [ 175.041926][T10554] tipc: Enabling of bearer rejected, already enabled [ 175.052319][T10554] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 175.143274][T10558] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1547'. [ 175.204393][ T6016] IPVS: starting estimator thread 0... [ 175.228646][T10572] netlink: 'syz.5.1554': attribute type 10 has an invalid length. [ 175.268571][T10576] fuse: Bad value for 'fd' [ 175.325763][T10568] IPVS: using max 43 ests per chain, 103200 per kthread [ 175.531389][T10606] loop7: detected capacity change from 0 to 7 [ 175.535611][T10606] Dev loop7: unable to read RDB block 7 [ 175.537668][T10606] loop7: unable to read partition table [ 175.539537][T10606] loop7: partition table beyond EOD, truncated [ 175.555679][T10606] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 175.611985][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 175.614911][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 175.620521][T10610] fuse: Unknown parameter 'U' [ 175.806188][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'. [ 175.857748][T10631] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.916464][T10635] binfmt_misc: register: failed to install interpreter file ./file1 [ 176.057605][T10643] loop2: detected capacity change from 0 to 7 [ 176.065591][T10643] Dev loop2: unable to read RDB block 7 [ 176.076355][T10643] loop2: AHDI p2 [ 176.078049][T10643] loop2: partition table partially beyond EOD, truncated [ 176.178317][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 176.440120][T10664] fuse: Bad value for 'fd' [ 177.048204][T10689] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 177.194373][T10706] fuse: Bad value for 'fd' [ 177.246112][T10709] fuse: Bad value for 'fd' [ 177.392592][T10719] binder: 10718:10719 ioctl c0306201 0 returned -14 [ 177.472151][T10720] bond17: entered promiscuous mode [ 177.474965][T10720] 8021q: adding VLAN 0 to HW filter on device bond17 [ 178.063115][T10740] fuse: Unknown parameter 'U' [ 178.102628][T10743] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 178.152654][T10743] 8021q: adding VLAN 0 to HW filter on device bond18 [ 178.162900][T10743] bond1: (slave veth0_to_bond): Releasing active interface [ 178.169602][T10743] bond18: (slave veth0_to_bond): making interface the new active one [ 178.172889][T10743] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.234434][T10750] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 178.448761][T10759] FAULT_INJECTION: forcing a failure. [ 178.448761][T10759] name failslab, interval 1, probability 0, space 0, times 0 [ 178.452745][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.5.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.452763][T10759] Tainted: [L]=SOFTLOCKUP [ 178.452767][T10759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.452774][T10759] Call Trace: [ 178.452779][T10759] [ 178.452784][T10759] dump_stack_lvl+0x100/0x190 [ 178.452807][T10759] should_fail_ex.cold+0x5/0xa [ 178.452822][T10759] should_failslab+0xc2/0x120 [ 178.452834][T10759] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 178.452851][T10759] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.452872][T10759] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 178.452894][T10759] mmu_topup_memory_caches+0x25/0x170 [ 178.452908][T10759] kvm_mmu_load+0xd6/0x23e0 [ 178.452920][T10759] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 178.452936][T10759] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 178.452953][T10759] ? __pfx_kvm_mmu_load+0x10/0x10 [ 178.452965][T10759] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 178.452984][T10759] ? kvm_check_and_inject_events+0x961/0x10c0 [ 178.452997][T10759] ? record_steal_time+0x3f0/0xbe0 [ 178.453015][T10759] vcpu_run+0x39f4/0x5ca0 [ 178.453055][T10759] ? __pfx_vcpu_run+0x10/0x10 [ 178.453074][T10759] ? rcu_is_watching+0x12/0xc0 [ 178.453090][T10759] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.453104][T10759] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 178.453122][T10759] kvm_vcpu_ioctl+0x730/0x1730 [ 178.453140][T10759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.453157][T10759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.453174][T10759] ? do_vfs_ioctl+0x226/0x13e0 [ 178.453191][T10759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 178.453208][T10759] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 178.453230][T10759] ? __fget_files+0x215/0x3d0 [ 178.453242][T10759] ? hook_file_ioctl_common+0x146/0x410 [ 178.453257][T10759] ? selinux_file_ioctl+0x139/0x290 [ 178.453272][T10759] ? selinux_file_ioctl+0xb4/0x290 [ 178.453294][T10759] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 178.453312][T10759] __x64_sys_ioctl+0x18e/0x210 [ 178.453330][T10759] do_syscall_64+0x106/0xf80 [ 178.453346][T10759] ? clear_bhb_loop+0x40/0x90 [ 178.453360][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.453371][T10759] RIP: 0033:0x7f6679f9c799 [ 178.453383][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.453393][T10759] RSP: 002b:00007f667ae00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.453404][T10759] RAX: ffffffffffffffda RBX: 00007f667a215fa0 RCX: 00007f6679f9c799 [ 178.453411][T10759] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 178.453418][T10759] RBP: 00007f667ae00090 R08: 0000000000000000 R09: 0000000000000000 [ 178.453424][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.453430][T10759] R13: 00007f667a216038 R14: 00007f667a215fa0 R15: 00007ffd280fe618 [ 178.453444][T10759] [ 178.634957][T10770] F2FS-fs: Conflicting test_dummy_encryption options [ 178.636639][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 178.636653][ T40] audit: type=1400 audit(1774311961.484:580): avc: denied { ioctl } for pid=10767 comm="syz.4.1626" path="socket:[43498]" dev="sockfs" ino=43498 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.695737][ T40] audit: type=1400 audit(1774311961.494:581): avc: denied { ioctl } for pid=10767 comm="syz.4.1626" path="socket:[43496]" dev="sockfs" ino=43496 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 178.705303][ T40] audit: type=1400 audit(1774311961.494:582): avc: denied { ioctl } for pid=10769 comm="syz.2.1627" path="socket:[42852]" dev="sockfs" ino=42852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 178.751562][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1630'. [ 178.772881][T10776] fuse: Bad value for 'user_id' [ 178.775174][T10776] fuse: Bad value for 'user_id' [ 178.815013][ T40] audit: type=1400 audit(1774311961.664:583): avc: denied { mounton } for pid=10771 comm="syz.2.1629" path="/302/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 179.099202][ T40] audit: type=1400 audit(1774311961.954:584): avc: denied { mount } for pid=10799 comm="syz.2.1637" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.129490][ T40] audit: type=1400 audit(1774311961.984:585): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.170701][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 179.185057][T10806] 8021q: adding VLAN 0 to HW filter on device bond16 [ 179.196118][T10809] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1641'. [ 179.204118][ T40] audit: type=1400 audit(1774311962.054:586): avc: denied { setopt } for pid=10808 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.303602][T10814] fuse: Bad value for 'fd' [ 179.312827][T10816] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 179.353642][T10819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10819 comm=syz.4.1644 [ 179.363477][T10819] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 179.387023][T10819] 8021q: adding VLAN 0 to HW filter on device bond23 [ 179.461204][ T40] audit: type=1400 audit(1774311962.314:587): avc: denied { getopt } for pid=10823 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.511647][T10822] FAULT_INJECTION: forcing a failure. [ 179.511647][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 179.518142][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.2.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.518174][T10822] Tainted: [L]=SOFTLOCKUP [ 179.518182][T10822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.518194][T10822] Call Trace: [ 179.518200][T10822] [ 179.518208][T10822] dump_stack_lvl+0x100/0x190 [ 179.518258][T10822] should_fail_ex.cold+0x5/0xa [ 179.518293][T10822] should_failslab+0xc2/0x120 [ 179.518316][T10822] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 179.518345][T10822] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 179.518384][T10822] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 179.518424][T10822] mmu_topup_memory_caches+0x25/0x170 [ 179.518449][T10822] kvm_mmu_load+0xd6/0x23e0 [ 179.518474][T10822] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 179.518502][T10822] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 179.518533][T10822] ? __pfx_kvm_mmu_load+0x10/0x10 [ 179.518555][T10822] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 179.518588][T10822] ? kvm_check_and_inject_events+0x961/0x10c0 [ 179.518611][T10822] ? record_steal_time+0x3f0/0xbe0 [ 179.518642][T10822] vcpu_run+0x39f4/0x5ca0 [ 179.518679][T10822] ? __pfx_vcpu_run+0x10/0x10 [ 179.518713][T10822] ? rcu_is_watching+0x12/0xc0 [ 179.518742][T10822] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 179.518767][T10822] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 179.518801][T10822] kvm_vcpu_ioctl+0x730/0x1730 [ 179.518833][T10822] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.518863][T10822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.518895][T10822] ? do_vfs_ioctl+0x226/0x13e0 [ 179.518924][T10822] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.518955][T10822] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.519002][T10822] ? __fget_files+0x215/0x3d0 [ 179.519023][T10822] ? hook_file_ioctl_common+0x146/0x410 [ 179.519053][T10822] ? selinux_file_ioctl+0x139/0x290 [ 179.519080][T10822] ? selinux_file_ioctl+0xb4/0x290 [ 179.519112][T10822] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.519142][T10822] __x64_sys_ioctl+0x18e/0x210 [ 179.519171][T10822] do_syscall_64+0x106/0xf80 [ 179.519207][T10822] ? clear_bhb_loop+0x40/0x90 [ 179.519233][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.519254][T10822] RIP: 0033:0x7f314699c799 [ 179.519279][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.519300][T10822] RSP: 002b:00007f3147816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.519321][T10822] RAX: ffffffffffffffda RBX: 00007f3146c15fa0 RCX: 00007f314699c799 [ 179.519333][T10822] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 179.519346][T10822] RBP: 00007f3147816090 R08: 0000000000000000 R09: 0000000000000000 [ 179.519357][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.519370][T10822] R13: 00007f3146c16038 R14: 00007f3146c15fa0 R15: 00007ffe3a8ad5d8 [ 179.519398][T10822] [ 179.657382][ T1329] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 179.682824][T10831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.785743][ T1329] usb 10-1: device descriptor read/64, error -71 [ 179.843661][T10845] FAULT_INJECTION: forcing a failure. [ 179.843661][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 179.849461][T10845] CPU: 2 UID: 0 PID: 10845 Comm: syz.2.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.849480][T10845] Tainted: [L]=SOFTLOCKUP [ 179.849484][T10845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.849491][T10845] Call Trace: [ 179.849495][T10845] [ 179.849499][T10845] dump_stack_lvl+0x100/0x190 [ 179.849522][T10845] should_fail_ex.cold+0x5/0xa [ 179.849537][T10845] should_failslab+0xc2/0x120 [ 179.849549][T10845] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 179.849566][T10845] ? __alloc_skb+0x140/0x710 [ 179.849583][T10845] __alloc_skb+0x140/0x710 [ 179.849596][T10845] ? __alloc_skb+0x5b7/0x710 [ 179.849609][T10845] ? __pfx___alloc_skb+0x10/0x10 [ 179.849622][T10845] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.849639][T10845] sock_wmalloc+0xd4/0x120 [ 179.849652][T10845] pppoe_sendmsg+0x2c0/0x7b0 [ 179.849667][T10845] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 179.849683][T10845] sock_write_iter+0x524/0x5a0 [ 179.849700][T10845] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 179.849711][T10845] ? __pfx_sock_write_iter+0x10/0x10 [ 179.849735][T10845] ? __pfx_file_has_perm+0x10/0x10 [ 179.849750][T10845] do_iter_readv_writev+0x6ee/0x920 [ 179.849768][T10845] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 179.849784][T10845] ? selinux_file_permission+0x8f/0x6d0 [ 179.849802][T10845] ? bpf_lsm_file_permission+0x9/0x10 [ 179.849820][T10845] ? security_file_permission+0x76/0x210 [ 179.849837][T10845] ? rw_verify_area+0xce/0x6d0 [ 179.849854][T10845] vfs_writev+0x360/0xe10 [ 179.849874][T10845] ? __pfx_vfs_writev+0x10/0x10 [ 179.849892][T10845] ? find_held_lock+0x2b/0x80 [ 179.849915][T10845] ? __fget_files+0x21f/0x3d0 [ 179.849931][T10845] ? do_writev+0x28a/0x340 [ 179.849946][T10845] do_writev+0x28a/0x340 [ 179.849963][T10845] ? __pfx_do_writev+0x10/0x10 [ 179.849983][T10845] do_syscall_64+0x106/0xf80 [ 179.849999][T10845] ? clear_bhb_loop+0x40/0x90 [ 179.850013][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.850027][T10845] RIP: 0033:0x7f314699c799 [ 179.850040][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.850056][T10845] RSP: 002b:00007f3147816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 179.850071][T10845] RAX: ffffffffffffffda RBX: 00007f3146c15fa0 RCX: 00007f314699c799 [ 179.850081][T10845] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 179.850089][T10845] RBP: 00007f3147816090 R08: 0000000000000000 R09: 0000000000000000 [ 179.850098][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.850109][T10845] R13: 00007f3146c16038 R14: 00007f3146c15fa0 R15: 00007ffe3a8ad5d8 [ 179.850133][T10845] [ 179.957273][T10847] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 180.085969][ T1329] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 180.215487][ T1329] usb 10-1: device descriptor read/64, error -71 [ 180.335857][ T1329] usb usb10-port1: attempt power cycle [ 180.655969][T10859] tipc: Enabling of bearer rejected, failed to enable media [ 180.685465][ T1329] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 180.705875][ T1329] usb 10-1: device descriptor read/8, error -71 [ 180.945435][ T1329] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 180.966689][ T1329] usb 10-1: device descriptor read/8, error -71 [ 181.010860][T10868] fuse: Bad value for 'fd' [ 181.048126][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 181.075822][ T1329] usb usb10-port1: unable to enumerate USB device [ 181.115223][T10873] /dev/loop1: Can't lookup blockdev [ 181.652058][T10916] wg1 speed is unknown, defaulting to 1000 [ 181.873427][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 181.877516][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 181.887399][T10922] ip6gretap0: entered promiscuous mode [ 181.890188][T10922] macsec1: entered promiscuous mode [ 181.892648][T10922] macsec1: entered allmulticast mode [ 181.894988][T10922] ip6gretap0: entered allmulticast mode [ 182.047698][ T40] audit: type=1400 audit(1774311964.904:588): avc: denied { ioctl } for pid=10924 comm="syz.2.1683" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 182.526545][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 182.530947][T10941] random: crng reseeded on system resumption [ 182.543599][T10947] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 182.561844][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'. [ 182.564844][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'. [ 182.569973][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1692'. [ 182.574277][T10941] ALSA: seq fatal error: cannot create timer (-16) [ 182.645074][T10954] ipt_REJECT: ECHOREPLY no longer supported. [ 182.991096][T10981] kvm: kvm [10980]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x0 [ 183.289304][ T40] audit: type=1400 audit(1774311966.144:589): avc: denied { setattr } for pid=11010 comm="syz.4.1719" name="NETLINK" dev="sockfs" ino=43962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.594229][T11038] fuse: Bad value for 'fd' [ 183.596861][T11038] fuse: Bad value for 'fd' [ 183.600979][ T1329] IPVS: starting estimator thread 0... [ 183.695464][T11043] IPVS: using max 44 ests per chain, 105600 per kthread [ 183.735980][ T1329] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 183.885470][ T1329] usb 10-1: Invalid ep0 maxpacket: 16 [ 184.015644][ T1329] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 184.165455][ T1329] usb 10-1: Invalid ep0 maxpacket: 16 [ 184.167756][ T1329] usb usb10-port1: attempt power cycle [ 184.431644][T11070] __nla_validate_parse: 5 callbacks suppressed [ 184.431660][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 184.437533][T11070] netlink: 'syz.1.1741': attribute type 5 has an invalid length. [ 184.440098][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 184.448272][ T1161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.449300][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 184.451197][ T1161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.454404][T11070] netlink: 'syz.1.1741': attribute type 5 has an invalid length. [ 184.454418][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1741'. [ 184.463580][ T1161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.467472][ T210] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.505790][ T1329] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 184.505822][ T54] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 184.509758][ T40] audit: type=1400 audit(1774311967.364:590): avc: denied { unmount } for pid=11075 comm="syz.1.1744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 184.529902][ T1329] usb 10-1: Invalid ep0 maxpacket: 16 [ 184.556083][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 184.655883][ T1329] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 184.676476][ T1329] usb 10-1: Invalid ep0 maxpacket: 16 [ 184.680305][ T1329] usb usb10-port1: unable to enumerate USB device [ 184.695594][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 184.701101][ T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.705222][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.709495][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.714907][ T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.721359][ T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.724946][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.940137][ T54] usb 7-1: usb_control_msg returned -32 [ 184.942699][ T54] usbtmc 7-1:16.0: can't read capabilities [ 184.960107][ T54] usb 7-1: USB disconnect, device number 39 [ 185.488125][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 185.492899][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 185.500461][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 185.504552][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 185.510541][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 185.516794][T11121] openvswitch: netlink: Missing key (keys=40, expected=80) [ 185.558490][T11127] netlink: 'syz.4.1761': attribute type 1 has an invalid length. [ 185.581646][T11127] bond24: entered promiscuous mode [ 185.584271][T11127] 8021q: adding VLAN 0 to HW filter on device bond24 [ 185.594673][ T40] audit: type=1400 audit(1774311968.444:591): avc: denied { name_bind } for pid=11126 comm="syz.4.1761" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 185.885225][T11144] fuse: Invalid rootmode [ 185.944563][ T6016] IPVS: starting estimator thread 0... [ 186.015611][ T5288] Bluetooth: hci3: command 0x0406 tx timeout [ 186.045533][T11145] IPVS: using max 43 ests per chain, 103200 per kthread [ 186.455988][T11176] xt_hashlimit: size too large, truncated to 1048576 [ 186.616008][T11183] fuse: Bad value for 'fd' [ 186.618205][T11183] fuse: Bad value for 'fd' [ 187.496307][T11208] Cannot find add_set index 46338 as target [ 187.639209][T11227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 187.671748][T11235] fuse: Invalid rootmode [ 188.151425][ T40] audit: type=1326 audit(1774311971.004:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.4.1798" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f929f79c799 code=0x0 [ 189.079655][T11288] fuse: Bad value for 'fd' [ 189.379690][ T5288] Bluetooth: hci4: command 0x0406 tx timeout [ 189.447020][ T40] audit: type=1400 audit(1774311972.304:593): avc: denied { read } for pid=11308 comm="syz.2.1824" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.624337][ T40] audit: type=1400 audit(1774311972.474:594): avc: denied { create } for pid=11321 comm="syz.5.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 189.657889][T11318] kvm: pic: single mode not supported [ 189.659802][T11318] kvm: pic: level sensitive irq not supported [ 189.762154][ T40] audit: type=1400 audit(1774311972.614:595): avc: denied { getopt } for pid=11332 comm="syz.2.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 189.937752][T11337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11337 comm=syz.5.1830 [ 189.967483][T11351] fuse: Bad value for 'fd' [ 190.031535][T11356] __nla_validate_parse: 11 callbacks suppressed [ 190.031556][T11356] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1837'. [ 190.133393][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1842'. [ 190.140522][T11369] netlink: 'syz.5.1842': attribute type 10 has an invalid length. [ 190.150460][T11369] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1842'. [ 190.210470][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 190.241890][T11374] netlink: 'syz.1.1845': attribute type 7 has an invalid length. [ 190.245246][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 190.251047][T11374] netlink: 'syz.1.1845': attribute type 7 has an invalid length. [ 190.254461][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 190.304860][T11383] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1848'. [ 190.310332][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'. [ 190.526252][T11393] geneve2: entered promiscuous mode [ 190.557292][T11404] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.560779][T11404] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.732902][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 190.739202][T11416] ip_vti0: Master is either lo or non-ether device [ 190.830229][T11418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1856'. [ 191.216691][ T40] audit: type=1400 audit(1774311974.074:596): avc: denied { read } for pid=11423 comm="syz.2.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.390360][T11434] bond25 (unregistering): Released all slaves [ 191.590220][T11440] xt_hashlimit: size too large, truncated to 1048576 [ 191.905830][ T40] audit: type=1400 audit(1774311974.764:597): avc: denied { bind } for pid=11449 comm="syz.2.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 192.606599][T11496] overlayfs: failed to clone upperpath [ 192.668659][T11505] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.671485][T11505] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.824349][T11513] bond12: (slave dummy0): Releasing active interface [ 192.831622][T11513] bond0: (slave batadv0): Releasing backup interface [ 192.840753][T11513] bridge_slave_0: left allmulticast mode [ 192.843131][T11513] bridge_slave_0: left promiscuous mode [ 192.845980][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.855492][T11513] bridge_slave_1: left allmulticast mode [ 192.857826][T11513] bridge_slave_1: left promiscuous mode [ 192.860232][T11513] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.869960][T11513] bond18: (slave veth0_to_bond): Releasing active interface [ 192.877503][T11513] bond0: (slave bond_slave_0): Releasing backup interface [ 192.883748][T11513] bond0: (slave bond_slave_1): Releasing backup interface [ 192.893996][T11513] team0: Port device team_slave_0 removed [ 192.901031][T11513] team0: Port device team_slave_1 removed [ 192.904310][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.907889][T11513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.912568][T11513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.915722][T11513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.920481][T11513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.938239][ T13] bond8: (slave vlan2): link status definitely down, disabling slave [ 192.944834][ T13] bond8: now running without any active interface! [ 193.101887][T11523] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 193.115480][T11523] 8021q: adding VLAN 0 to HW filter on device bond19 [ 193.129015][T11523] bond19: (slave geneve2): making interface the new active one [ 193.132399][T11523] bond19: (slave geneve2): Enslaving as an active interface with an up link [ 193.221751][ T40] audit: type=1804 audit(1774311976.074:598): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1888" name="file0" dev="tmpfs" ino=2770 res=1 errno=0 [ 193.232548][T11528] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 193.238234][T11528] ref_ctr increment failed for inode: 0xad2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803c4b0c40 [ 193.244155][T11528] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 193.248813][T11528] ref_ctr decrement failed for inode: 0xad2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803c4b0c40 [ 193.253307][T11528] uprobe: syz.4.1888:11528 failed to unregister, leaking uprobe [ 193.428447][T11545] Process accounting resumed [ 193.564551][T11563] fuse: Bad value for 'fd' [ 193.614815][T11565] xt_hashlimit: size too large, truncated to 1048576 [ 193.725614][ T39] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 193.876630][ T39] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 193.880271][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.883230][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.887273][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.891119][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.894649][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.898299][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.901155][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.903925][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.908855][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.913442][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.917905][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.922357][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.928740][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.932800][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.937823][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.942118][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.946260][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.950404][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.953784][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.959560][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.964100][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.968271][ T39] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.972622][ T39] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.977065][ T39] usb 10-1: config 0 interface 0 has no altsetting 0 [ 193.980856][ T39] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 193.983827][ T39] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 193.986807][ T39] usb 10-1: Product: syz [ 193.988789][ T39] usb 10-1: Manufacturer: syz [ 193.990869][ T39] usb 10-1: SerialNumber: syz [ 194.002491][ T39] usb 10-1: config 0 descriptor?? [ 194.007976][ T39] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.347850][ T40] audit: type=1800 audit(1774311977.204:599): pid=11626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1925" name="nullb0" dev="tmpfs" ino=2843 res=0 errno=0 [ 194.438421][ T40] audit: type=1400 audit(1774311977.294:600): avc: denied { create } for pid=11632 comm="syz.1.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 194.486453][ T40] audit: type=1400 audit(1774311977.344:601): avc: denied { write } for pid=11632 comm="syz.1.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 194.687018][T11646] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 194.703290][T11647] FAULT_INJECTION: forcing a failure. [ 194.703290][T11647] name failslab, interval 1, probability 0, space 0, times 0 [ 194.707504][T11647] CPU: 0 UID: 0 PID: 11647 Comm: syz.2.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.707535][T11647] Tainted: [L]=SOFTLOCKUP [ 194.707539][T11647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.707546][T11647] Call Trace: [ 194.707550][T11647] [ 194.707555][T11647] dump_stack_lvl+0x100/0x190 [ 194.707577][T11647] should_fail_ex.cold+0x5/0xa [ 194.707592][T11647] should_failslab+0xc2/0x120 [ 194.707604][T11647] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 194.707620][T11647] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 194.707642][T11647] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 194.707663][T11647] mmu_topup_memory_caches+0x25/0x170 [ 194.707677][T11647] kvm_mmu_load+0xd6/0x23e0 [ 194.707689][T11647] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 194.707704][T11647] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 194.707722][T11647] ? __pfx_kvm_mmu_load+0x10/0x10 [ 194.707734][T11647] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 194.707752][T11647] ? kvm_check_and_inject_events+0x961/0x10c0 [ 194.707765][T11647] ? record_steal_time+0x3f0/0xbe0 [ 194.707783][T11647] vcpu_run+0x39f4/0x5ca0 [ 194.707802][T11647] ? __pfx_vcpu_run+0x10/0x10 [ 194.707820][T11647] ? rcu_is_watching+0x12/0xc0 [ 194.707836][T11647] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 194.707849][T11647] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 194.707867][T11647] kvm_vcpu_ioctl+0x730/0x1730 [ 194.707885][T11647] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 194.707902][T11647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.707920][T11647] ? do_vfs_ioctl+0x226/0x13e0 [ 194.707937][T11647] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 194.707955][T11647] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 194.707976][T11647] ? __fget_files+0x215/0x3d0 [ 194.707987][T11647] ? hook_file_ioctl_common+0x146/0x410 [ 194.708002][T11647] ? selinux_file_ioctl+0x139/0x290 [ 194.708018][T11647] ? selinux_file_ioctl+0xb4/0x290 [ 194.708034][T11647] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 194.708052][T11647] __x64_sys_ioctl+0x18e/0x210 [ 194.708070][T11647] do_syscall_64+0x106/0xf80 [ 194.708085][T11647] ? clear_bhb_loop+0x40/0x90 [ 194.708099][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.708111][T11647] RIP: 0033:0x7f314699c799 [ 194.708121][T11647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.708132][T11647] RSP: 002b:00007f3147816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.708148][T11647] RAX: ffffffffffffffda RBX: 00007f3146c15fa0 RCX: 00007f314699c799 [ 194.708155][T11647] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 194.708162][T11647] RBP: 00007f3147816090 R08: 0000000000000000 R09: 0000000000000000 [ 194.708168][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.708174][T11647] R13: 00007f3146c16038 R14: 00007f3146c15fa0 R15: 00007ffe3a8ad5d8 [ 194.708189][T11647] [ 194.764482][T11646] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.814227][T11646] bond0: (slave team0): Enslaving as an active interface with an up link [ 194.952280][ T5941] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 195.033347][T11666] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 195.103091][T11670] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 195.107894][T11670] __nla_validate_parse: 9 callbacks suppressed [ 195.107911][T11670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1941'. [ 195.115221][T11670] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1941'. [ 195.120401][T11670] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1941'. [ 195.261463][T11680] fuse: Invalid rootmode [ 195.266554][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 195.269548][T11680] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1945'. [ 195.540192][T11688] wg1 speed is unknown, defaulting to 1000 [ 196.160197][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1951'. [ 196.255721][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 196.259450][T11705] xt_hashlimit: size too large, truncated to 1048576 [ 196.260151][ T6017] usb 10-1: USB disconnect, device number 17 [ 196.272227][ T6017] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 196.316404][ T6634] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 196.460230][T11723] fuse: Bad value for 'fd' [ 196.462480][T11723] fuse: Bad value for 'fd' [ 196.468191][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 196.471420][T11723] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1958'. [ 196.495590][ T6634] usb 7-1: Using ep0 maxpacket: 8 [ 196.499650][ T6634] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.504401][ T6634] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.508272][ T6634] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.511398][ T6634] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.515793][ T6634] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.518659][ T6634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.525169][T11727] sctp: [Deprecated]: syz.4.1957 (pid 11727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.525169][T11727] Use struct sctp_sack_info instead [ 196.673240][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 196.721790][T11736] xt_hashlimit: size too large, truncated to 1048576 [ 196.729466][ T6634] usb 7-1: GET_CAPABILITIES returned 0 [ 196.731369][ T6634] usbtmc 7-1:16.0: can't read capabilities [ 196.802480][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 196.927069][T11746] fuse: Invalid rootmode [ 196.932216][T11696] FAULT_INJECTION: forcing a failure. [ 196.932216][T11696] name failslab, interval 1, probability 0, space 0, times 0 [ 196.937400][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.2.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.937426][T11696] Tainted: [L]=SOFTLOCKUP [ 196.937432][T11696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.937442][T11696] Call Trace: [ 196.937448][T11696] [ 196.937454][T11696] dump_stack_lvl+0x100/0x190 [ 196.937486][T11696] should_fail_ex.cold+0x5/0xa [ 196.937508][T11696] ? tomoyo_realpath_from_path+0xb6/0x690 [ 196.937532][T11696] should_failslab+0xc2/0x120 [ 196.937549][T11696] __kmalloc_noprof+0xe0/0x850 [ 196.937577][T11696] tomoyo_realpath_from_path+0xb6/0x690 [ 196.937606][T11696] tomoyo_path_number_perm+0x23c/0x580 [ 196.937625][T11696] ? tomoyo_path_number_perm+0x22e/0x580 [ 196.937647][T11696] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.937692][T11696] ? find_held_lock+0x2b/0x80 [ 196.937716][T11696] ? __fget_files+0x215/0x3d0 [ 196.937733][T11696] ? hook_file_ioctl_common+0x146/0x410 [ 196.937754][T11696] ? __fget_files+0x21f/0x3d0 [ 196.937776][T11696] security_file_ioctl+0xd3/0x230 [ 196.937799][T11696] __x64_sys_ioctl+0xb7/0x210 [ 196.937825][T11696] do_syscall_64+0x106/0xf80 [ 196.937847][T11696] ? clear_bhb_loop+0x40/0x90 [ 196.937868][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.937884][T11696] RIP: 0033:0x7f314699c799 [ 196.937899][T11696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.937914][T11696] RSP: 002b:00007f3147816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.937931][T11696] RAX: ffffffffffffffda RBX: 00007f3146c15fa0 RCX: 00007f314699c799 [ 196.937941][T11696] RDX: 0000200000000000 RSI: 0000000040015b0b RDI: 0000000000000004 [ 196.937951][T11696] RBP: 00007f3147816090 R08: 0000000000000000 R09: 0000000000000000 [ 196.937960][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.937970][T11696] R13: 00007f3146c16038 R14: 00007f3146c15fa0 R15: 00007ffe3a8ad5d8 [ 196.937993][T11696] [ 196.938000][T11696] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.034728][ T6017] usb 7-1: USB disconnect, device number 40 [ 197.598231][ T40] audit: type=1400 audit(197.587:602): avc: denied { read append } for pid=11760 comm="syz.5.1973" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.612052][ T40] audit: type=1400 audit(197.587:603): avc: denied { open } for pid=11760 comm="syz.5.1973" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.621497][ T40] audit: type=1400 audit(197.597:604): avc: denied { ioctl } for pid=11760 comm="syz.5.1973" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.658455][T11763] xt_hashlimit: size too large, truncated to 1048576 [ 197.921351][T11771] xt_recent: Unsupported userspace flags (000000b2) [ 199.014494][T11784] tmpfs: Unknown parameter 'grpquota_block_hard' [ 199.019457][T11784] overlayfs: conflicting lowerdir path [ 200.101264][T11815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.103827][T11815] overlayfs: failed to set xattr on upper [ 200.106976][T11815] overlayfs: ...falling back to redirect_dir=nofollow. [ 200.109407][T11815] overlayfs: ...falling back to index=off. [ 200.111629][T11815] overlayfs: ...falling back to uuid=null. [ 200.113853][T11815] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 200.159862][T11821] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 200.178906][T11821] 8021q: adding VLAN 0 to HW filter on device bond20 [ 200.194334][T11821] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 200.267547][ T40] audit: type=1400 audit(200.257:605): avc: denied { create } for pid=11825 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 200.297832][T11828] fuse: Bad value for 'fd' [ 200.358708][T11832] fuse: Bad value for 'fd' [ 200.363594][T11832] __nla_validate_parse: 4 callbacks suppressed [ 200.363605][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 200.375429][ T6017] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 200.546748][ T6017] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 200.552364][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.556297][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.560114][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.563175][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.567660][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.571425][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.574443][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.580248][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.583739][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.586875][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.589641][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.593581][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.598140][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.601532][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.604915][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.608329][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.611135][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.614563][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.617974][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.620743][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.624402][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.628350][ T6017] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.631199][ T6017] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.634573][ T6017] usb 7-1: config 0 interface 0 has no altsetting 0 [ 200.638990][ T6017] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 200.641909][ T6017] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 200.644501][ T6017] usb 7-1: Product: syz [ 200.646257][ T6017] usb 7-1: Manufacturer: syz [ 200.647966][ T6017] usb 7-1: SerialNumber: syz [ 200.659876][ T6017] usb 7-1: config 0 descriptor?? [ 200.667821][ T6017] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 200.709805][T11863] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2008'. [ 200.756657][T11867] futex_wake_op: syz.5.2009 tries to shift op by 32; fix this program [ 200.768105][T11867] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.831669][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.889602][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2011'. [ 200.918633][T11867] kvm: kvm [11864]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 201.191879][T11878] fuse: Invalid rootmode [ 201.248481][T11880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=11880 comm=syz.4.2016 [ 201.393062][T11887] netlink: 'syz.1.2014': attribute type 21 has an invalid length. [ 201.395631][T11887] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.417943][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 201.669197][T11903] fuse: Invalid rootmode [ 201.800693][T11909] fuse: Bad value for 'group_id' [ 201.802791][T11909] fuse: Bad value for 'group_id' [ 201.807097][ T5941] Bluetooth: hci4: unexpected event for opcode 0x080f [ 202.155481][T11929] xt_hashlimit: size too large, truncated to 1048576 [ 202.324583][T11935] fuse: Bad value for 'fd' [ 202.328290][T11935] fuse: Bad value for 'fd' [ 202.390451][T11939] geneve1: entered allmulticast mode [ 202.390906][ T40] audit: type=1400 audit(202.377:606): avc: denied { read } for pid=11936 comm="syz.5.2035" path="socket:[50914]" dev="sockfs" ino=50914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.423561][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 202.905572][ C3] usb 7-1: yurex_control_callback - control failed: -2 [ 202.911442][ T54] usb 7-1: USB disconnect, device number 41 [ 202.915980][ T54] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 203.229496][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 203.271599][T11984] fuse: Bad value for 'fd' [ 203.271902][T11983] IPv6: addrconf: prefix option has invalid lifetime [ 203.384738][T11996] fuse: Bad value for 'fd' [ 203.391283][T11996] netlink: 'syz.1.2055': attribute type 5 has an invalid length. [ 203.448419][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 203.456825][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 203.622216][T12004] fuse: Invalid rootmode [ 204.473950][T12037] xt_hashlimit: size too large, truncated to 1048576 [ 204.797565][T12051] fuse: Bad value for 'fd' [ 204.819277][T12053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12053 comm=syz.5.2072 [ 204.823329][T12053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12053 comm=syz.5.2072 [ 204.967500][T12059] syzkaller1: entered promiscuous mode [ 204.969350][T12059] syzkaller1: entered allmulticast mode [ 205.235458][ T6634] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 205.405576][ T6634] usb 7-1: Using ep0 maxpacket: 8 [ 205.419926][ T6634] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.423431][ T6634] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.427172][ T6634] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.430730][ T6634] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.436024][ T6634] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.438918][ T6634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.629862][T12070] wg1 speed is unknown, defaulting to 1000 [ 205.660340][ T6634] usb 7-1: GET_CAPABILITIES returned 0 [ 205.662629][ T6634] usbtmc 7-1:16.0: can't read capabilities [ 205.716066][ T40] audit: type=1400 audit(205.707:607): avc: denied { read } for pid=12069 comm="syz.5.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 205.871188][T12064] : entered promiscuous mode [ 205.891019][ T6649] usb 7-1: USB disconnect, device number 42 [ 205.926445][T12087] bridge0: port 3(ipvlan2) entered blocking state [ 205.928993][T12087] bridge0: port 3(ipvlan2) entered disabled state [ 205.931674][T12087] ipvlan2: entered allmulticast mode [ 205.945897][T12087] bridge0: entered allmulticast mode [ 205.949806][T12087] ipvlan2: left allmulticast mode [ 205.952018][T12087] bridge0: left allmulticast mode [ 205.971463][T12092] netlink: 'syz.5.2084': attribute type 11 has an invalid length. [ 205.974812][T12092] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2084'. [ 206.056948][T12095] tipc: Enabled bearer , priority 0 [ 206.059765][T12096] tipc: Enabling of bearer rejected, already enabled [ 206.106680][T12095] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 206.129643][T12095] 8021q: adding VLAN 0 to HW filter on device bond25 [ 206.166813][T12092] syzkaller0: entered promiscuous mode [ 206.179479][ T40] audit: type=1400 audit(206.167:608): avc: denied { bpf } for pid=12086 comm="syz.5.2084" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.198659][ T40] audit: type=1400 audit(206.177:609): avc: denied { perfmon } for pid=12086 comm="syz.5.2084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.210186][T12095] bond25: (slave gretap1): making interface the new active one [ 206.217786][T12095] bond25: (slave gretap1): Enslaving as an active interface with an up link [ 207.500322][T12142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45058 sclass=netlink_route_socket pid=12142 comm=syz.2.2098 [ 207.532421][ T40] audit: type=1400 audit(207.517:610): avc: denied { set_context_mgr } for pid=12141 comm="syz.2.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 207.542159][T12142] netlink: 185820 bytes leftover after parsing attributes in process `syz.2.2098'. [ 208.330894][T12161] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2105'. [ 208.423657][T12162] wg1 speed is unknown, defaulting to 1000 [ 208.461414][T12168] netlink: 'syz.1.2108': attribute type 39 has an invalid length. [ 208.467166][T12168] fuse: Bad value for 'fd' [ 208.517156][T12170] overlayfs: failed to resolve './bus': -2 [ 208.548610][T12166] kvm: pic: non byte write [ 208.701447][T12184] fuse: Invalid rootmode [ 208.770271][T12190] xt_hashlimit: size too large, truncated to 1048576 [ 209.033788][T12206] netlink: 'syz.1.2118': attribute type 2 has an invalid length. [ 209.069894][T12206] wg1 speed is unknown, defaulting to 1000 [ 209.412329][T12218] netlink: 'syz.5.2120': attribute type 7 has an invalid length. [ 209.449783][T12221] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.453152][T12221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.456306][T12221] IPv6: NLM_F_CREATE should be set when creating new route [ 209.723862][T12232] xt_hashlimit: size too large, truncated to 1048576 [ 209.764803][ T40] audit: type=1400 audit(209.747:611): avc: denied { sqpoll } for pid=12234 comm="syz.1.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 209.783685][ T40] audit: type=1400 audit(209.767:612): avc: denied { setopt } for pid=12231 comm="syz.5.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.843772][T12239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=12239 comm=syz.5.2127 [ 210.036957][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 210.084150][T12263] fuse: Bad value for 'fd' [ 210.200399][ T40] audit: type=1400 audit(210.187:613): avc: denied { lock } for pid=12243 comm="syz.5.2129" path="socket:[54320]" dev="sockfs" ino=54320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 210.839597][T12315] fuse: Bad value for 'fd' [ 210.842145][ T40] audit: type=1400 audit(210.827:614): avc: denied { ioctl } for pid=12314 comm="syz.1.2137" path="socket:[55324]" dev="sockfs" ino=55324 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.850330][T12314] delete_channel: no stack [ 211.185262][T12338] /dev/sr0: Can't lookup blockdev [ 211.234116][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.237552][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.281264][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 211.297634][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 211.457290][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 211.459839][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 211.636681][T12357] xt_hashlimit: size too large, truncated to 1048576 [ 211.718297][ T6649] libceph: connect (1)[c::]:6789 error -101 [ 211.721198][ T6649] libceph: mon0 (1)[c::]:6789 connect error [ 211.845401][ T6019] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 212.010390][T12361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2147'. [ 212.039042][ T6019] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 212.043427][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.047547][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.052182][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.059019][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.062859][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.067796][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.072001][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.077999][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.082783][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.087184][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.091042][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.099965][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.104613][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.108966][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.113565][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.117714][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.122344][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.127507][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.131341][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.135150][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.140203][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.144120][ T6019] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.150675][ T6019] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.155272][ T6019] usb 10-1: config 0 interface 0 has no altsetting 0 [ 212.163458][ T6019] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.171832][ T6019] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.175728][ T6019] usb 10-1: Product: syz [ 212.177628][ T6019] usb 10-1: Manufacturer: syz [ 212.180009][ T6019] usb 10-1: SerialNumber: syz [ 212.186365][ T6019] usb 10-1: config 0 descriptor?? [ 212.194570][ T6019] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.237261][ T6019] libceph: connect (1)[c::]:6789 error -101 [ 212.240061][ T6019] libceph: mon0 (1)[c::]:6789 connect error [ 212.276612][T12350] ceph: No mds server is up or the cluster is laggy [ 212.397953][ T54] usb 10-1: USB disconnect, device number 18 [ 212.404158][ T54] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 212.675680][T12383] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2154'. [ 212.872157][T12395] xt_hashlimit: size too large, truncated to 1048576 [ 212.928861][ T40] audit: type=1326 audit(212.917:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.937582][ T40] audit: type=1326 audit(212.917:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.945666][ T40] audit: type=1326 audit(212.927:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.955948][ T40] audit: type=1326 audit(212.927:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.964341][ T40] audit: type=1326 audit(212.927:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.972997][ T40] audit: type=1326 audit(212.927:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba11f5cfce code=0x7ffc0000 [ 212.982589][ T40] audit: type=1326 audit(212.927:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 212.992037][ T40] audit: type=1326 audit(212.927:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 213.001971][ T40] audit: type=1326 audit(212.927:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.1.2156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba11f9c799 code=0x7ffc0000 [ 213.013642][T12401] tmpfs: Bad value for 'mpol' [ 213.028501][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'. [ 213.138316][T12412] x_tables: duplicate underflow at hook 2 [ 213.637607][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 213.847923][T12448] xt_hashlimit: size too large, truncated to 1048576 [ 214.270463][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2176'. [ 214.273392][T12465] netlink: 'syz.5.2176': attribute type 30 has an invalid length. [ 214.277148][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2176'. [ 214.633926][ T5288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.638430][ T5288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.641440][ T5288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.644738][ T5288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.647957][ T5288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.682715][T12480] wg1 speed is unknown, defaulting to 1000 [ 214.857686][T12480] chnl_net:caif_netlink_parms(): no params data found [ 214.925796][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.928705][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.931786][T12480] bridge_slave_0: entered allmulticast mode [ 214.935108][T12480] bridge_slave_0: entered promiscuous mode [ 214.938632][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.941056][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.943455][T12480] bridge_slave_1: entered allmulticast mode [ 214.946663][T12480] bridge_slave_1: entered promiscuous mode [ 214.971451][T12491] fuse: Bad value for 'fd' [ 214.973574][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.974769][T12491] fuse: Bad value for 'fd' [ 214.980063][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.031126][T12495] netlink: 'syz.5.2182': attribute type 1 has an invalid length. [ 215.041148][T12480] team0: Port device team_slave_0 added [ 215.047826][T12480] team0: Port device team_slave_1 added [ 215.063865][T12495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 215.070238][T12500] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 215.089899][T12500] 8021q: adding VLAN 0 to HW filter on device bond21 [ 215.111552][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.114557][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.124537][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.132157][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.136507][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.149970][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.176930][T12480] hsr_slave_0: entered promiscuous mode [ 215.180867][T12480] hsr_slave_1: entered promiscuous mode [ 215.183263][T12480] debugfs: 'hsr0' already exists in 'hsr' [ 215.185284][T12480] Cannot create hsr debugfs directory [ 215.241274][ T190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.246692][ T190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.345967][ T190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.349686][ T190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.416091][ T190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.419408][ T190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.479479][ T190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.483019][ T190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.638457][ T190] bridge_slave_1: left allmulticast mode [ 215.641270][ T190] bridge_slave_1: left promiscuous mode [ 215.645035][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.652790][ T190] bridge_slave_0: left allmulticast mode [ 215.655229][ T190] bridge_slave_0: left promiscuous mode [ 215.660942][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.677045][ T190] veth0_to_bond: left promiscuous mode [ 215.679788][ T190] bridge4: port 2(veth0_to_bond) entered disabled state [ 215.693292][ T190] veth3: left allmulticast mode [ 215.695756][ T190] veth3: left promiscuous mode [ 215.697935][ T190] bridge4: port 1(veth3) entered disabled state [ 215.829453][ T190] bond25 (unregistering): (slave gretap1): Releasing active interface [ 216.076408][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 216.076426][ T40] audit: type=1400 audit(216.067:662): avc: denied { setopt } for pid=12524 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.088472][ T40] audit: type=1400 audit(216.077:663): avc: denied { listen } for pid=12524 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.183300][ T190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.191372][ T190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.198163][ T190] bond0 (unregistering): (slave team0): Releasing backup interface [ 216.203967][ T190] bond0 (unregistering): Released all slaves [ 216.217906][ T190] bond1 (unregistering): Released all slaves [ 216.233694][ T190] bond2 (unregistering): Released all slaves [ 216.247089][ T190] bond3 (unregistering): Released all slaves [ 216.260269][ T190] bond4 (unregistering): Released all slaves [ 216.275887][ T190] bond5 (unregistering): Released all slaves [ 216.293969][ T190] bond6 (unregistering): Released all slaves [ 216.304711][ T190] bond7 (unregistering): Released all slaves [ 216.312294][ T190] bond8 (unregistering): Released all slaves [ 216.321108][ T190] bond9 (unregistering): Released all slaves [ 216.329405][ T190] bond10 (unregistering): Released all slaves [ 216.336728][ T190] bond11 (unregistering): Released all slaves [ 216.345980][ T190] bond12 (unregistering): Released all slaves [ 216.353701][ T190] bond13 (unregistering): Released all slaves [ 216.362474][ T190] bond14 (unregistering): Released all slaves [ 216.372753][ T190] bond15 (unregistering): Released all slaves [ 216.379818][ T190] bond16 (unregistering): Released all slaves [ 216.390998][ T190] bond17 (unregistering): Released all slaves [ 216.398180][ T190] bond18 (unregistering): Released all slaves [ 216.405230][ T190] bond19 (unregistering): Released all slaves [ 216.414061][ T190] bond20 (unregistering): Released all slaves [ 216.426211][ T190] bond21 (unregistering): Released all slaves [ 216.432968][ T190] bond22 (unregistering): Released all slaves [ 216.440275][ T190] bond23 (unregistering): Released all slaves [ 216.451088][ T190] bond24 (unregistering): Released all slaves [ 216.457787][ T190] bond25 (unregistering): Released all slaves [ 216.621776][T12533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.624636][T12533] IPv6: NLM_F_CREATE should be set when creating new route [ 216.631446][T12533] IPv6: NLM_F_CREATE should be set when creating new route [ 216.636570][T12533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12533 comm=syz.5.2189 [ 216.649292][ T190] tipc: Disabling bearer [ 216.653306][ T190] tipc: Disabling bearer [ 216.673540][ T190] tipc: Left network mode [ 216.745659][ T5941] Bluetooth: hci5: command tx timeout [ 216.986998][ T40] audit: type=1400 audit(216.967:664): avc: denied { connect } for pid=12543 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.070124][ T40] audit: type=1400 audit(217.057:665): avc: denied { read } for pid=12553 comm="syz.2.2192" path="socket:[53991]" dev="sockfs" ino=53991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.130162][ T40] audit: type=1400 audit(217.117:666): avc: denied { setopt } for pid=12553 comm="syz.2.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.130579][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2193'. [ 217.153148][ T40] audit: type=1400 audit(217.127:667): avc: denied { append } for pid=12553 comm="syz.2.2192" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.189736][T12480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.197446][T12480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.206643][T12480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.215007][T12480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.342475][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.371622][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.383016][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.386235][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.395333][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.398708][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.435581][ T40] audit: type=1400 audit(217.405:668): avc: denied { map } for pid=12576 comm="syz.1.2195" path="socket:[55583]" dev="sockfs" ino=55583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.447292][T12578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12578 comm=syz.1.2195 [ 217.522609][ T190] hsr_slave_0: left promiscuous mode [ 217.526785][ T190] hsr_slave_1: left promiscuous mode [ 217.529236][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.531933][ T190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.538345][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.540760][ T190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.549633][ T190] veth1_macvtap: left promiscuous mode [ 217.551695][ T190] veth0_macvtap: left promiscuous mode [ 217.553663][ T190] veth1_vlan: left promiscuous mode [ 217.555406][ T190] veth0_vlan: left promiscuous mode [ 217.615194][ T190] pimreg (unregistering): left allmulticast mode [ 217.733984][ T190] team0 (unregistering): Port device team_slave_1 removed [ 217.753489][ T190] team0 (unregistering): Port device team_slave_0 removed [ 217.874703][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.030481][T12480] veth0_vlan: entered promiscuous mode [ 218.035911][T12480] veth1_vlan: entered promiscuous mode [ 218.051253][T12480] veth0_macvtap: entered promiscuous mode [ 218.061107][T12480] veth1_macvtap: entered promiscuous mode [ 218.073711][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.083190][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.089504][ T1197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.097500][ T1197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.100991][ T1197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.110494][ T1197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.174147][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.176739][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.193369][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.196998][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.272730][ T6015] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 218.362230][ T190] IPVS: stop unused estimator thread 0... [ 218.367977][T12614] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 218.369318][ T40] audit: type=1400 audit(218.275:669): avc: denied { setopt } for pid=12613 comm="syz.5.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.375489][T12614] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 218.433563][ T6015] usb 7-1: Using ep0 maxpacket: 8 [ 218.437252][ T6015] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.440900][ T6015] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.446675][ T6015] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.449870][ T6015] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.454031][ T6015] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.458036][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.558678][ T40] audit: type=1400 audit(218.452:670): avc: denied { create } for pid=12621 comm="syz.5.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 218.670627][ T6016] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 218.683494][ T6015] usb 7-1: GET_CAPABILITIES returned 0 [ 218.685600][ T6015] usbtmc 7-1:16.0: can't read capabilities [ 218.860858][ T6016] usb 9-1: Using ep0 maxpacket: 8 [ 218.864324][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.869410][ T6016] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.873781][ T6016] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.877269][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.882658][ T6016] usb 9-1: config 0 descriptor?? [ 218.906036][ T6015] usb 7-1: USB disconnect, device number 43 [ 218.925328][ T5941] Bluetooth: hci5: command tx timeout [ 219.106505][ T6016] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 219.315923][T12617] iowarrior 9-1:0.0: Error -90 while submitting URB [ 219.320985][ T40] audit: type=1400 audit(219.173:671): avc: denied { getopt } for pid=12616 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.322440][ T6019] usb 9-1: USB disconnect, device number 7 [ 219.528529][T12637] IPVS: Scheduler module ip_vs_sip not found [ 219.663726][T12648] netlink: 'syz.5.2212': attribute type 11 has an invalid length. [ 219.667334][T12648] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.2212'. [ 219.849662][T12657] netlink: 204964 bytes leftover after parsing attributes in process `syz.5.2214'. [ 219.973218][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2216'. [ 219.978914][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.982643][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.572521][T12683] syz.4.2226 (12683): drop_caches: 2 [ 220.714032][T12692] could not allocate digest TFM handle cryptd(blake2b-160) [ 221.052231][ T54] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 221.151813][ T5941] Bluetooth: hci5: command tx timeout [ 221.212587][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 221.217673][ T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.222047][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.226059][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.230313][ T54] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.236141][ T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.239822][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.463506][ T54] usb 10-1: GET_CAPABILITIES returned 0 [ 221.465506][ T54] usbtmc 10-1:16.0: can't read capabilities [ 221.589653][T12712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 221.667954][T12722] netlink: 'syz.1.2235': attribute type 10 has an invalid length. [ 221.671514][T12722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.676109][T12722] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 221.679565][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.682483][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.685373][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.688235][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.691236][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.694146][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.697015][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.699859][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.702745][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.708071][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.711131][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.713981][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.717100][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.720028][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.722898][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.725966][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.730771][ T6019] usb 10-1: USB disconnect, device number 19 [ 221.737283][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 221.741228][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 221.747121][T12724] No source specified [ 221.858186][T12738] fuse: Bad value for 'fd' [ 221.880389][T12740] netlink: 'syz.4.2236': attribute type 10 has an invalid length. [ 221.886713][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.889088][ T40] audit: type=1400 audit(221.567:672): avc: denied { name_bind } for pid=12741 comm="syz.1.2243" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 221.898677][T12740] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 221.975841][ T40] audit: type=1400 audit(221.651:673): avc: denied { map } for pid=12744 comm="syz.4.2244" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 221.983463][ T40] audit: type=1400 audit(221.651:674): avc: denied { execute } for pid=12744 comm="syz.4.2244" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.337160][T12763] macsec0: entered promiscuous mode [ 222.339507][T12763] macsec0: entered allmulticast mode [ 222.341288][T12763] veth1_macvtap: entered allmulticast mode [ 222.354346][ T40] audit: type=1400 audit(222.007:675): avc: denied { setopt } for pid=12761 comm="syz.4.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.562495][T12769] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 222.581021][ T6016] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 222.751978][ T6016] usb 10-1: Using ep0 maxpacket: 8 [ 222.756308][ T6016] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.760600][ T6016] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.765472][ T6016] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.769739][ T6016] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.776664][ T6016] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.780478][ T6016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.821479][T12775] fuse: Bad value for 'fd' [ 222.946205][ T6796] unregister_netdevice: waiting for syz_tun to become free. Usage count = 2 [ 222.949397][ T6796] ref_tracker: netdev@ffff88802f4d4620 has 1/1 users at [ 222.949397][ T6796] fib_check_nh+0x271/0x620 [ 222.949397][ T6796] fib_create_info+0x218e/0x4640 [ 222.949397][ T6796] fib_table_insert+0x169/0x1c70 [ 222.949397][ T6796] fib_magic+0x4d4/0x5c0 [ 222.949397][ T6796] fib_add_ifaddr+0x4ba/0x560 [ 222.949397][ T6796] fib_netdev_event+0x3d6/0x710 [ 222.949397][ T6796] notifier_call_chain+0x99/0x420 [ 222.949397][ T6796] call_netdevice_notifiers_info+0xbe/0x110 [ 222.949397][ T6796] __dev_notify_flags+0x12c/0x2e0 [ 222.949397][ T6796] netif_change_flags+0x108/0x160 [ 222.949397][ T6796] do_setlink.isra.0+0x1abb/0x3e50 [ 222.949397][ T6796] rtnl_newlink+0x11bd/0x2380 [ 222.949397][ T6796] rtnetlink_rcv_msg+0x95e/0xe90 [ 222.949397][ T6796] netlink_rcv_skb+0x159/0x420 [ 222.949397][ T6796] netlink_unicast+0x5aa/0x870 [ 222.949397][ T6796] netlink_sendmsg+0x8b0/0xda0 [ 222.949397][ T6796] [ 222.982724][ T40] audit: type=1400 audit(222.596:676): avc: denied { read } for pid=5319 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 223.004805][ T6016] usb 10-1: GET_CAPABILITIES returned 0 [ 223.005338][ T40] audit: type=1400 audit(222.596:677): avc: denied { search } for pid=5319 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.010552][ T6016] usbtmc 10-1:16.0: can't read capabilities [ 223.016513][ T40] audit: type=1400 audit(222.596:678): avc: denied { search } for pid=5319 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.016543][ T40] audit: type=1400 audit(222.596:679): avc: denied { add_name } for pid=5319 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.016569][ T40] audit: type=1400 audit(222.596:680): avc: denied { create } for pid=5319 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.016599][ T40] audit: type=1400 audit(222.596:681): avc: denied { append open } for pid=5319 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.373397][ T5941] Bluetooth: hci5: command tx timeout [ 223.503669][ T6634] usb 10-1: USB disconnect, device number 20 [ 223.615075][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.621650][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.708525][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.711803][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.825518][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.828972][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.854446][ T1329] wg1 speed is unknown, defaulting to 1000 [ 223.856947][ T1329] syz2: Port: 1 Link DOWN [ 223.859973][ T1329] wg1 speed is unknown, defaulting to 1000 [ 223.906533][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.909863][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.065384][ T46] bridge_slave_1: left allmulticast mode [ 224.067781][ T46] bridge_slave_1: left promiscuous mode [ 224.069791][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.073498][ T46] bridge_slave_0: left allmulticast mode [ 224.075404][ T46] bridge_slave_0: left promiscuous mode [ 224.077450][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.338127][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.342249][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.347265][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 224.350963][ T46] bond0 (unregistering): Released all slaves [ 224.356617][ T46] bond1 (unregistering): Released all slaves [ 224.363343][ T46] bond2 (unregistering): Released all slaves [ 224.371149][ T46] bond3 (unregistering): Released all slaves [ 224.378850][ T46] bond4 (unregistering): Released all slaves [ 224.385687][ T46] bond5 (unregistering): Released all slaves [ 224.395477][ T46] bond6 (unregistering): Released all slaves [ 224.403995][ T46] bond7 (unregistering): Released all slaves [ 224.417006][ T46] bond8 (unregistering): Released all slaves [ 224.424592][ T46] bond9 (unregistering): (slave dummy0): Releasing active interface [ 224.429451][ T46] bond9 (unregistering): Released all slaves [ 224.440161][ T46] bond10 (unregistering): Released all slaves [ 224.451144][ T46] bond11 (unregistering): Released all slaves [ 224.457985][ T46] bond12 (unregistering): Released all slaves [ 224.587624][ T46] tipc: Disabling bearer [ 224.591349][ T46] tipc: Left network mode [ 224.907286][ T46] hsr_slave_0: left promiscuous mode [ 224.909571][ T46] hsr_slave_1: left promiscuous mode [ 224.911942][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.914630][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.917564][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.920019][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.934525][ T46] veth1_macvtap: left promiscuous mode [ 224.936635][ T46] veth0_macvtap: left promiscuous mode [ 224.938535][ T46] veth1_vlan: left promiscuous mode [ 224.940277][ T46] veth0_vlan: left promiscuous mode [ 225.078363][ T46] team0 (unregistering): Port device team_slave_1 removed [ 225.085493][ T46] team0 (unregistering): Port device team_slave_0 removed [ 225.153645][ T13] smc: removing ib device syz2 [ 225.938635][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.942741][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.042153][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.045964][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.125950][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.130322][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.211547][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.216782][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.355922][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.445812][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.594022][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.679633][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.782434][ T46] bridge_slave_1: left allmulticast mode [ 226.784258][ T46] bridge_slave_1: left promiscuous mode [ 226.786126][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.789772][ T46] bridge_slave_0: left allmulticast mode [ 226.791769][ T46] bridge_slave_0: left promiscuous mode [ 226.795910][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.801303][ T46] bridge_slave_1: left allmulticast mode [ 226.803554][ T46] bridge_slave_1: left promiscuous mode [ 226.806503][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.827426][ T46] bridge_slave_0: left allmulticast mode [ 226.829894][ T46] bridge_slave_0: left promiscuous mode [ 226.832194][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.839548][ T46] batman_adv: batadv0: Interface deactivated: gretap1 [ 226.901881][ T46] ip6gretap0 (unregistering): left allmulticast mode [ 226.950453][ T46] batman_adv: batadv0: Removing interface: gretap1 [ 227.123584][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.129679][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.135743][ T46] bond0 (unregistering): Released all slaves [ 227.143894][ T46] bond1 (unregistering): Released all slaves [ 227.156931][ T46] bond2 (unregistering): Released all slaves [ 227.168901][ T46] bond3 (unregistering): Released all slaves [ 227.182653][ T46] bond4 (unregistering): Released all slaves [ 227.190795][ T46] bond5 (unregistering): Released all slaves [ 227.201624][ T46] bond6 (unregistering): Released all slaves [ 227.210202][ T46] bond7 (unregistering): Released all slaves [ 227.218895][ T46] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 227.228144][ T46] bond8 (unregistering): Released all slaves [ 227.235399][ T46] bond9 (unregistering): Released all slaves [ 227.248098][ T46] bond10 (unregistering): Released all slaves [ 227.256380][ T46] bond11 (unregistering): Released all slaves [ 227.262969][ T46] bond12 (unregistering): Released all slaves [ 227.271710][ T46] bond13 (unregistering): Released all slaves [ 227.280820][ T46] bond14 (unregistering): Released all slaves [ 227.288392][ T46] bond15 (unregistering): Released all slaves [ 227.296224][ T46] bond16 (unregistering): Released all slaves [ 227.453516][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.465362][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.471812][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 227.477986][ T46] bond0 (unregistering): Released all slaves [ 227.637376][ T46] : left promiscuous mode [ 228.450404][ T46] hsr_slave_0: left promiscuous mode [ 228.453664][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.456045][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.458849][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.461886][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.468139][ T46] hsr_slave_0: left promiscuous mode [ 228.470431][ T46] hsr_slave_1: left promiscuous mode [ 228.472753][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.475026][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.480611][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.485813][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.497138][ T46] veth1_macvtap: left promiscuous mode [ 228.499190][ T46] veth0_macvtap: left promiscuous mode [ 228.501305][ T46] veth1_vlan: left promiscuous mode [ 228.503793][ T46] veth0_vlan: left promiscuous mode [ 228.507392][ T46] veth1_macvtap: left allmulticast mode [ 228.510012][ T46] veth1_macvtap: left promiscuous mode [ 228.512469][ T46] veth0_macvtap: left promiscuous mode [ 228.515031][ T46] veth1_vlan: left promiscuous mode [ 228.517887][ T46] veth0_vlan: left promiscuous mode [ 228.748243][ T46] team0 (unregistering): Port device team_slave_1 removed [ 228.768563][ T46] team0 (unregistering): Port device team_slave_0 removed [ 228.996059][ T46] team0 (unregistering): Port device team_slave_1 removed [ 229.005424][ T46] team0 (unregistering): Port device team_slave_0 removed [ 229.882377][ T46] IPVS: stop unused estimator thread 0...