last executing test programs: 1m53.747899411s ago: executing program 3 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x30d}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) listen(r2, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 1m53.694187078s ago: executing program 3 (id=117): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xc629, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000100)={0x3c3, 0xe3, "c54b698e4359bbeb1cd97ad833bdae656ba4c0f4437311f006a6502af9e8b12448030359740b7cbd6f6e16c030906cfd9a0cc112a5ead9f4556b565912b85ed93eb9fb585d489c2b093809b3b9fca89bf1d6f388dc33f0346d0879cfb2531610b2cb67991aa304bb3f4bb630763a5398b4c4ccb2ec8383a82726e32d40ece6e9fd4c3248efdf7c8964670707f1aed88a38262d102bc90f48cb5c629274fcd4df16b2a76d77b637fdd612c75231c7060033cc7d9eaeb5fd55647b007c283601ff28e88c9efe7d0f99a43c27ab0c38ed631360e06debaef4b405ed57eef02985d5987c1f"}) 1m53.638690166s ago: executing program 3 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6805, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001800010000000001000080ffffffff00150004000400006006000000acd0c4c8999fd7e506000000"], 0x2c}}, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @multicast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f00000002c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72b6ff20000000033cbe781bf372d4a0e6153dc6659adb550bbeb538a2d0ebb2db054071fb1e2ea63c2711766b3bc7078cf0feac3742773626ee5ea61b83d58b896a61a9fa2699535eecfca0bb6321c11e7a576035901ee805de9c933ae0a0233282845fe39fe1004c43ef0d1ac72a47d1b52c94538a8fb1b23b8a96f862e38f5aaf80d72131530f9d38279654210a5c685dad7a33bec966c6b43d6d3ec42", 0xd1}], 0x2}, 0x0) 1m53.570081306s ago: executing program 3 (id=121): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x6a, 0x3, 0x4, {0x1, @vbi={0x10000, 0xfffff7f3, 0x9, 0x20385655, [0x0, 0x4], [0x1, 0x6], 0x1}}, 0x88}) 1m53.569749035s ago: executing program 3 (id=122): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x800000000009}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x30100, 0x109) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000018000000100000001000000002000004000e05000000000000000000"], 0x0, 0x2a}, 0x28) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0xf, 0x0, @thr={&(0x7f0000000580)="363859fd20b7cc5f0fd829945e427378a0e423ad24ed1f76779815a96283cde8bb10967aaccad3c8ab3c4499e130907fed7e16845f8b9de49c2d0c61db508fa829aa9b4413cc9bb1aae680cc2a6f872a016c899b4bd52098bc497a9860cc8f0492f11dd2144c0b900d93ebdd914fbc8fb8b1f199035e6cbe9c0cd2f6c3d2928a5c40aa6ff65073b23662f9989c2dfe6301b328c0de7c36a02987c33bcf077c2ccbce5ee5363bbf824d3d3619d5aa776af8e44f819ac9036d9eb25f0a4b4ba09da4", &(0x7f0000000440)="4ae5ddad2da41f4ee6ece3003a4c408b6cdff778175b34b8ae228a45ce2f5d75b4d72488177f81d51e9641208e11f831f6cfbb20ae277ef34c70865d794034fadc852825b933bb999539d09771110d51900110"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01fc21bd70baed2d46000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x18) r6 = fanotify_init(0x0, 0x80000) fanotify_mark(r6, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 1m53.493518142s ago: executing program 3 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xf8, 0x9]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099006625ac60210000000a00340002021202020200000600fd00020000001400fe00bd2729a500000000d76c3b0000000600fd000700"/68], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) 1m50.249865082s ago: executing program 2 (id=168): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1a8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_STATUS={0x8}, @CTA_NAT_DST={0xd4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffff7fff}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x9}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x802}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x820}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xb8ab}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4b00}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7d4b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}]}, 0x1a8}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000000)=0x8, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) write$eventfd(r9, &(0x7f0000000640)=0x9, 0x8) (async) write$eventfd(r9, &(0x7f0000000640)=0x9, 0x8) close(r9) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000005c0)={'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000005c0)={'geneve0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$tun(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x17}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x7}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xaf4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x40000) 1m49.920614806s ago: executing program 2 (id=177): setreuid(0xee01, 0xee01) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) close(r3) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m49.340086175s ago: executing program 2 (id=191): arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xf, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000340)={r2}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x110, 0xffffffffffffffff, 0xec776000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 'queue0\x00', 0xffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffff}}, 0x1c}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0x0, 0x0, 0x6]}}], 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000140), &(0x7f0000000180)=r8}, 0x20) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 1m49.276885569s ago: executing program 2 (id=193): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb}}, './file1\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000500)=[r3, 0x0], 0x0, 0x2}) 1m49.238211621s ago: executing program 2 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x30d}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) listen(r2, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (fail_nth: 4) 1m49.04569718s ago: executing program 2 (id=199): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030af7cf8ce9908303037303436"], 0x23) close(r2) fcntl$lock(r1, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = fanotify_init(0xf00, 0x0) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080), 0x2, 0x0) sendfile(r10, r10, 0x0, 0xc) fanotify_mark(r4, 0x11, 0x1020, r3, 0x0) r11 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r11, 0x3309) 1m48.95426794s ago: executing program 32 (id=199): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030af7cf8ce9908303037303436"], 0x23) close(r2) fcntl$lock(r1, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = fanotify_init(0xf00, 0x0) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080), 0x2, 0x0) sendfile(r10, r10, 0x0, 0xc) fanotify_mark(r4, 0x11, 0x1020, r3, 0x0) r11 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r11, 0x3309) 1m38.181598915s ago: executing program 33 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xf8, 0x9]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099006625ac60210000000a00340002021202020200000600fd00020000001400fe00bd2729a500000000d76c3b0000000600fd000700"/68], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) 1m25.280949011s ago: executing program 4 (id=452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xd}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xd}]}}]}, 0x3c}}, 0x20004055) r0 = socket$nl_route(0x10, 0x3, 0x0) chmod(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x22) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) 1m25.280802445s ago: executing program 4 (id=453): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x102, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f0000000300)) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)={[{@userxattr}, {@metacopy_on}]}) 1m25.210848369s ago: executing program 4 (id=454): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2455c4114daa9d83bdeeaade00", @ANYRES32=r2, @ANYBLOB="0c0099000500000023000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x21) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x78, 0x0, &(0x7f0000000640)=[@acquire, @enter_looper, @free_buffer={0x40086303, r6}, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/178, 0xb2, 0x0, 0x2d}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x78, 0x0, &(0x7f0000000640)=[@acquire, @enter_looper, @free_buffer={0x40086303, r6}, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/178, 0xb2, 0x0, 0x2d}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @release], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x50000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x5]}, &(0x7f00000002c0)=0x6) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000114000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 1m25.207772395s ago: executing program 4 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) socket$kcm(0x2, 0x3, 0x106) (async) r0 = socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) creat(&(0x7f0000000000)='./file0\x00', 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000562000/0x4000)=nil) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000562000/0x4000)=nil) mprotect(&(0x7f0000986000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000b31000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000b27000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000080)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0xa, &(0x7f0000000280)=[{0xe6a4, 0x50, 0x0, 0xfffffffe}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x19, 0xc}, {0x1, 0x10, 0x7, 0x651}, {0x7ff, 0x8, 0x10, 0xe}, {0x4, 0xf7, 0x5, 0x4}, {0x1, 0xff}, {0x64a, 0x5, 0x1}, {0xfff1, 0xe, 0x8b, 0x7}, {0x3ff, 0x9, 0x8}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0xa, &(0x7f0000000280)=[{0xe6a4, 0x50, 0x0, 0xfffffffe}, {0x5, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x19, 0xc}, {0x1, 0x10, 0x7, 0x651}, {0x7ff, 0x8, 0x10, 0xe}, {0x4, 0xf7, 0x5, 0x4}, {0x1, 0xff}, {0x64a, 0x5, 0x1}, {0xfff1, 0xe, 0x8b, 0x7}, {0x3ff, 0x9, 0x8}]}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_0\x00'}) 1m25.104460475s ago: executing program 4 (id=456): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000180)={0x44, 0x1}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7ffffffff7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000140)=0x7) 1m25.031071441s ago: executing program 4 (id=458): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc}, 0x94) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) poll(&(0x7f0000000280)=[{r2, 0x8}], 0x1, 0x5) 1m24.953751814s ago: executing program 34 (id=458): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc}, 0x94) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) poll(&(0x7f0000000280)=[{r2, 0x8}], 0x1, 0x5) 46.481128335s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 39.574747616s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 35.764836533s ago: executing program 6 (id=842): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x1}) (async) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10004, 0x2, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000340)="420fc7bc4898580000640f01c50f01c566baf80cb864c96b82ef66bafc0cec45d8630b0f20c035000001000f22c08ef00f07c442812852fcc744240012000000c74424020b000000ff1c24", 0x4b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'nicvf0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39}}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) write$P9_RREADLINK(r4, &(0x7f0000000140)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) (async) write$P9_RREADLINK(r4, &(0x7f0000000140)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000040)={0x10}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 35.525905386s ago: executing program 6 (id=844): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000021c0), &(0x7f00000022c0)=""/136}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 35.525396223s ago: executing program 6 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) setresuid(0xee00, 0xee00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xf, 0x9, 0x2d, 0xd, 0x6, 0x3, 0x8, 0x8, 0x7, 0xff, 0x2}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f00000039c0)=[{r4, 0x400}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x2d, 0x3, 0x68}, 0x2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000240)="f30fa7e80f20e06635400000000f22e0666537363e3e0fc7adbb002e3e67660f38170366b8000000000f23d00f21f866351000000a0f23f80fc7bdf3ffba2000ed660f3adf1000af", 0x48}], 0x1, 0x5, 0x0, 0x0) unlink(&(0x7f0000000200)='./file1\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc7, 0x9, 0x28, 0x2, 0x9, 0x9d, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10880080, &(0x7f0000000140)="f9e2ec4bc0efa34a6d3961bf97272c06886771f724db90472a0ad88245cfae8d05c3f23084f507c2ad80b989a7272aeb0b0c95932e88573f6a4c41a25eed11cf70474efd1dff76957c6bd7c2f851b4fa8b614485a4138f8cc79d4568895e4542d87ebb81299f44ce50dcf1e99a4ff2214df9e2bff44a6ebb64d7167575e2805df2f34fc0117f36abec75a68ed52804f397405b39f0d5331e1e0f69b7455f955b955a4dc0841bccfcd7dfc2aa49fc", 0xae, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="3f85c8e752f06d2cc286a87ad0907fe5028ac98416cecd28f6b54cf3531053ad42c75cf9dd64bbb7405888979cf58e13345d96bcc9dfd50bffe3b7bbc05de968010920613555de28304c0172da94a9a5a7e28038825296c2c2342e7044d78d58a83c4369b295965a6603bc6f3efb1678468407d9d72f61a759b43b459f6eeae7e04b247677961cce855f0f125e84e6cceff2171e3b1b8d8b053bdf53") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x1ff, 0x7, 0xb03}) keyctl$session_to_parent(0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 34.574643125s ago: executing program 6 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x9, 0x8, 0x0, 0x0, @binary="cfb2e66b3a"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x83) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x582200, 0x29) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000280)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 34.568883271s ago: executing program 6 (id=852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000095"]) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07002bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0407fff1aaaaaaaa"], 0x102) (async) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x100) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21840800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) 34.073991797s ago: executing program 6 (id=855): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 33.980792366s ago: executing program 35 (id=855): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 32.546089532s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 26.74421674s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 26.222821757s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 22.236112719s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 19.384185279s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 13.441855385s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 11.807307971s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 10.595748071s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 4.845809573s ago: executing program 1 (id=622): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000140)={'L+'}, 0x16, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x4, &(0x7f0000000180)={0x0, 0xe, 0x6, 0x8, 0x8}, 0x8, 0x80, 0x7fff, 0x0, 0x3, 0x3b, &(0x7f00000001c0)="2e182d2b275f5f58a5422b66e6f4012e49bb97530a5e33a7302e91f905c1546050741ebbd4b8da17fc3fcfe569"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @empty}, &(0x7f00000007c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x244c03, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x298, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8613ed}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xdbc6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "12e30a45a387566beddcf8d1423dbaed7d56507e7f49229e5b84ef1a04630dd5b10e3e7343f23ee04d9358f3aa2ba2dad17245e601e1b9d6249c74ed9ac2c48fb2b1d6cbccb00d256d692094f01a32739e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x83}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6c0000000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x20000010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_newroute={0x2c, 0x18, 0x0, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x2, 0x0, 0x6, 0x300}, [@RTA_FLOW={0x8, 0xb, 0x3}, @RTA_FLOW={0x8, 0xb, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)="54e9138c00a809924b8a6ab01d2698e7bdf02559b475788e7a152b18ab9565e5bc45dfafa6f2e1de794f30443612728f1325c8c49cb26b3e6a7025c48375b895ca4c80b36ec445124606cc51", 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) connect$can_j1939(r1, &(0x7f0000001040)={0x1d, r5, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x480800, 0x0) write$selinux_load(r1, &(0x7f00000010c0)={0xf97cff8c, 0x8, 'SE Linux', "92"}, 0x11) ioctl$MEMWRITEOOB(r0, 0xc0104d03, &(0x7f00000011c0)={0x4835, 0x88, &(0x7f0000001100)="f7fe08d6e9ed9a25ce9ff0f4843c6bcefbce2bd3ecd5136d30f4f997a4cd8d73169c83230e15f44c3369e20d6b2cf345d6ef645b13ea4053d7c26b7f26700fca31abeceb537fe5643e60262d6463e8c55a140df4720f78aaeb1533bf44209218c02ae74eee28ca0ffc21eda532ade358cfb03ab34713a10deadf6e0f152a9e8c2fe9c9c0ee7f288c"}) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r1) syz_open_dev$usbfs(&(0x7f0000001240), 0x5, 0x204e00) 2.585106107s ago: executing program 7 (id=856): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x183040, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r6, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000240)={r8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) close(r0) epoll_create1(0x0) r11 = syz_ublk_setup_io_uring(0x450, &(0x7f0000000300)={0x0, 0xeac, 0x100, 0x3, 0x305}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_register_op={0x0, 0x3b}], 0x2) 1.506826717s ago: executing program 5 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) io_uring_setup(0x463e, &(0x7f0000000080)={0x0, 0x5481, 0x2, 0x3, 0x7d}) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) (async) io_uring_setup(0x463e, &(0x7f0000000080)={0x0, 0x5481, 0x2, 0x3, 0x7d}) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) (async) 1.427718455s ago: executing program 5 (id=1089): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x240400) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x9) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x429, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{}, 0x1, 0x7}, {{0x0, 0xea60}, 0x97aa338403b21e9f, 0x7, 0x100}, {{}, 0x0, 0x7f, 0x7}, {{0x77359400}, 0x5, 0x7, 0x3d}, {{0x77359400}, 0x17, 0x851, 0x2}, {{r2, r3/1000+60000}, 0x15, 0x19, 0xd310}, {{0x0, 0xea60}, 0xa, 0x3, 0x692}], 0xa8) r4 = mq_open(&(0x7f00000001c0)='(\'&-\\!^)/-\x00', 0x8c1, 0x8, &(0x7f0000000200)={0xa175, 0x800, 0x4fd, 0xfffffffffffffe01}) mq_timedreceive(r4, &(0x7f0000000240)=""/4096, 0x1000, 0x1, &(0x7f0000001240)) r5 = syz_open_dev$sndpcmc(&(0x7f0000001280), 0x3, 0x20400) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f00000012c0)) syz_clone(0x400, &(0x7f0000001300)="230e3623559e3ed1315661f26146706af54b270c05e3e2c878645dfbbbbcb0b245b70ab1624114dd2adb182b492b8d131a1134acc233af47f32e18896b8a771b0487341ca6c3484029ce5b1b3aee77e64da94ce8fe59df24b08ec464788dc7f46b0c474143cb5b69386b38032cded95c4675da29be206553e852ddbdabd4f49768221ee7bc76ef269446a196f01be9a6b1d9e3355941514366475c44f3da3b9d7f51b6b417315e111b0a590cfa5abf6032", 0xb1, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="01ae8893c9860eef470d431dd719ac5830c83525c756192b97e78079f0bb119497dfda67b27e66297127b2b2493d0eed") ioctl$FITHAW(r5, 0xc0045878) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001480), 0x440, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000014c0)="da6e4b924951abcaaabaa08d875f60404e042d910081a5b4a3bae49b827aa930d92f053259d449184232c88bcdaea3267411724d6a76aeeb30b7ffcf436438efc4d742ed320ed0329af2c1ef2879721183310b84a1c12c87979278b235d5fc6e7c9ed3a80bf62f52fd26b90e769600951cdc29e496", 0x75) fstatfs(r5, &(0x7f0000001540)=""/61) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000001580), 0x18800, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000015c0)=0xeb67) getsockname$l2tp6(r6, &(0x7f0000001600)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001640)=0x20) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000001680)) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000016c0), 0x400000, 0x0) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000001b00)={0x2, 0x0, 0x1c, 0x19, 0xae, &(0x7f0000001700)="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"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000001b40)={0x0, 0xd1a}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001bc0)={r9, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x4}, &(0x7f0000001c80)=0x90) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r10, &(0x7f0000001cc0)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001d00)={0x2, 'gre0\x00', {0x4}}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) mq_timedsend(r4, &(0x7f0000001dc0)="fd74789974b7da322abb44f4039a5085c5c8d45c70b0f30cd7bcd2f444d4bddf62f11083dcc41c2c264e3f5f4d459546a0f791f86d6d3d0defe0ba23d1e5", 0x3e, 0x4, &(0x7f0000001e40)) 1.339452884s ago: executing program 5 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x110) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x110) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) (async) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.25840597s ago: executing program 5 (id=1092): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000040)={0x8, "a144b717396101d16e30b08b0737e8ff6c1ce1e8fe3c10568d49b254bdbb4038f4"}}) 778.05552ms ago: executing program 0 (id=1097): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4040800}, 0x4) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 777.516736ms ago: executing program 0 (id=1098): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='f2fs\x00', 0x10080, &(0x7f00000000c0)='norecovery') 679.427107ms ago: executing program 0 (id=1099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) (async) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xa, @local, 0x80000009}, 0xfffffffffffffd18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x9, 'syz1\x00', 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r2, 0x4, 0x2400) write(r2, &(0x7f0000001240)="e184d6a2", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa67d6000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa67d6000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) 318.526196ms ago: executing program 0 (id=1100): syz_open_dev$video(&(0x7f0000000040), 0x4, 0x300) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) write$FUSE_LK(r0, &(0x7f0000000140)={0x28, 0x0, r2, {{0x7, 0x8, 0x1, r3}}}, 0x28) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 248.370485ms ago: executing program 0 (id=1101): ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000008000000000000000000007995800000000000850000003200000018430000fbffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000650ddd660000001811000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 246.502591ms ago: executing program 0 (id=1102): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000005900)={&(0x7f00000027c0)={0x50, 0x0, 0x2144, {0x7, 0x2d, 0x4, 0x800, 0xa5, 0x1000, 0x800, 0x5554, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.865527ms ago: executing program 5 (id=1103): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}, 0x4000080) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 5 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x30d}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) listen(r2, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0xf5ff) kernel console output (not intermixed with test programs): 7][ T8226] ? __pfx_do_splice_direct+0x10/0x10 [ 120.463998][ T8226] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 120.464016][ T8226] ? bpf_lsm_file_permission+0x9/0x10 [ 120.464031][ T8226] ? security_file_permission+0x76/0x210 [ 120.464047][ T8226] ? rw_verify_area+0xce/0x6d0 [ 120.464062][ T8226] do_sendfile+0xadc/0xe20 [ 120.464078][ T8226] ? __pfx_do_sendfile+0x10/0x10 [ 120.464091][ T8226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.464109][ T8226] ? __fget_files+0x21f/0x3d0 [ 120.464128][ T8226] __x64_sys_sendfile64+0x1d8/0x220 [ 120.464139][ T8226] ? ksys_write+0x1ac/0x250 [ 120.464153][ T8226] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 120.464168][ T8226] do_syscall_64+0x115/0x870 [ 120.464183][ T8226] ? clear_bhb_loop+0x40/0x90 [ 120.464196][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.464207][ T8226] RIP: 0033:0x7ff41bb9de99 [ 120.464217][ T8226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.464227][ T8226] RSP: 002b:00007ff419df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 120.464238][ T8226] RAX: ffffffffffffffda RBX: 00007ff41be25fa0 RCX: 00007ff41bb9de99 [ 120.464245][ T8226] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 120.464250][ T8226] RBP: 00007ff419df6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.464257][ T8226] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 120.464263][ T8226] R13: 00007ff41be26038 R14: 00007ff41be25fa0 R15: 00007ffca91db5c8 [ 120.464276][ T8226] [ 120.620061][ T8228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.630'. [ 121.185394][ T8192] hsr_slave_0: entered promiscuous mode [ 121.187641][ T8192] hsr_slave_1: entered promiscuous mode [ 121.189759][ T8192] debugfs: 'hsr0' already exists in 'hsr' [ 121.198829][ T42] kauditd_printk_skb: 183 callbacks suppressed [ 121.198843][ T42] audit: type=1400 audit(1784239910.314:2835): avc: denied { allowed } for pid=8229 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.207458][ T8192] Cannot create hsr debugfs directory [ 121.211533][ T42] audit: type=1400 audit(1784239910.324:2836): avc: denied { create } for pid=8229 comm="syz.5.633" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.223518][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'. [ 121.227655][ T42] audit: type=1400 audit(1784239910.334:2837): avc: denied { create } for pid=8233 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.227699][ T42] audit: type=1400 audit(1784239910.344:2838): avc: denied { write } for pid=8233 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.249203][ T42] audit: type=1400 audit(1784239910.364:2839): avc: denied { create } for pid=8233 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.260083][ T42] audit: type=1400 audit(1784239910.374:2840): avc: denied { create } for pid=8233 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.273867][ T42] audit: type=1400 audit(1784239910.374:2841): avc: denied { connect } for pid=8233 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.283824][ T42] audit: type=1400 audit(1784239910.384:2842): avc: denied { getopt } for pid=8233 comm="syz.6.632" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.292714][ T42] audit: type=1400 audit(1784239910.404:2843): avc: denied { write } for pid=8236 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.301883][ T42] audit: type=1400 audit(1784239910.404:2844): avc: denied { read } for pid=8236 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.316999][ T8239] tipc: Failed to remove unknown binding: 66,0,0/0:128112137/128112139 [ 121.320343][ T8239] tipc: Failed to remove unknown binding: 66,0,0/0:128112137/128112138 [ 121.320953][ T7716] net_ratelimit: 107 callbacks suppressed [ 121.320963][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.324295][ T8239] tipc: Failed to remove unknown binding: 66,0,0/0:128112137/128112139 [ 121.331720][ T8239] tipc: Failed to remove unknown binding: 66,0,0/0:128112137/128112138 [ 121.335336][ T8239] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.342669][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.362226][ T8192] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.366256][ T8192] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.371300][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.391370][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.393917][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 121.501883][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.504947][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 121.610973][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.613534][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 121.731048][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 121.891024][ T5095] Bluetooth: hci1: command tx timeout [ 122.276047][ T8192] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.280891][ T8192] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.313248][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.643'. [ 122.358197][ T8192] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.361385][ T8192] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.488769][ T8192] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.492097][ T8192] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.497997][ T8273] hfsplus: unable to find HFS+ superblock [ 122.566053][ T8276] loop4: detected capacity change from 0 to 2640 [ 122.580166][ T8276] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 122.585985][ T8276] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 122.589397][ T8276] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 122.592961][ T8276] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 122.595884][ T8276] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 122.599989][ T8276] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 122.604702][ T8276] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 122.608532][ T8276] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 122.612625][ T8276] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 122.615420][ T8276] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 122.689080][ T8192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.695581][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.698917][ T8192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.708998][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.712106][ T8192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.718199][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.721784][ T8192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.724382][ T8289] netlink: 172 bytes leftover after parsing attributes in process `syz.0.652'. [ 122.729750][ T8192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.757681][ T8289] netlink: 'syz.0.652': attribute type 13 has an invalid length. [ 122.764292][ T8289] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.803406][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.823172][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.832413][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.835575][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.846589][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.849773][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.241889][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.284498][ T8192] veth0_vlan: entered promiscuous mode [ 123.294857][ T8192] veth1_vlan: entered promiscuous mode [ 123.348734][ T8192] veth0_macvtap: entered promiscuous mode [ 123.355712][ T8192] veth1_macvtap: entered promiscuous mode [ 123.372660][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.381622][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.398535][ T8192] wireguard: wg0: Could not create IPv4 socket [ 123.402650][ T8192] wireguard: wg1: Could not create IPv4 socket [ 123.407108][ T8192] wireguard: wg2: Could not create IPv4 socket [ 123.450755][ T5955] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 123.610666][ T5955] usb 11-1: Using ep0 maxpacket: 8 [ 123.615920][ T5955] usb 11-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 123.618915][ T5955] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.621621][ T5955] usb 11-1: Product: syz [ 123.623059][ T5955] usb 11-1: Manufacturer: syz [ 123.624562][ T5955] usb 11-1: SerialNumber: syz [ 123.628924][ T5955] usb 11-1: config 0 descriptor?? [ 123.634136][ T5955] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 123.638339][ T5955] pctv452e: pctv452e_power_ctrl: 1 [ 123.638339][ T5955] [ 123.641929][ T5955] usb 11-1: selecting invalid altsetting 3 [ 123.644030][ T5955] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 123.644030][ T5955] [ 123.647405][ T5955] dvb-usb: bulk message failed: -22 (5/0) [ 123.651499][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.655035][ T5955] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 123.657739][ T5955] usb 11-1: media controller created [ 123.659756][ T5955] dvb-usb: bulk message failed: -22 (8/0) [ 123.662069][ T5955] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 123.665273][ T5955] dvb-usb: MAC address reading failed. [ 123.672618][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.699473][ T5955] DVB: Unable to find symbol stb0899_attach() [ 123.701738][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.704160][ T5955] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 123.750622][ T5955] rc_core: IR keymap rc-tt-1500 not found [ 123.752548][ T5955] Registered IR keymap rc-empty [ 123.755534][ T5955] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 123.764723][ T5955] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input23 [ 123.772639][ T5955] dvb-usb: schedule remote query interval to 100 msecs. [ 123.775445][ T5955] pctv452e: pctv452e_power_ctrl: 0 [ 123.775445][ T5955] [ 123.778520][ T5955] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 123.836138][ T8325] dvb-usb: bulk message failed: -22 (7/0) [ 123.839505][ T8325] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 123.843494][ T5883] usb 11-1: USB disconnect, device number 3 [ 123.850891][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 123.858701][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.867096][ T41] usb 5-1: string descriptor 0 read error: -22 [ 123.867687][ T5883] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 123.869153][ T41] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 123.875023][ T41] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 123.886491][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 123.889154][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 123.892015][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 123.895843][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.901775][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 123.904619][ T41] usb 5-1: media controller created [ 123.906670][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.908543][ T41] dw2102: i2c transfer failed. [ 123.910114][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.912198][ T41] dw2102: i2c transfer failed. [ 123.913767][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.915669][ T41] dw2102: i2c transfer failed. [ 123.917158][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.918950][ T41] dw2102: i2c transfer failed. [ 123.920590][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.922435][ T41] dw2102: i2c transfer failed. [ 123.923951][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 123.925829][ T41] dw2102: i2c transfer failed. [ 123.927394][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 123.935261][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.943610][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 123.948127][ T41] dw2102: command 0x0e transfer failed. [ 123.950459][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 123.952916][ T41] dw2102: command 0x0e transfer failed. [ 123.966262][ T8352] netlink: 'syz.5.666': attribute type 1 has an invalid length. [ 124.096750][ T8334] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 124.260609][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 124.263079][ T41] dw2102: command 0x0e transfer failed. [ 124.265405][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 124.267842][ T41] dw2102: command 0x0e transfer failed. [ 124.270170][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 124.273468][ T41] dw2102: command 0x51 transfer failed. [ 124.276412][ T8334] dvb-usb: bulk message failed: -22 (4/0) [ 124.278946][ T8334] dw2102: i2c transfer failed. [ 124.305344][ T41] DVB: Unable to find symbol ds3000_attach() [ 124.307953][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 124.360587][ T41] rc_core: IR keymap rc-su3000 not found [ 124.362931][ T41] Registered IR keymap rc-empty [ 124.366414][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 124.376137][ T8360] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.378888][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input24 [ 124.391414][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 124.394622][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 124.397279][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 124.406415][ T41] usb 5-1: USB disconnect, device number 7 [ 124.447346][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 124.810539][ T5107] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 124.862850][ T8370] input: syz0 as /devices/virtual/input/input25 [ 124.960559][ T5107] usb 11-1: Using ep0 maxpacket: 16 [ 124.965471][ T5107] usb 11-1: config 0 has no interfaces? [ 124.970315][ T5107] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 124.974878][ T5107] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.978241][ T5107] usb 11-1: Product: syz [ 124.979578][ T5107] usb 11-1: Manufacturer: syz [ 124.981606][ T5107] usb 11-1: SerialNumber: syz [ 124.985488][ T5107] usb 11-1: config 0 descriptor?? [ 125.238434][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.244857][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.249294][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.254612][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.261444][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.331092][ T5955] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.446143][ T8389] Failed to initialize the IGMP autojoin socket (err -2) [ 125.490752][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 125.495205][ T5955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.499010][ T5955] usb 5-1: config 8 has an invalid interface number: 48 but max is 0 [ 125.502082][ T5955] usb 5-1: config 8 has no interface number 0 [ 125.504059][ T5955] usb 5-1: too many endpoints for config 8 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 125.507934][ T5955] usb 5-1: config 8 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 125.512561][ T5955] usb 5-1: config 8 interface 48 has no altsetting 0 [ 125.517062][ T5955] usb 5-1: string descriptor 0 read error: -22 [ 125.519331][ T5955] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 125.522348][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 125.528851][ T5955] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 125.534891][ T5955] dw2102: su3000_power_ctrl: 1, initialized 0 [ 125.537819][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 125.543993][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.548842][ T5955] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 125.558650][ T5955] usb 5-1: media controller created [ 125.560940][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.563170][ T5955] dw2102: i2c transfer failed. [ 125.564661][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.566844][ T5955] dw2102: i2c transfer failed. [ 125.568632][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.571439][ T5955] dw2102: i2c transfer failed. [ 125.573484][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.576876][ T5955] dw2102: i2c transfer failed. [ 125.578498][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.580608][ T5955] dw2102: i2c transfer failed. [ 125.582148][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 125.583980][ T5955] dw2102: i2c transfer failed. [ 125.585883][ T5955] dvb-usb: MAC address: 02:02:02:02:02:02 [ 125.601721][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.624444][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 125.628496][ T5955] dw2102: command 0x0e transfer failed. [ 125.631389][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 125.633892][ T5955] dw2102: command 0x0e transfer failed. [ 125.645539][ T8406] netlink: 'syz.5.681': attribute type 7 has an invalid length. [ 125.658185][ T8406] netlink: 'syz.5.681': attribute type 8 has an invalid length. [ 125.732666][ T8387] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.736066][ T8387] overlay: Unknown parameter 'measure' [ 125.782846][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.785636][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.788269][ T8389] bridge_slave_0: entered allmulticast mode [ 125.793776][ T8389] bridge_slave_0: entered promiscuous mode [ 125.798025][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.800823][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.803463][ T8389] bridge_slave_1: entered allmulticast mode [ 125.807124][ T8389] bridge_slave_1: entered promiscuous mode [ 125.868320][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.882060][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.933119][ T8389] team0: Port device team_slave_0 added [ 125.943804][ T8389] team0: Port device team_slave_1 added [ 125.950564][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 125.952953][ T5955] dw2102: command 0x0e transfer failed. [ 125.955481][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 125.957957][ T5955] dw2102: command 0x0e transfer failed. [ 125.960193][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 125.963615][ T5955] dw2102: command 0x51 transfer failed. [ 125.971546][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.973994][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.983616][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.988270][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.990409][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.993337][ T5955] DVB: Unable to find symbol ds3000_attach() [ 125.998581][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.005782][ T5955] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 126.046612][ T8389] hsr_slave_0: entered promiscuous mode [ 126.048999][ T8389] hsr_slave_1: entered promiscuous mode [ 126.051697][ T8389] debugfs: 'hsr0' already exists in 'hsr' [ 126.054487][ T8389] Cannot create hsr debugfs directory [ 126.083782][ T5955] rc_core: IR keymap rc-su3000 not found [ 126.086272][ T5955] Registered IR keymap rc-empty [ 126.090910][ T5955] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 126.096503][ T5955] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input26 [ 126.106920][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 126.109207][ T5955] dw2102: su3000_power_ctrl: 0, initialized 1 [ 126.111208][ T5955] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 126.116568][ T5955] usb 5-1: USB disconnect, device number 8 [ 126.158755][ T5955] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 126.327166][ T42] kauditd_printk_skb: 204 callbacks suppressed [ 126.327215][ T42] audit: type=1400 audit(1784239915.445:3049): avc: denied { read } for pid=8430 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.338414][ T42] audit: type=1400 audit(1784239915.445:3050): avc: denied { read open } for pid=8430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.348028][ T42] audit: type=1400 audit(1784239915.445:3051): avc: denied { getattr } for pid=8430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.357133][ T42] audit: type=1400 audit(1784239915.465:3052): avc: denied { write } for pid=8429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.368408][ T42] audit: type=1400 audit(1784239915.465:3053): avc: denied { add_name } for pid=8429 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.380913][ T5789] net_ratelimit: 109 callbacks suppressed [ 126.380927][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.385161][ T42] audit: type=1400 audit(1784239915.505:3054): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.386567][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.400007][ T42] audit: type=1400 audit(1784239915.525:3055): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 126.408737][ T42] audit: type=1400 audit(1784239915.535:3056): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.418909][ T42] audit: type=1400 audit(1784239915.535:3057): avc: denied { write } for pid=8432 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.429269][ T42] audit: type=1400 audit(1784239915.535:3058): avc: denied { read write } for pid=5739 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.511959][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.517314][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.630382][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.632925][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.638432][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 126.741077][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.744074][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 126.760309][ T1354] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.860356][ T12] bridge_slave_1: left allmulticast mode [ 126.860393][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 126.863367][ T12] bridge_slave_1: left promiscuous mode [ 126.868712][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.879101][ T12] bridge_slave_0: left allmulticast mode [ 126.882805][ T12] bridge_slave_0: left promiscuous mode [ 126.886094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.890377][ T1354] usb 5-1: device descriptor read/64, error -71 [ 126.891308][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 127.004345][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.012205][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.021056][ T12] bond0 (unregistering): Released all slaves [ 127.130481][ T1354] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.225066][ T12] hsr_slave_0: left promiscuous mode [ 127.228872][ T12] hsr_slave_1: left promiscuous mode [ 127.236532][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.240497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.248630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.254366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.260211][ T1354] usb 5-1: device descriptor read/64, error -71 [ 127.269538][ T12] veth1_macvtap: left promiscuous mode [ 127.273183][ T12] veth0_macvtap: left promiscuous mode [ 127.276093][ T12] veth1_vlan: left promiscuous mode [ 127.278778][ T12] veth0_vlan: left promiscuous mode [ 127.330951][ T5750] Bluetooth: hci1: command tx timeout [ 127.370440][ T1354] usb usb5-port1: attempt power cycle [ 127.439196][ T56] usb 11-1: USB disconnect, device number 4 [ 127.469946][ T12] team0 (unregistering): Port device team_slave_1 removed [ 127.488078][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.618609][ T8468] comedi comedi2: dt2815: I/O base address or length out of range [ 127.710263][ T1354] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.730238][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.739686][ T1354] usb 5-1: device descriptor read/8, error -71 [ 127.962527][ T8486] netlink: 748 bytes leftover after parsing attributes in process `syz.6.699'. [ 127.980851][ T1354] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.000617][ T1354] usb 5-1: device descriptor read/8, error -71 [ 128.059417][ T8495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=8495 comm=syz.5.700 [ 128.107468][ T5750] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 128.110748][ T1354] usb usb5-port1: unable to enumerate USB device [ 128.112947][ T5750] CPU: 3 UID: 0 PID: 5750 Comm: kworker/u34:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.112965][ T5750] Tainted: [L]=SOFTLOCKUP [ 128.112969][ T5750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.113000][ T5750] Workqueue: hci4 hci_rx_work [ 128.113047][ T5750] Call Trace: [ 128.113051][ T5750] [ 128.113056][ T5750] dump_stack_lvl+0x100/0x190 [ 128.113198][ T5750] sysfs_warn_dup.cold+0x1c/0x28 [ 128.113236][ T5750] sysfs_create_dir_ns+0x24b/0x2b0 [ 128.113303][ T5750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.113319][ T5750] ? find_held_lock+0x2b/0x80 [ 128.113358][ T5750] ? kobject_add_internal+0x25f/0x930 [ 128.113384][ T5750] ? kobject_add_internal+0x25f/0x930 [ 128.113399][ T5750] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.113415][ T5750] kobject_add_internal+0x2c8/0x930 [ 128.113431][ T5750] kobject_add+0x16a/0x1e0 [ 128.113444][ T5750] ? __pfx_kobject_add+0x10/0x10 [ 128.113455][ T5750] ? class_to_subsys+0x10f/0x150 [ 128.113529][ T5750] ? kobject_put+0xb9/0x640 [ 128.113540][ T5750] ? _raw_spin_unlock+0x28/0x50 [ 128.113559][ T5750] device_add+0x294/0x1970 [ 128.113574][ T5750] ? __pfx_dev_set_name+0x10/0x10 [ 128.113591][ T5750] ? __pfx_device_add+0x10/0x10 [ 128.113605][ T5750] ? mgmt_send_event_skb+0x2fb/0x460 [ 128.113626][ T5750] hci_conn_add_sysfs+0x1a3/0x260 [ 128.113639][ T5750] le_conn_complete_evt+0x11eb/0x1f60 [ 128.113659][ T5750] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.113674][ T5750] ? hci_event_packet+0x186/0xcd0 [ 128.113693][ T5750] hci_le_conn_complete_evt+0x23c/0x3a0 [ 128.113709][ T5750] ? skb_pull_data+0x15f/0x1e0 [ 128.113724][ T5750] hci_le_meta_evt+0x34a/0x5f0 [ 128.113741][ T5750] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 128.113760][ T5750] hci_event_packet+0x51c/0xcd0 [ 128.113778][ T5750] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.113794][ T5750] ? __pfx_hci_event_packet+0x10/0x10 [ 128.113812][ T5750] ? kcov_remote_start+0x384/0x670 [ 128.113825][ T5750] ? lockdep_hardirqs_on+0x78/0x100 [ 128.113844][ T5750] hci_rx_work+0x451/0xfc0 [ 128.113862][ T5750] process_one_work+0xa23/0x1940 [ 128.113879][ T5750] ? __pfx_process_one_work+0x10/0x10 [ 128.113894][ T5750] ? __pfx_hci_rx_work+0x10/0x10 [ 128.113911][ T5750] worker_thread+0x5ef/0xe50 [ 128.113925][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 128.113936][ T5750] ? kthread+0x13a/0x450 [ 128.113951][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 128.113960][ T5750] kthread+0x370/0x450 [ 128.113976][ T5750] ? __pfx_kthread+0x10/0x10 [ 128.114014][ T5750] ret_from_fork+0x72b/0xd50 [ 128.114031][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 128.114046][ T5750] ? __switch_to+0x800/0x10f0 [ 128.114064][ T5750] ? __pfx_kthread+0x10/0x10 [ 128.114082][ T5750] ret_from_fork_asm+0x1a/0x30 [ 128.114106][ T5750] [ 128.114139][ T5750] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.210616][ T5750] Bluetooth: hci4: failed to register connection device [ 128.213231][ T5750] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 128.336734][ T8389] netdevsim netdevsim1 netdevsim0: renamed from eth14 [ 128.344638][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.347454][ T8389] netdevsim netdevsim1 netdevsim1: renamed from eth15 [ 128.356374][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.361500][ T8389] netdevsim netdevsim1 netdevsim2: renamed from eth16 [ 128.366760][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.369638][ T8389] netdevsim netdevsim1 netdevsim3: renamed from eth17 [ 128.379509][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.574798][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.598807][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.602078][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.626858][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.630063][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.037258][ T8584] MPI: mpi too large (16392 bits) [ 129.046166][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.147657][ T8389] veth0_vlan: entered promiscuous mode [ 129.156757][ T8389] veth1_vlan: entered promiscuous mode [ 129.226427][ T8389] veth0_macvtap: entered promiscuous mode [ 129.234161][ T8389] veth1_macvtap: entered promiscuous mode [ 129.266748][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.276236][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.285347][ T8389] wireguard: wg0: Could not create IPv4 socket [ 129.288878][ T8389] wireguard: wg1: Could not create IPv4 socket [ 129.293189][ T8389] wireguard: wg2: Could not create IPv4 socket [ 129.539290][ T8612] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.846607][ C2] vxcan1: j1939_tp_rxtimer: 0xffff8880451f8000: rx timeout, send abort [ 129.853354][ C2] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880451f8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.097652][ T8642] overlayfs: failed lookup in lower (newroot/63, name='file0', err=-40): overlapping layers [ 130.102065][ T8642] overlayfs: failed lookup in lower (newroot/63, name='file0', err=-40): overlapping layers [ 130.420020][ T56] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 130.587765][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.591647][ T56] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.594939][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.601476][ T56] usb 11-1: config 0 descriptor?? [ 130.633855][ T8694] netlink: 'syz.5.732': attribute type 8 has an invalid length. [ 130.637052][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'. [ 130.810111][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.814118][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.817796][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.829004][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.833369][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.837942][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.842466][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.846278][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.850544][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.854358][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.880002][ T56] usbhid 11-1:0.0: can't add hid device: -71 [ 130.883346][ T56] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 130.895761][ T56] usb 11-1: USB disconnect, device number 5 [ 130.932420][ T8708] 0xfffffffffffffffd-0x000000020000 : "" [ 130.936410][ T8708] mtd: partition "" is out of reach -- disabled [ 130.954944][ T8708] ftl_cs: FTL header not found. [ 131.348858][ T42] kauditd_printk_skb: 389 callbacks suppressed [ 131.348892][ T42] audit: type=1400 audit(1784239920.465:3448): avc: denied { write } for pid=8725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.378522][ T42] audit: type=1400 audit(1784239920.495:3449): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 131.389866][ T42] audit: type=1400 audit(1784239920.515:3450): avc: denied { write } for pid=8733 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.464533][ T42] audit: type=1400 audit(1784239920.585:3451): avc: denied { create } for pid=8740 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.470229][ T7716] net_ratelimit: 108 callbacks suppressed [ 131.470277][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.477574][ T42] audit: type=1400 audit(1784239920.595:3452): avc: denied { read write } for pid=8740 comm="syz.5.737" name="vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.486095][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 131.496014][ T42] audit: type=1400 audit(1784239920.595:3453): avc: denied { open } for pid=8740 comm="syz.5.737" path="/dev/vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.503878][ T42] audit: type=1400 audit(1784239920.595:3454): avc: denied { ioctl } for pid=8740 comm="syz.5.737" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.526233][ T42] audit: type=1400 audit(1784239920.645:3455): avc: denied { ioctl } for pid=8745 comm="syz.5.738" path="socket:[29838]" dev="sockfs" ino=29838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.573902][ T8749] bond0: entered allmulticast mode [ 131.576156][ T42] audit: type=1400 audit(1784239920.695:3456): avc: denied { write } for pid=8739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.585437][ T8749] bond_slave_0: entered allmulticast mode [ 131.588179][ T8749] bond_slave_1: entered allmulticast mode [ 131.591243][ T42] audit: type=1400 audit(1784239920.695:3457): avc: denied { map_create } for pid=8748 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.600560][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.605528][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 131.722153][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.725619][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 131.839698][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.842672][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 131.869639][ T1048] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 131.918556][ T5095] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 131.940282][ T5841] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.960655][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 131.963906][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 132.021183][ T1048] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.024356][ T1048] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.027480][ T1048] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.030825][ T1048] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.036772][ T1048] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.039398][ T1048] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.042591][ T1048] usb 10-1: Manufacturer: syz [ 132.051013][ T1048] usb 10-1: config 0 descriptor?? [ 132.090855][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 132.099416][ T5841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.107405][ T5841] usb 5-1: string descriptor 0 read error: -22 [ 132.111734][ T5841] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 132.115659][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 132.131063][ T5841] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 132.134513][ T5841] dw2102: su3000_power_ctrl: 1, initialized 0 [ 132.136789][ T5841] dvb-usb: bulk message failed: -22 (2/0) [ 132.142304][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.146737][ T5841] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 132.150342][ T5841] usb 5-1: media controller created [ 132.152187][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.154033][ T5841] dw2102: i2c transfer failed. [ 132.155568][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.157855][ T5841] dw2102: i2c transfer failed. [ 132.160887][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.163391][ T5841] dw2102: i2c transfer failed. [ 132.165388][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.167773][ T5841] dw2102: i2c transfer failed. [ 132.170434][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.172799][ T5841] dw2102: i2c transfer failed. [ 132.174951][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 132.177339][ T5841] dw2102: i2c transfer failed. [ 132.179207][ T5841] dvb-usb: MAC address: 02:02:02:02:02:02 [ 132.193322][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.209159][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 132.213824][ T5841] dw2102: command 0x0e transfer failed. [ 132.216230][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 132.219018][ T5841] dw2102: command 0x0e transfer failed. [ 132.274972][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.283052][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.286884][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.292035][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.296258][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.460943][ T1048] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 132.477500][ T1048] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 132.506708][ T8796] Failed to initialize the IGMP autojoin socket (err -2) [ 132.531364][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 132.533704][ T5841] dw2102: command 0x0e transfer failed. [ 132.540226][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 132.544675][ T5841] dw2102: command 0x0e transfer failed. [ 132.546445][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 132.548699][ T5841] dw2102: command 0x51 transfer failed. [ 132.551597][ T8759] dvb-usb: bulk message failed: -22 (4/0) [ 132.553433][ T8759] dw2102: i2c transfer failed. [ 132.573458][ T5841] DVB: Unable to find symbol ds3000_attach() [ 132.575490][ T5841] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 132.629697][ T5841] rc_core: IR keymap rc-su3000 not found [ 132.631491][ T5841] Registered IR keymap rc-empty [ 132.637783][ T5841] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 132.642336][ T5841] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input27 [ 132.654478][ T5841] dvb-usb: schedule remote query interval to 150 msecs. [ 132.658919][ T5841] dw2102: su3000_power_ctrl: 0, initialized 1 [ 132.663511][ T5841] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 132.674589][ T5841] usb 5-1: USB disconnect, device number 13 [ 132.712113][ T5841] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 132.862551][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.974869][ T8892] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.110706][ T8901] kvm: kvm [8899]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 134.111702][ T8914] netlink: 112 bytes leftover after parsing attributes in process `syz.0.759'. [ 134.114202][ T8901] kvm: kvm [8899]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 134.135888][ T8796] netdevsim netdevsim1 netdevsim0: renamed from eth14 [ 134.140523][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.143530][ T8796] netdevsim netdevsim1 netdevsim1: renamed from eth15 [ 134.153514][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.157460][ T8796] netdevsim netdevsim1 netdevsim2: renamed from eth16 [ 134.164158][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.167359][ T8796] netdevsim netdevsim1 netdevsim3: renamed from eth17 [ 134.174825][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.379567][ T5750] Bluetooth: hci1: command tx timeout [ 134.526184][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 134.577400][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.580931][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.584736][ T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.592535][ T12] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.597735][ T12] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.597838][ T8995] netlink: 'syz.0.770': attribute type 21 has an invalid length. [ 134.604123][ T12] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.612063][ T65] block nbd0: Receive control failed (result -1) [ 134.623933][ T8796] wireguard: wg0: Could not create IPv4 socket [ 134.627550][ T12] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.632866][ T12] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.636503][ T12] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.640507][ T12] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.644805][ T8796] wireguard: wg1: Could not create IPv4 socket [ 134.651824][ T12] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.656754][ T12] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.664727][ T41] usb 10-1: USB disconnect, device number 6 [ 134.667135][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.670714][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.682440][ T8796] wireguard: wg2: Could not create IPv4 socket [ 134.689675][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.699675][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.786072][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 134.948449][ T9019] XFS (nullb0): Invalid superblock magic number [ 135.465667][ T9046] binder: 9045:9046 ioctl 80286f4e 200000000580 returned -22 [ 135.666516][ T9073] netlink: 'syz.6.781': attribute type 13 has an invalid length. [ 135.875927][ T9092] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 135.887540][ T9092] PKCS7: Only support pkcs7_signedData type [ 136.199416][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 136.232412][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'. [ 136.419393][ T42] kauditd_printk_skb: 358 callbacks suppressed [ 136.419432][ T42] audit: type=1400 audit(1784239925.536:3816): avc: denied { write } for pid=9112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.494724][ T42] audit: type=1400 audit(1784239925.616:3817): avc: denied { read write } for pid=6964 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.502866][ T42] audit: type=1400 audit(1784239925.616:3818): avc: denied { open } for pid=6964 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.511375][ T42] audit: type=1400 audit(1784239925.616:3819): avc: denied { ioctl } for pid=6964 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.519368][ T42] audit: type=1400 audit(1784239925.616:3820): avc: denied { write } for pid=9115 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.547392][ T42] audit: type=1400 audit(1784239925.666:3821): avc: denied { ioctl } for pid=9117 comm="syz.5.788" path="socket:[29446]" dev="sockfs" ino=29446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.563387][ T42] audit: type=1400 audit(1784239925.686:3822): avc: denied { create } for pid=9117 comm="syz.5.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 136.579283][ T12] net_ratelimit: 102 callbacks suppressed [ 136.579322][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.585946][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.595414][ T42] audit: type=1400 audit(1784239925.716:3823): avc: denied { module_request } for pid=9117 comm="syz.5.788" kmod="fs-incremental-fs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 136.622774][ T42] audit: type=1400 audit(1784239925.746:3824): avc: denied { write } for pid=9121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.625368][ T9046] Set syz1 is full, maxelem 65536 reached [ 136.656743][ T42] audit: type=1400 audit(1784239925.776:3825): avc: denied { read } for pid=9125 comm="syz.5.789" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.690019][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.693247][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.799093][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.801610][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.829206][ T9141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=9141 comm=syz.5.791 [ 136.889328][ T9145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=9145 comm=syz.5.791 [ 136.909232][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 136.911861][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 136.976796][ T9155] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 137.019094][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 137.105841][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.796'. [ 137.306147][ T9187] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 137.377876][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 137.401716][ T9193] bond1: (slave lo): Releasing backup interface [ 137.405924][ T9193] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 137.409694][ T9193] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.416144][ T9193] bond2: (slave lo): Enslaving as an active interface with an up link [ 137.422959][ T9193] bond2 (unregistering): (slave lo): Releasing backup interface [ 137.425959][ T9193] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 137.432270][ T9193] bond2 (unregistering): Released all slaves [ 137.476149][ T9200] overlayfs: failed to resolve './file1': -2 [ 137.537113][ T9205] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 137.546162][ T9205] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 137.549784][ T9213] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 137.553287][ T9213] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 137.821668][ T9246] deleting an unspecified loop device is not supported. [ 137.824848][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 137.830154][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 137.999021][ T1354] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 138.130496][ T1354] usb 10-1: device descriptor read/64, error -71 [ 138.369045][ T1354] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 138.501104][ T1354] usb 10-1: device descriptor read/64, error -71 [ 138.610595][ T1354] usb usb10-port1: attempt power cycle [ 138.780604][ T9285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.812'. [ 138.948842][ T1354] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 138.970094][ T1354] usb 10-1: device descriptor read/8, error -71 [ 139.026982][ T9291] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.219830][ T1354] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 139.249809][ T1354] usb 10-1: device descriptor read/8, error -71 [ 139.361502][ T1354] usb usb10-port1: unable to enumerate USB device [ 139.606462][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.612402][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.616809][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.623920][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.628589][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.883087][ T9311] Failed to initialize the IGMP autojoin socket (err -2) [ 140.104040][ T9311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.144368][ T9358] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 140.214364][ T9311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.308511][ T9367] Failed to initialize the IGMP autojoin socket (err -2) [ 140.364942][ T9311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.445130][ T9311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.578198][ T7716] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.601145][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 140.615424][ T7716] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.634659][ T7716] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.656922][ T7716] netdevsim netdevsim1 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.669637][ T9311] netdevsim netdevsim1 netdevsim0: renamed from eth14 [ 140.679486][ T9311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.683597][ T9311] netdevsim netdevsim1 netdevsim1: renamed from eth15 [ 140.691314][ T9311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.695456][ T9311] netdevsim netdevsim1 netdevsim2: renamed from eth16 [ 140.703771][ T9311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.707635][ T9311] netdevsim netdevsim1 netdevsim3: renamed from eth17 [ 140.717147][ T9311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.759301][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 140.768387][ T5886] usb 5-1: config 0 has no interfaces? [ 140.786346][ T5886] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 140.799689][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.805200][ T5886] usb 5-1: Product: syz [ 140.806971][ T5886] usb 5-1: Manufacturer: syz [ 140.816529][ T5886] usb 5-1: SerialNumber: syz [ 140.826557][ T5886] usb 5-1: config 0 descriptor?? [ 140.875526][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.823'. [ 140.880139][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.823'. [ 140.928593][ T9393] netlink: 84 bytes leftover after parsing attributes in process `syz.5.824'. [ 140.955352][ T9393] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 141.041623][ T9367] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 141.051702][ T9367] Error validating options; rc = [-22] [ 141.055430][ T41] usb 5-1: USB disconnect, device number 14 [ 141.119545][ T9408] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 141.123903][ T9408] binder: 9407:9408 ioctl 4018620d 200000000100 returned -1 [ 141.141435][ T9311] wireguard: wg0: Could not create IPv4 socket [ 141.144554][ T9311] wireguard: wg1: Could not create IPv4 socket [ 141.147655][ T9311] wireguard: wg2: Could not create IPv4 socket [ 141.248763][ T9415] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 141.251142][ T9415] binder: 9407:9415 ioctl 4018620d 200000004a80 returned -1 [ 141.509257][ T42] kauditd_printk_skb: 273 callbacks suppressed [ 141.509275][ T42] audit: type=1400 audit(1784239930.636:4099): avc: denied { write } for pid=9422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.575435][ T42] audit: type=1400 audit(1784239930.696:4100): avc: denied { write } for pid=9425 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.586182][ T42] audit: type=1400 audit(1784239930.706:4101): avc: denied { read write } for pid=5739 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.598129][ T42] audit: type=1400 audit(1784239930.706:4102): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.606036][ T42] audit: type=1400 audit(1784239930.706:4103): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.614921][ T9429] CIFS mount error: No usable UNC path provided in device string! [ 141.614921][ T9429] [ 141.618785][ T9429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 141.652981][ T42] audit: type=1400 audit(1784239930.776:4104): avc: denied { read } for pid=9431 comm="syz.0.829" dev="nsfs" ino=4026533309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.660917][ T5789] net_ratelimit: 92 callbacks suppressed [ 141.660928][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.665893][ T42] audit: type=1400 audit(1784239930.786:4105): avc: denied { open } for pid=9431 comm="syz.0.829" path="net:[4026533309]" dev="nsfs" ino=4026533309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.668019][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 141.675569][ T42] audit: type=1400 audit(1784239930.786:4106): avc: denied { create } for pid=9431 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.675595][ T42] audit: type=1400 audit(1784239930.786:4107): avc: denied { bind } for pid=9431 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.675616][ T42] audit: type=1400 audit(1784239930.786:4108): avc: denied { listen } for pid=9431 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.717085][ T5095] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 141.808602][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.811101][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 141.918543][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 141.921058][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 142.012083][ T9450] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.028645][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.031287][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 142.149512][ T7716] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 142.152573][ T7716] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 142.355261][ T1354] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 142.528387][ T1354] usb 10-1: Using ep0 maxpacket: 8 [ 142.534281][ T1354] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 142.537029][ T1354] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.541242][ T9484] netlink: 59 bytes leftover after parsing attributes in process `syz.0.836'. [ 142.541446][ T1354] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.547097][ T1354] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.551421][ T1354] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.556199][ T1354] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.559788][ T1354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.677541][ T9501] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 142.766076][ T1354] usb 10-1: usb_control_msg returned -32 [ 142.767998][ T1354] usbtmc 10-1:16.0: can't read capabilities [ 142.904425][ T5095] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 143.480624][ T5821] usb 10-1: USB disconnect, device number 11 [ 143.801623][ T9569] netlink: 'syz.0.848': attribute type 20 has an invalid length. [ 143.863059][ T5750] Bluetooth: hci2: Dropping invalid advertising data [ 143.865680][ T5750] Bluetooth: hci2: Dropping invalid advertising data [ 143.870303][ T5750] Bluetooth: hci2: Malformed LE Event: 0x02 [ 143.958267][ T1354] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 144.131382][ T1354] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 144.134749][ T1354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.137921][ T1354] usb 10-1: Product: syz [ 144.140015][ T1354] usb 10-1: Manufacturer: syz [ 144.142066][ T1354] usb 10-1: SerialNumber: syz [ 144.407744][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.853'. [ 144.407972][ T9556] overlayfs: upper fs does not support tmpfile. [ 144.411677][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.853'. [ 144.458369][ T1354] rtl8150 10-1:1.0: couldn't reset the device [ 144.461175][ T1354] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 144.472140][ T1354] usb 10-1: USB disconnect, device number 12 [ 144.585608][ T5789] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.670199][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.678375][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.687800][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.703862][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.708270][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.710987][ T5789] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.837034][ T5789] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.908227][ T9637] xt_hashlimit: size too large, truncated to 1048576 [ 144.913536][ T9617] Failed to initialize the IGMP autojoin socket (err -2) [ 144.962329][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 144.969795][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 144.976124][ T5789] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.077436][ T7716] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.106751][ T7716] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.122714][ T7716] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.161054][ T7716] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.171247][ T5789] bridge_slave_1: left allmulticast mode [ 145.173101][ T5789] bridge_slave_1: left promiscuous mode [ 145.175039][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.179919][ T5789] bridge_slave_0: left allmulticast mode [ 145.181856][ T5789] bridge_slave_0: left promiscuous mode [ 145.184427][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.312031][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.316573][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.323984][ T5789] bond0 (unregistering): Released all slaves [ 145.331977][ T9660] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 145.453254][ T12] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.470964][ T12] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.502027][ T12] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.511043][ T9678] Failed to initialize the IGMP autojoin socket (err -2) [ 145.543857][ T12] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.718316][ T9688] block nbd1: server does not support multiple connections per device. [ 145.721841][ T9688] block nbd1: shutting down sockets [ 145.735348][ T5789] hsr_slave_0: left promiscuous mode [ 145.738227][ T5789] hsr_slave_1: left promiscuous mode [ 145.742835][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.747076][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.751982][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.754485][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.762321][ T5789] veth1_macvtap: left promiscuous mode [ 145.764187][ T5789] veth0_macvtap: left promiscuous mode [ 145.766067][ T5789] veth1_vlan: left promiscuous mode [ 145.767755][ T5789] veth0_vlan: left promiscuous mode [ 145.958177][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 145.977428][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 146.354300][ T9617] wireguard: wg0: Could not create IPv4 socket [ 146.357268][ T9617] wireguard: wg1: Could not create IPv4 socket [ 146.362169][ T9617] wireguard: wg2: Could not create IPv4 socket [ 146.606649][ T42] kauditd_printk_skb: 374 callbacks suppressed [ 146.606687][ T42] audit: type=1400 audit(1784239935.727:4483): avc: denied { write } for pid=9749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.638440][ T42] audit: type=1400 audit(1784239935.767:4484): avc: denied { execute } for pid=9753 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 146.646180][ T42] audit: type=1400 audit(1784239935.767:4485): avc: denied { execute_no_trans } for pid=9753 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 146.660956][ T42] audit: type=1400 audit(1784239935.787:4486): avc: denied { write } for pid=9752 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.667612][ T42] audit: type=1400 audit(1784239935.787:4487): avc: denied { read } for pid=9755 comm="syz.5.870" name="comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.676127][ T42] audit: type=1400 audit(1784239935.787:4488): avc: denied { open } for pid=9755 comm="syz.5.870" path="/dev/comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.682927][ T42] audit: type=1400 audit(1784239935.787:4489): avc: denied { mounton } for pid=9755 comm="syz.5.870" path="/176/file0" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.682951][ T42] audit: type=1400 audit(1784239935.787:4490): avc: denied { read } for pid=9755 comm="syz.5.870" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.682974][ T42] audit: type=1400 audit(1784239935.787:4491): avc: denied { execmem } for pid=9753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.682995][ T42] audit: type=1400 audit(1784239935.787:4492): avc: denied { open } for pid=9755 comm="syz.5.870" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.685604][ T9756] netlink: 'syz.0.869': attribute type 13 has an invalid length. [ 146.720623][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.723473][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.731645][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.744678][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.747336][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.768675][ T5789] net_ratelimit: 100 callbacks suppressed [ 146.768690][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.788951][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.809432][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.817843][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 146.929100][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 146.931908][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 146.953034][ T9763] Failed to initialize the IGMP autojoin socket (err -2) [ 147.037837][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.057887][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.063272][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 147.101620][ T9808] netlink: 'syz.0.876': attribute type 13 has an invalid length. [ 147.168102][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 147.188830][ T9763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.197851][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.877'. [ 147.201760][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.877'. [ 147.221533][ T9806] geneve2: entered promiscuous mode [ 147.427851][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 147.597767][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 147.600782][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 147.603660][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.606825][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.610509][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.613973][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.618890][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.622233][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.830592][ T29] usb 5-1: usb_control_msg returned -32 [ 147.832539][ T29] usbtmc 5-1:16.0: can't read capabilities [ 148.546649][ T29] usb 5-1: USB disconnect, device number 15 [ 148.767705][ T5750] Bluetooth: hci0: command tx timeout [ 149.219708][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.891'. [ 149.414874][ T9948] netlink: 104 bytes leftover after parsing attributes in process `syz.5.893'. [ 149.535248][ T9953] 9pnet_fd: Insufficient options for proto=fd [ 149.624376][ T9967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.898'. [ 150.554351][T10008] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 150.557054][T10008] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 150.562489][T10008] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 150.821183][T10039] netlink: 'syz.5.907': attribute type 1 has an invalid length. [ 150.857640][ T5750] Bluetooth: hci0: command tx timeout [ 150.884731][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 151.092513][ T9763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 151.146922][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.156114][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.161471][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.164449][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.167624][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.225287][ T9763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.240222][T10086] netlink: 104 bytes leftover after parsing attributes in process `syz.0.914'. [ 151.345877][ T9763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.372726][T10103] batadv0: entered promiscuous mode [ 151.378421][T10103] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 151.383910][T10103] batadv0: left promiscuous mode [ 151.534534][ T5812] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.566093][T10116] bond0: left allmulticast mode [ 151.570210][T10116] bond_slave_0: left allmulticast mode [ 151.577772][T10116] bond_slave_1: left allmulticast mode [ 151.581554][ T5812] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.609663][ T42] kauditd_printk_skb: 299 callbacks suppressed [ 151.609707][ T42] audit: type=1400 audit(1784239940.738:4792): avc: denied { create } for pid=10121 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.626185][ T5812] netdevsim netdevsim1 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.632087][T10069] Failed to initialize the IGMP autojoin socket (err -2) [ 151.640767][ T5812] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.644783][ T42] audit: type=1400 audit(1784239940.748:4793): avc: denied { write } for pid=10121 comm="syz.5.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.648692][ T9763] netdevsim netdevsim1 netdevsim0: renamed from eth22 [ 151.653053][T10124] netlink: 104 bytes leftover after parsing attributes in process `syz.0.920'. [ 151.663584][ T42] audit: type=1400 audit(1784239940.768:4794): avc: denied { write } for pid=10119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.673392][ T42] audit: type=1400 audit(1784239940.768:4795): avc: denied { read } for pid=9763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.682630][ T42] audit: type=1400 audit(1784239940.778:4796): avc: denied { create } for pid=10123 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.695720][ T9763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.698449][ T42] audit: type=1400 audit(1784239940.778:4797): avc: denied { write } for pid=10123 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.700493][ T9763] netdevsim netdevsim1 netdevsim1: renamed from eth23 [ 151.705127][ T42] audit: type=1400 audit(1784239940.778:4798): avc: denied { nlmsg_write } for pid=10123 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.724011][ T9763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.726886][ T42] audit: type=1400 audit(1784239940.828:4799): avc: denied { read append } for pid=10121 comm="syz.5.919" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.730150][ T9763] netdevsim netdevsim1 netdevsim2: renamed from eth24 [ 151.734891][ T42] audit: type=1400 audit(1784239940.828:4800): avc: denied { open } for pid=10121 comm="syz.5.919" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.744043][ T42] audit: type=1400 audit(1784239940.828:4801): avc: denied { ioctl } for pid=10121 comm="syz.5.919" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.757976][ T9763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.761578][T10127] wireguard: wg0: Could not create IPv4 socket [ 151.766090][ T9763] netdevsim netdevsim1 netdevsim3: renamed from eth25 [ 151.777398][ T5789] net_ratelimit: 95 callbacks suppressed [ 151.777415][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.778586][ T9763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.807834][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.827305][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.858731][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.878837][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 151.888840][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 151.913721][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.921'. [ 152.007690][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.015645][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.020920][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.025382][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.026328][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 152.046727][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.049971][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.147275][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 152.150142][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 152.229192][T10153] Failed to initialize the IGMP autojoin socket (err -2) [ 152.229287][ T9763] wireguard: wg0: Could not create IPv4 socket [ 152.234789][ T9763] wireguard: wg1: Could not create IPv4 socket [ 152.239436][ T9763] wireguard: wg2: Could not create IPv4 socket [ 152.558509][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.562980][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.566582][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.573208][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.581791][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.780010][T10187] Failed to initialize the IGMP autojoin socket (err -2) [ 152.856371][T10209] netlink: 104 bytes leftover after parsing attributes in process `syz.5.925'. [ 152.921029][T10217] Can't find a SQUASHFS superblock on nullb0 [ 153.001712][T10187] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.037123][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 153.057697][T10078] Bluetooth: hci1: Frame reassembly failed (-84) [ 153.068277][T10224] Bluetooth: hci1: Frame reassembly failed (-84) [ 153.079774][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 153.138510][T10187] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.167091][ T9] usb 5-1: device descriptor read/64, error -71 [ 153.195533][T10187] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.276605][T10187] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.375918][ T5789] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.389097][ T5789] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.399187][ T5789] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.409622][ T12] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.427986][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.567391][ T9] usb 5-1: device descriptor read/64, error -71 [ 153.678050][ T9] usb usb5-port1: attempt power cycle [ 153.861820][T10187] wireguard: wg0: Could not create IPv4 socket [ 153.866462][T10187] wireguard: wg1: Could not create IPv4 socket [ 153.871732][T10187] wireguard: wg2: Could not create IPv4 socket [ 154.037035][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.058369][ T9] usb 5-1: device descriptor read/8, error -71 [ 154.307109][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.330233][ T9] usb 5-1: device descriptor read/8, error -71 [ 154.437584][ T9] usb usb5-port1: unable to enumerate USB device [ 155.086940][ T5750] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 155.087647][ T5095] Bluetooth: hci1: command 0xfc11 tx timeout [ 155.250742][T10332] fuse: Unknown parameter '' [ 155.536944][ T5107] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 155.691122][ T5107] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.696796][ T5107] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.701221][ T5107] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.704049][ T5107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.862913][ T1283] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 155.868345][ T1283] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.912316][ T5107] usb 10-1: GET_CAPABILITIES returned c3 [ 155.914396][ T5107] usbtmc 10-1:16.0: can't read capabilities [ 156.476205][T10359] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -32 [ 156.485599][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.489899][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.503220][ T5107] usb 10-1: USB disconnect, device number 13 [ 156.642617][ T42] kauditd_printk_skb: 228 callbacks suppressed [ 156.642652][ T42] audit: type=1400 audit(1784239945.768:5030): avc: denied { write } for pid=10368 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.775323][ T42] audit: type=1400 audit(1784239945.898:5031): avc: denied { write } for pid=10370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.786707][ T5789] net_ratelimit: 86 callbacks suppressed [ 156.786719][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.791738][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 156.830638][ T42] audit: type=1400 audit(1784239945.958:5032): avc: denied { write } for pid=10373 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.906819][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 156.909701][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 156.936393][ T42] audit: type=1400 audit(1784239946.058:5033): avc: denied { write } for pid=10375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.988156][ T42] audit: type=1400 audit(1784239946.118:5034): avc: denied { write } for pid=10378 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.016848][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.020213][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 157.056998][ T42] audit: type=1400 audit(1784239946.188:5035): avc: denied { execute } for pid=10382 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 157.065415][ T42] audit: type=1400 audit(1784239946.188:5036): avc: denied { execute_no_trans } for pid=10382 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 157.074247][ T42] audit: type=1400 audit(1784239946.198:5037): avc: denied { execmem } for pid=10382 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 157.081533][ T42] audit: type=1400 audit(1784239946.208:5038): avc: denied { create } for pid=10384 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.088081][ T42] audit: type=1400 audit(1784239946.208:5039): avc: denied { write } for pid=10384 comm="syz.5.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.120287][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.126919][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.128281][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.129426][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 157.135539][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.143756][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.147496][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.237480][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 157.240001][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 157.317230][T10386] Failed to initialize the IGMP autojoin socket (err -2) [ 157.396602][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 157.493220][T10386] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.548032][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.551477][ T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.554352][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.558533][ T10] usb 10-1: config 0 descriptor?? [ 157.767900][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 157.770052][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 157.775057][ T10] usb 10-1: USB disconnect, device number 14 [ 157.886629][ T5750] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.886649][ T64] Bluetooth: hci0: command 0x1003 tx timeout [ 158.216593][ T5886] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 158.396875][ T5886] usb 10-1: Using ep0 maxpacket: 32 [ 158.406201][ T5886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.410549][ T5886] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 158.413519][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.418507][ T5886] usb 10-1: config 0 descriptor?? [ 158.421819][ T5886] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 158.433320][ T5886] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 158.635553][ T5887] usb 10-1: USB disconnect, device number 15 [ 158.638122][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 158.644494][ T5887] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 158.930060][T10386] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.111810][T10386] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.139440][T10437] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 159.139440][T10437] program syz.0.936 not setting count and/or reply_len properly [ 159.167258][ T5750] Bluetooth: hci1: command tx timeout [ 159.220010][T10386] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.411010][ T5789] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.430625][ T5789] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.443480][ T5789] netdevsim netdevsim1 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.457098][ T5789] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.462291][T10386] netdevsim netdevsim1 netdevsim0: renamed from eth22 [ 159.469004][T10386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.471907][T10386] netdevsim netdevsim1 netdevsim1: renamed from eth23 [ 159.476805][T10386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.480418][T10386] netdevsim netdevsim1 netdevsim2: renamed from eth24 [ 159.486593][T10386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.489377][T10386] netdevsim netdevsim1 netdevsim3: renamed from eth25 [ 159.493887][T10386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.824086][T10386] wireguard: wg0: Could not create IPv4 socket [ 159.830084][T10386] wireguard: wg1: Could not create IPv4 socket [ 159.835797][T10386] wireguard: wg2: Could not create IPv4 socket [ 159.850065][T10516] gre0: Caught tx_queue_len zero misconfig [ 159.853468][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.866154][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.877705][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.878783][T10516] xt_hashlimit: size too large, truncated to 1048576 [ 159.884102][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.888003][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.170521][T10514] Failed to initialize the IGMP autojoin socket (err -2) [ 160.418953][T10514] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.438331][T10568] ip6gretap1: entered promiscuous mode [ 160.440168][T10568] ip6gretap1: entered allmulticast mode [ 160.556230][T10514] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.651674][T10514] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.659758][T10585] overlay: Unknown parameter 'fsmagic' [ 160.730873][T10514] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.747269][T10599] netlink: 172 bytes leftover after parsing attributes in process `syz.0.953'. [ 160.752168][T10599] 9p: Unknown Cache mode or invalid value f [ 161.002712][ T5812] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.027861][ T5812] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.050778][ T5812] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.073725][ T5812] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.220562][ T64] Bluetooth: hci2: unexpected event for opcode 0x080d [ 161.498826][T10514] wireguard: wg0: Could not create IPv4 socket [ 161.505678][T10514] wireguard: wg1: Could not create IPv4 socket [ 161.514413][T10514] wireguard: wg2: Could not create IPv4 socket [ 161.650881][ T42] kauditd_printk_skb: 355 callbacks suppressed [ 161.650896][ T42] audit: type=1400 audit(1784239950.779:5395): avc: denied { create } for pid=10673 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.663688][ T42] audit: type=1400 audit(1784239950.779:5396): avc: denied { write } for pid=10678 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.672511][ T42] audit: type=1400 audit(1784239950.779:5397): avc: denied { remove_name } for pid=10678 comm="rm" name="resolv.conf.veth0_to_bond.ipv4ll" dev="tmpfs" ino=7224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.682166][ T42] audit: type=1400 audit(1784239950.779:5398): avc: denied { unlink } for pid=10678 comm="rm" name="resolv.conf.veth0_to_bond.ipv4ll" dev="tmpfs" ino=7224 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.691320][ T42] audit: type=1400 audit(1784239950.789:5399): avc: denied { write } for pid=10673 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.714308][ T42] audit: type=1400 audit(1784239950.839:5400): avc: denied { mmap_zero } for pid=10673 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 161.723852][ T42] audit: type=1400 audit(1784239950.849:5401): avc: denied { create } for pid=10673 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.746141][ T42] audit: type=1400 audit(1784239950.849:5402): avc: denied { read } for pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 161.776631][ T42] audit: type=1400 audit(1784239950.899:5403): avc: denied { map } for pid=10673 comm="syz.0.965" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.789073][ T42] audit: type=1400 audit(1784239950.919:5404): avc: denied { read write execute } for pid=10673 comm="syz.0.965" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.886463][ T5812] net_ratelimit: 91 callbacks suppressed [ 161.886482][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.892412][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 161.929068][T10695] netlink: 'syz.0.967': attribute type 21 has an invalid length. [ 161.933072][T10695] i2c i2c-1: dtv_property_process_set: SET cmd 0xfe22d3d9 undefined [ 161.976617][T10699] netlink: 'syz.0.968': attribute type 2 has an invalid length. [ 161.996163][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 161.998811][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 162.116335][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.123445][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 162.153079][T10709] kvm: MWAIT instruction emulated as NOP! [ 162.167882][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'. [ 162.236082][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.239682][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 162.347754][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 162.353490][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 162.465723][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.976'. [ 162.469239][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.976'. [ 162.556462][T10744] overlayfs: missing 'workdir' [ 162.559032][T10743] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 162.703063][T10754] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 162.705804][T10754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.710569][T10754] vhci_hcd vhci_hcd.0: Device attached [ 162.946049][ T5820] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 163.443267][T10756] vhci_hcd: connection reset by peer [ 163.450581][ T5812] vhci_hcd vhci_hcd.5: stop threads [ 163.452922][ T5812] vhci_hcd vhci_hcd.5: release socket [ 163.457748][ T5812] vhci_hcd vhci_hcd.5: disconnect device [ 163.854145][T10813] netlink: 44 bytes leftover after parsing attributes in process `syz.0.985'. [ 164.104797][T10831] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 164.360746][T10864] futex_wake_op: syz.5.996 tries to shift op by 32; fix this program [ 164.364601][T10865] futex_wake_op: syz.5.996 tries to shift op by 32; fix this program [ 164.381714][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.386525][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.579943][T10881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.582843][T10881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.630234][T10885] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 164.756003][T10904] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.125760][ T1354] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 165.307792][ T1354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.313130][ T1354] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.316523][ T1354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.323882][ T1354] usb 5-1: config 0 descriptor?? [ 165.537565][ T1354] usbhid 5-1:0.0: can't add hid device: -71 [ 165.539587][ T1354] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.543681][ T1354] usb 5-1: USB disconnect, device number 20 [ 166.003785][T10958] batman_adv: batadv0: Adding interface: macvtap1 [ 166.010776][T10958] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.018786][T10958] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 166.053486][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.059385][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.067751][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.073819][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.079693][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.107129][T10967] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 166.131411][T10629] hid-generic E049:0000:0000.0003: unknown main item tag 0x0 [ 166.142310][T10970] Bluetooth: MGMT ver 1.23 [ 166.142801][T10629] hid-generic E049:0000:0000.0003: unknown main item tag 0x0 [ 166.158439][T10629] hid-generic E049:0000:0000.0003: hidraw1: HID v0.0e Device [syz0] on syz0 [ 166.191060][T10974] fido_id[10974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.317972][T10961] Failed to initialize the IGMP autojoin socket (err -2) [ 166.428527][T11006] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1018'. [ 166.432453][T11004] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1018'. [ 166.556013][T10961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.672929][ T42] kauditd_printk_skb: 392 callbacks suppressed [ 166.672941][ T42] audit: type=1400 audit(1784239955.799:5797): avc: denied { read write } for pid=11017 comm="syz.5.1020" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 166.674048][T11018] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 125d, magic 12 != 6b] [ 166.674967][ T42] audit: type=1400 audit(1784239955.799:5798): avc: denied { open } for pid=11017 comm="syz.5.1020" path="/254/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 166.697104][ T42] audit: type=1400 audit(1784239955.799:5799): avc: denied { ioctl } for pid=11017 comm="syz.5.1020" path="/254/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 166.706307][ T42] audit: type=1400 audit(1784239955.819:5800): avc: denied { read } for pid=11025 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.715693][ T42] audit: type=1400 audit(1784239955.819:5801): avc: denied { read open } for pid=11025 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.725489][ T42] audit: type=1400 audit(1784239955.819:5802): avc: denied { getattr } for pid=11025 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.745654][ T42] audit: type=1400 audit(1784239955.839:5803): avc: denied { unmount } for pid=6964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 166.753398][ T42] audit: type=1400 audit(1784239955.879:5804): avc: denied { read } for pid=11026 comm="syz.5.1021" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.762493][ T42] audit: type=1400 audit(1784239955.879:5805): avc: denied { open } for pid=11026 comm="syz.5.1021" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.776033][ T42] audit: type=1400 audit(1784239955.879:5806): avc: denied { write } for pid=11024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.946125][ T5812] net_ratelimit: 80 callbacks suppressed [ 166.948741][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.965503][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 166.969921][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 167.075500][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 167.078464][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 167.185521][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 167.191014][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 167.251598][T10961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.295468][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 167.298953][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 167.359696][T10961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.403594][T11043] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 167.415408][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 167.501754][T10961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.526622][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.533884][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.544322][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.551355][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.554736][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.658386][ T5821] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 167.705202][ T5812] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.726811][ T5812] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.762533][ T5812] netdevsim netdevsim1 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.780743][ T5812] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.791349][T10961] netdevsim netdevsim1 netdevsim0: renamed from eth22 [ 167.805175][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.809679][T10961] netdevsim netdevsim1 netdevsim1: renamed from eth23 [ 167.822921][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.830098][T10961] netdevsim netdevsim1 netdevsim2: renamed from eth24 [ 167.846912][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.850745][T10961] netdevsim netdevsim1 netdevsim3: renamed from eth25 [ 167.857622][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.903796][T11050] Failed to initialize the IGMP autojoin socket (err -2) [ 167.985341][T10629] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 168.047399][ T5820] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 168.135625][ T64] Bluetooth: hci0: command tx timeout [ 168.165285][T10629] usb 5-1: Using ep0 maxpacket: 32 [ 168.169508][T10629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.173664][T10629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.179282][T10629] usb 5-1: config 0 has no interfaces? [ 168.184399][T10629] usb 5-1: string descriptor 0 read error: -22 [ 168.188938][T10629] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 168.192525][T10629] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 168.199677][T10629] usb 5-1: config 0 descriptor?? [ 168.229801][T10961] wireguard: wg0: Could not create IPv4 socket [ 168.233990][T10961] wireguard: wg1: Could not create IPv4 socket [ 168.244113][T10961] wireguard: wg2: Could not create IPv4 socket [ 168.408988][ T5821] usb 5-1: USB disconnect, device number 21 [ 168.776781][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.782513][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.788263][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.791979][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.794914][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.988209][T11130] batman_adv: batadv0: Adding interface: macvtap1 [ 168.991075][T11130] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.002356][T11130] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 169.029979][T11114] Failed to initialize the IGMP autojoin socket (err -2) [ 169.225148][T11129] dummy0: entered allmulticast mode [ 169.268757][T11114] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.325686][T11114] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.404331][T11114] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.459854][T11114] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.611217][ T5812] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.627078][ T5812] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.642034][ T5812] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.680013][ T5789] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.809100][T11182] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 169.847209][T11182] zonefs: Unknown parameter 'aclN&agd‹1KqUBdU?}untz W8vt:Dʸհ8#8rI' [ 170.134720][T11114] wireguard: wg0: Could not create IPv4 socket [ 170.141679][T11114] wireguard: wg1: Could not create IPv4 socket [ 170.144771][T11114] wireguard: wg2: Could not create IPv4 socket [ 170.228781][ T5821] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 170.334856][T11225] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1043'. [ 170.396757][ T5821] usb 10-1: Using ep0 maxpacket: 32 [ 170.403876][ T5821] usb 10-1: unable to get BOS descriptor or descriptor too short [ 170.408587][ T5821] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.412694][ T5821] usb 10-1: config 0 has no interfaces? [ 170.417326][ T5821] usb 10-1: string descriptor 0 read error: -22 [ 170.419367][ T5821] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 170.422216][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 170.427782][ T5821] usb 10-1: config 0 descriptor?? [ 170.637330][ T5821] usb 10-1: USB disconnect, device number 17 [ 171.248847][T11261] kvm_intel: kvm [11260]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff [ 171.646074][T11291] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1053'. [ 171.675615][ T42] kauditd_printk_skb: 308 callbacks suppressed [ 171.675626][ T42] audit: type=1400 audit(1784239960.810:6115): avc: denied { map_read map_write } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.686608][ T42] audit: type=1400 audit(1784239960.810:6116): avc: denied { create } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.694702][T11295] Invalid source name [ 171.696322][T11295] UBIFS error (pid: 11295): cannot open "./file0", error -22 [ 171.697862][ T42] audit: type=1400 audit(1784239960.820:6117): avc: denied { create } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.712792][ T42] audit: type=1400 audit(1784239960.820:6118): avc: denied { setopt } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.720316][ T42] audit: type=1400 audit(1784239960.820:6119): avc: denied { create } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.726725][ T42] audit: type=1400 audit(1784239960.820:6120): avc: denied { write } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.732995][ T42] audit: type=1400 audit(1784239960.820:6121): avc: denied { create } for pid=11294 comm="syz.0.1054" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 171.739571][ T42] audit: type=1400 audit(1784239960.820:6122): avc: denied { mounton } for pid=11294 comm="syz.0.1054" path="/335/file0" dev="tmpfs" ino=1876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 171.746938][ T42] audit: type=1400 audit(1784239960.830:6123): avc: denied { prog_load } for pid=11294 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.752770][ T42] audit: type=1400 audit(1784239960.830:6124): avc: denied { write } for pid=11292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.925089][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.929204][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.932594][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.938458][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.941593][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.944604][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.947591][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.949934][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.952229][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.954584][ T5821] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 171.957456][ T5789] net_ratelimit: 87 callbacks suppressed [ 171.957466][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 171.965038][ T5789] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 171.968474][ T5821] hid-generic 0000:0000:0004.0004: hidraw1: HID v0.03 Device [syz1] on syz0 [ 172.007883][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 172.074857][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 172.077053][T11330] netlink: 'syz.0.1063': attribute type 4 has an invalid length. [ 172.095343][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 172.098706][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 172.204965][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 172.207625][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 172.314794][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 172.317361][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 172.429027][T11340] JFS: charset not found [ 172.434868][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 173.494704][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 174.752941][ T5812] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.756522][ T5812] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.763053][ T5812] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.765391][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.768732][ T5812] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.773117][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.777542][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.790557][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.793396][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.033292][T11437] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.055535][T11416] Failed to initialize the IGMP autojoin socket (err -2) [ 175.187218][T11452] (syz.0.1078,11452,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 175.190378][T11452] (syz.0.1078,11452,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 175.192763][T11452] (syz.0.1078,11452,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 175.200967][T11452] (syz.0.1078,11452,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 175.270131][T11416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.309441][T11452] overlay: Unknown parameter 'euid<00000000000000000000' [ 175.897322][T11416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.998649][T11416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.088522][T11416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.212154][ T5789] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.242691][ T5812] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.267518][ T5812] netdevsim netdevsim1 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.287770][ T5789] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.298018][T11416] netdevsim netdevsim1 netdevsim0: renamed from eth22 [ 176.307595][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.311407][T11416] netdevsim netdevsim1 netdevsim1: renamed from eth23 [ 176.317358][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.325317][T11416] netdevsim netdevsim1 netdevsim2: renamed from eth24 [ 176.331406][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.335288][T11416] netdevsim netdevsim1 netdevsim3: renamed from eth25 [ 176.343449][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.679435][T11416] wireguard: wg0: Could not create IPv4 socket [ 176.682652][T11416] wireguard: wg1: Could not create IPv4 socket [ 176.686699][T11416] wireguard: wg2: Could not create IPv4 socket [ 176.689884][ T42] kauditd_printk_skb: 268 callbacks suppressed [ 176.689918][ T42] audit: type=1400 audit(1784239965.821:6393): avc: denied { create } for pid=11416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.701243][ T42] audit: type=1400 audit(1784239965.821:6394): avc: denied { write } for pid=11416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.709979][ T42] audit: type=1400 audit(1784239965.821:6395): avc: denied { read } for pid=11416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.840839][ T42] audit: type=1400 audit(1784239965.971:6396): avc: denied { execute } for pid=11498 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 176.852067][ T42] audit: type=1400 audit(1784239965.971:6397): avc: denied { execute_no_trans } for pid=11498 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 176.861978][ T42] audit: type=1400 audit(1784239965.991:6398): avc: denied { execmem } for pid=11498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.869242][ T42] audit: type=1400 audit(1784239965.991:6399): avc: denied { read } for pid=5448 comm="dhcpcd" name="n97" dev="tmpfs" ino=5266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.884264][ T42] audit: type=1400 audit(1784239965.991:6400): avc: denied { open } for pid=5448 comm="dhcpcd" path="/run/udev/data/n97" dev="tmpfs" ino=5266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.894910][ T42] audit: type=1400 audit(1784239965.991:6401): avc: denied { getattr } for pid=5448 comm="dhcpcd" path="/run/udev/data/n97" dev="tmpfs" ino=5266 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.904549][ T42] audit: type=1400 audit(1784239966.001:6402): avc: denied { read } for pid=11500 comm="syz.5.1081" dev="nsfs" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 176.937909][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.943611][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.948299][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.958837][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.964358][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.034810][T11528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 177.038993][T11528] overlayfs: missing 'lowerdir' [ 177.058593][T11525] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.067302][ T5812] net_ratelimit: 91 callbacks suppressed [ 177.067314][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.081212][T11525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.084385][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.093503][T11525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.106073][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.111860][T11525] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 177.116815][T11525] batman_adv: batadv0: Interface activated: macvtap1 [ 177.125323][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.145101][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.146756][T11537] Unsupported ieee802154 address type: 0 [ 177.164814][ T5789] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.184414][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.188106][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 177.237592][T11547] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.240836][T11544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.259671][T11547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.267581][T11547] block nbd0: shutting down sockets [ 177.294216][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 177.298752][T11507] Failed to initialize the IGMP autojoin socket (err -2) [ 177.491713][T11565] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 177.495165][T11565] PKCS7: Only support pkcs7_signedData type [ 177.519265][T11507] netdevsim netdevsim7 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.554318][ T50] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 177.643792][T11507] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.714743][ T50] usb 10-1: Using ep0 maxpacket: 32 [ 177.719600][ T50] usb 10-1: unable to get BOS descriptor or descriptor too short [ 177.723352][ T50] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 177.726995][ T50] usb 10-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 177.727393][T11507] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.733481][ T50] usb 10-1: string descriptor 0 read error: -22 [ 177.736359][ T50] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 177.739857][ T50] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 177.811176][T11579] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.816592][T11579] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 177.821025][T11579] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.824653][T11579] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 177.845095][T11507] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.958980][ T5887] usb 10-1: USB disconnect, device number 18 [ 178.008845][ T5812] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.032106][ T5812] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.049668][ T12] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.068677][ T5812] netdevsim netdevsim7 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.514607][T11507] wireguard: wg0: Could not create IPv4 socket [ 178.518653][T11507] wireguard: wg1: Could not create IPv4 socket [ 178.531601][T11507] wireguard: wg2: Could not create IPv4 socket [ 178.629756][T11624] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 178.633576][T11624] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 178.636293][T11624] CPU: 3 UID: 0 PID: 11624 Comm: kbnepd bnep0 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.639969][T11624] Tainted: [L]=SOFTLOCKUP [ 178.641339][T11624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.644483][T11624] RIP: 0010:klist_put+0x4d/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.646106][T11624] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 0e 0d [ 178.652676][T11624] RSP: 0018:ffffc900059f7970 EFLAGS: 00010202 [ 178.654678][T11624] RAX: dffffc0000000000 RBX: ffff888056024460 RCX: ffffffff82be7da1 [ 178.657203][T11624] RDX: 000000000000000b RSI: ffffffff8baf43a5 RDI: 0000000000000058 [ 178.659661][T11624] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 178.662099][T11624] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.664578][T11624] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880452d2000 [ 178.667028][T11624] FS: 0000000000000000(0000) GS:ffff8880d60e8000(0000) knlGS:0000000000000000 [ 178.669821][T11624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.671890][T11624] CR2: 00007fb6d6427dac CR3: 00000000367f8000 CR4: 0000000000352ef0 [ 178.674396][T11624] Call Trace: [ 178.675461][T11624] [ 178.676405][T11624] device_del+0x1b8/0x9b0 [ 178.677915][T11624] ? __pfx_device_del+0x10/0x10 [ 178.679442][T11624] ? netdev_unregister_kobject+0x2da/0x540 [ 178.681274][T11624] unregister_netdevice_many_notify+0x14fb/0x2140 [ 178.683253][T11624] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 178.685376][T11624] ? __pfx___mutex_lock+0x10/0x10 [ 178.686963][T11624] ? mark_held_locks+0x40/0x70 [ 178.688554][T11624] ? lockdep_hardirqs_on+0x78/0x100 [ 178.690176][T11624] unregister_netdevice_queue+0x30b/0x3c0 [ 178.691951][T11624] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 178.693926][T11624] ? rtnl_net_dev_lock+0x28/0x360 [ 178.695497][T11624] ? rtnl_net_dev_lock+0x146/0x360 [ 178.697134][T11624] ? rtnl_lock+0x9/0x20 [ 178.698424][T11624] ? rtnl_net_dev_lock+0x1fe/0x360 [ 178.700041][T11624] unregister_netdev+0x1f/0x60 [ 178.701559][T11624] bnep_session+0x22e6/0x2f40 [ 178.703042][T11624] ? find_held_lock+0x2b/0x80 [ 178.704537][T11624] ? __pfx_bnep_session+0x10/0x10 [ 178.706136][T11624] ? do_raw_spin_lock+0x128/0x260 [ 178.707730][T11624] ? __pfx_woken_wake_function+0x10/0x10 [ 178.709640][T11624] ? rcu_is_watching+0x12/0xc0 [ 178.711563][T11624] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 178.713425][T11624] ? lockdep_hardirqs_on+0x78/0x100 [ 178.715061][T11624] ? __kthread_parkme+0x18c/0x230 [ 178.716664][T11624] ? kthread+0x13a/0x450 [ 178.718022][T11624] ? __pfx_bnep_session+0x10/0x10 [ 178.719620][T11624] kthread+0x370/0x450 [ 178.720923][T11624] ? __pfx_kthread+0x10/0x10 [ 178.722382][T11624] ret_from_fork+0x72b/0xd50 [ 178.723901][T11624] ? __pfx_ret_from_fork+0x10/0x10 [ 178.725525][T11624] ? __switch_to+0x800/0x10f0 [ 178.727364][T11624] ? __pfx_kthread+0x10/0x10 [ 178.729135][T11624] ret_from_fork_asm+0x1a/0x30 [ 178.730662][T11624] [ 178.731668][T11624] Modules linked in: [ 178.733089][T11624] ---[ end trace 0000000000000000 ]--- [ 178.735466][T11624] RIP: 0010:klist_put+0x4d/0x1d0 [ 178.737185][T11624] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 0e 0d [ 178.743110][T11624] RSP: 0018:ffffc900059f7970 EFLAGS: 00010202 [ 178.745090][T11624] RAX: dffffc0000000000 RBX: ffff888056024460 RCX: ffffffff82be7da1 [ 178.747671][T11624] RDX: 000000000000000b RSI: ffffffff8baf43a5 RDI: 0000000000000058 [ 178.750184][T11624] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 178.752659][T11624] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 178.755016][T11624] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880452d2000 [ 178.757538][T11624] FS: 0000000000000000(0000) GS:ffff8880d60e8000(0000) knlGS:0000000000000000 [ 178.760337][T11624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.762318][T11624] CR2: 00007fb6d6fbcff8 CR3: 00000000133aa000 CR4: 0000000000352ef0 [ 178.764912][T11624] Kernel panic - not syncing: Fatal exception [ 178.770070][T11624] Kernel Offset: disabled [ 178.771430][T11624] Rebooting in 86400 seconds..