last executing test programs: 1m4.19264405s ago: executing program 0 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [{0x20, '!'}, {0x20, '\x00'}, {0x20, '.-'}, {0x20, ':\'('}, {0x20, '\x00'}, {0x20, 'bridge_slave_0\x00'}], 0xa, "7f1cb3c5518694636f20eb0fe1f8134cadcb09666af877e250d00babd40802faa3e4a108a5405d2307a9f5727e7c77ab7972627c9e90e4c3b449c4a30c94d5bb4e43ff364548eac111bc97022150534419579dcd8fd5038e1db09bcc80ea6ac4eea2ed3a18b0a93dc4ed65e77e131dbd7011a591a17439c155144489dae649a6d4d627993051e94c96a59e8a314984b98261c15e8a9002c303f1322955fc51ddbce588452fc16015593bdd11f0349b497bd105351fa4726f9b4218c72576cd030edd0706bda7374e2b6f49f557ed2a1cf0de6025da475331305e8985758d91b79e967d6e3f229bf8b18b8ff9cf55dbea9b4ba7"}, 0x11b) r2 = dup2(r0, r0) syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r7, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r10 = mmap$IORING_OFF_SQ_RING(0x0, 0xfffffff9, 0x200000c, 0x40010, 0xffffffffffffffff, 0x0) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x0, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)) r16 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r16, &(0x7f00000001c0)='p', 0x1) r17 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r21 = io_uring_register$IORING_REGISTER_PERSONALITY(r17, 0x9, 0x0, 0x0) syz_io_uring_submit(r18, r19, r20, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x0, {0x0, r21}}) syz_ublk_add_dev(r2, r3, r10, r15, &(0x7f0000000200)={0x2e, 0x48, 0x0, r16, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r21, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x3, 0x69f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, &(0x7f0000000280)) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb8014000180100010800800010005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1m4.110328919s ago: executing program 0 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b703000000000000850000008300000081000000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082f00000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m4.035592688s ago: executing program 0 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800004, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./sys/class/graphics/fbcon/rotate\x00', 0x102) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="130000054200010a000800000000000000000800"], 0x14}}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000400)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x0, 0x0, 0xa, 0xa}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xdde6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/123}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(r0, &(0x7f0000000600)='hello\n\x00', 0x6) 1m3.86888931s ago: executing program 0 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900020073797a31000000000c000780050015008b0000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) openat(r8, &(0x7f0000000340)='./file0\x00', 0x240000, 0x50) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b4, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x57e3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x17}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xac93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m3.784032312s ago: executing program 0 (id=721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='vicodec.0', 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x7fffffff, {{0x2, 0x4, @multicast2}}}, 0x88) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x48050) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800}) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001"], 0x34c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2482, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000300)={r10, 0xb0, "5a124775cb5d0d6f5749de87c59d29513d18c4cca870ea79e9ba210ac70ebd685c4e32f8accceb8d85311fbff64e6e3988ea70652d3d7068a7a6933e0f84ae11d1ed0b0c489b2e0057e470d7dbb6d2ca4f422814a23b8374eceb0dc6f608504a1c742d646dded72440ef607b314c49747aee4a2cefea50bd62d803bd04279342ae696b503a569c90b6da6a59e997562c087de8edc8087bf9529a688c915e6c878beaa2923476cf68359795dcb5b98964"}, &(0x7f00000003c0)=0xb8) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000400)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r11, 0x400, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r12}) 1m3.561186197s ago: executing program 0 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000500), 0x4, 0x10) pread64(r0, &(0x7f0000000600), 0x4, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 48.330365821s ago: executing program 32 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000500), 0x4, 0x10) pread64(r0, &(0x7f0000000600), 0x4, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 32.342785484s ago: executing program 3 (id=1037): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x40048c5) 32.270100973s ago: executing program 3 (id=1040): statx(0xffffffffffffffff, 0x0, 0x400, 0x9, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f00000003c0), 0x0, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query, @generic={0xc4, 0xf, 0xe, 0x8, 0x9c1}], &(0x7f0000000380)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x2}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r6, &(0x7f0000000040)='\x00', 0x1, 0x1300) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r5, 0x4, r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 32.060572461s ago: executing program 3 (id=1043): setns(0xc9, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x4, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x16}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) close(0x3) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a10020000090a010400000000000000000a000006d0010980080001400000000608000140000000075c0002802c00018008000140000000080800014000000001080001400000000008000140000000010800014000000009140001800800014000000d0f08000140000002be0c00018008000140000000080c0001800800014000000001900002800c000180080001400000000814000180080001400000000608000140fffffffb240001800800014000006ebe0800014000000001080001400000000108000140000000ad3c00018008000140000009f9080001400000bbb10800014000000fff08000140000000000800014000000000080001400000000208000140000000080c00018008000140000000009c0002801c000180080001400000000f080001400000082508000140000000011400018008000140000000090800014000000004440001800800014000000002080001400000000708000140000001c4080001400000000108000140000000010800014000000004080001400000080008000140000100012400018008000140000000030800014000000006080001400000000008000140000000002c00028014000180080001400000000c08000140000000081400018008000140000000060800014000007fff08000140000000050900020073797a310000000008000a40ffffff4bc4850a409f6eafaa0a7a75c925defc0800054000000024080003400000004408000f40000000021400000011"], 0x238}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x4) (async) write$cgroup_int(r3, &(0x7f0000000080)=0x3, 0x12) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) (async) listen(r0, 0x5) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x452, 0x0, 0x1}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x29, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000001837000003000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018210000", @ANYRES32=r6, @ANYBLOB="000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300a70008000000b7040000060000008500000082000000bf91000000000000b70200000200000085000000850000ca74277200000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0xb4, 0xc8, &(0x7f0000000700)=""/200, 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x10, 0x1000, 0xd7eca72}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000840)=[r3, r6, r3, r6, r3, r6, r3, r3, r6], &(0x7f0000000880)=[{0x4, 0x4, 0x9, 0x5}, {0x5, 0x4, 0x7, 0xe}, {0x2, 0x1, 0xc, 0x5}, {0x5, 0x3, 0x6, 0x9}, {0x5, 0x1, 0x9, 0x4}], 0x10, 0xfffffffb}, 0x94) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) (async) r8 = dup(r7) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) 31.984605451s ago: executing program 3 (id=1044): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x10, 0xffe0}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4006881}, 0x20000900) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, 0x0) mount(0x0, &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_proc/asound/cards\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) 31.98419125s ago: executing program 3 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/lo/disable_xfrm\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='0', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x1b3d, 0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8afb, 0x4, 0x1, 0x6, 0xac3, 0x78, 0x8, 0x4c, 0x1, 0x10]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r4, 0x9a}, &(0x7f00000002c0)=0x8) ioctl$sock_ifreq(r3, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) write$tun(r2, 0x0, 0x0) 31.881081417s ago: executing program 3 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002e80)=""/4096, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x400001ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f00000000c0)={0x2, r5, 0x1, 0x10000, 0x80000001, 0x81, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x6, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x10004, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.961675743s ago: executing program 4 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000300", @ANYRES16, @ANYBLOB="290e29bd7000fbdbdf052700000005003100030000001400300053e0"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100005}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000003640)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 25.961367566s ago: executing program 2 (id=1114): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x0, 0x5, 0x4, &(0x7f0000000240)={0x0, "b1b41f7e0d59a7017cdc592bdb4c842fe27fcbb051b19e8bc762f4d51a6531e267"}}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x1, 0xf6, 0x7, &(0x7f0000000040)={0x19, "51748c5aa07be8803dcab87f591729bf017ef92ed18344d8d5c9b2b1d0fe4d04e2"}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x40) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000200)={0x1, 0x0, [0x7, 0x4, 0x9, 0x13, 0xb191, 0x9, 0x8000, 0x4]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.798910652s ago: executing program 4 (id=1115): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x20) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffe62, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x804) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x8, 0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r7 = syz_io_uring_setup(0x1c59, &(0x7f0000000240)={0x0, 0x87a1, 0x2000, 0x1, 0x1ea}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x13, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0xff, 0x0, &(0x7f00000001c0)=[r7]}, 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r7, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x9}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x15c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x148, 0x1, [@m_csum={0x144, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1, 0x2, 0x8000, 0x3}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe9d, 0x7, 0x10000000, 0x7, 0x53d}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000009, 0xfffffffa, 0x1, 0x5b5b, 0x5d42f3d6}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x58a4c33e, 0x5, 0x5, 0x3}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xaf4, 0x2, 0x10000000, 0x7, 0xffffffff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1833, 0x8, 0x6, 0x80000004, 0x9}, 0x45}}]}, {0x6f, 0x6, "6b4c6a7c5150eeee8a6d87f9e91ef981e4bc6415ac6b9ec0a5fd64bf2ff8a8a40da2dee405f12846412bd7472309da92a32fac1035876bf57ce74880e771ecb421f2122bfd7fa6aa5f85608545263bb0fd105a1dcd3781b7be3fafdcec64ed1e2ea61d9c51a72a63dd2d71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48055}, 0x48044) io_uring_enter(r7, 0x41de, 0xa75f, 0xa1, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2, 0xe, 0x4, 0x6, 0x21, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_lifetime={0x4, 0x3, 0x5, 0x7f, 0x6, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_sec_ctx={0x13, 0x18, 0xd0, 0x7, 0x8e, "3895ffec9e805160ed29358887eb351826d3e11886832eafb9197eb0b4e4c56a83a72ea92c313dcab08d0113f76b831b611bc14bec6b8e9c183acb217101fc05099aae6ef57d1ad74f2247ab9f295b128c6d8bc5378891caa1328b1207f6eb7749d569a4a49cb4638c6a26235ce295406e610eb00772fc4a382a097b754eb14f59fa8652cc1af8f98369d9df73af"}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@empty, 0x9, 0x4, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0xa3}}, 0x4004) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f00000002c0)={0x20, r13, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000000)={0x8, r13}) r14 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) close(r14) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r15, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r16, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 25.691659472s ago: executing program 4 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 25.640015776s ago: executing program 4 (id=1117): r0 = syz_clone(0x80400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$getsig(0x4202, r0, 0x9, 0x0) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r1, 0x5392, &(0x7f0000000040)={@lba=0x9, 0x0, 0x0, 0x0}) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x7f, 0x1, 0x7}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]) 25.530786194s ago: executing program 4 (id=1118): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x145981) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000000200)) syz_open_dev$sndctrl(0x0, 0x0, 0x183582) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000008c0)='dummy_hcd.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000008c0)='dummy_hcd.0', 0xb) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400000, 0x115) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000001c0)={0x1, 0x7}) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r7}, 0x18) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf, 0x73}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 24.661668253s ago: executing program 4 (id=1119): setns(0xc9, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/152, 0x98) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000080801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 24.228719222s ago: executing program 2 (id=1123): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) 24.228446001s ago: executing program 2 (id=1124): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x0, 0x401}}) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x10, 0x1}, 0x50) 24.141158829s ago: executing program 2 (id=1126): mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x908000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r3, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000c0043", @ANYRESOCT=r5], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 23.990487321s ago: executing program 2 (id=1129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan0\x00', 0x0}) (async) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) setresgid(0xee00, 0xee01, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/480, @ANYRES16=r3, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) write$binfmt_elf64(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4608bd4405ff0000000000000002003e0006000000e4020000ecb8ea69da55d82900000000aa0100000000000084070000ff7f380cf5000f0007000900040000006c0800000500000000000000090000000000000001000080000000000b000000000000006e04000000000000fcffffffffffffff"], 0x78) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = getpgid(0x0) (async) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x400180, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x26, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4923b3f3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x98}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x81, 0x99, &(0x7f0000000680)=""/153, 0x40f00, 0x70, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000000740)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xa, 0x3, 0x800}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000007c0)=[{0x5, 0x4, 0xb, 0x1}, {0x4, 0x1, 0x4, 0x4}, {0x5, 0x1, 0x10, 0x7}, {0x0, 0x4, 0xe, 0x3}, {0x3, 0x2, 0x2, 0x8}, {0x4, 0x2, 0x0, 0x9}, {0x40, 0x5, 0xb, 0xc}, {0x5, 0x4, 0x10, 0x3}], 0x10, 0x7}, 0x94) (async) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0xfffffffffffffffa) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x7fff, 0x31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}}) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x2, r7}) close(r5) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 23.90120426s ago: executing program 2 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000500)={0x1ff, 0x80, 0x2c0, &(0x7f0000000100)=[0xffffffff, 0x0, 0x8, 0x0, 0x9, 0x6, 0x7, 0xd, 0x100000001, 0x7ff, 0x7f, 0x9, 0x8, 0x40, 0x5, 0x10001, 0x800, 0x81, 0x7, 0x80, 0x0, 0xf0, 0x1, 0x2, 0xff, 0xfffffffffffffff9, 0x7, 0x9b5, 0x0, 0xa, 0x4, 0xc, 0x0, 0x0, 0x6, 0x4, 0x4, 0x4b8, 0x5, 0xffffffffffffffff, 0x2, 0x7, 0x6, 0x0, 0x400, 0x1, 0x9, 0x5bc931e8, 0x9e, 0x2, 0x100000000, 0x0, 0x1, 0x80, 0x81, 0x4, 0x3, 0xa, 0x0, 0x6, 0x1, 0x8, 0x4, 0x9, 0x3, 0xfffffffffffffff7, 0x2, 0x0, 0x7, 0x10000, 0x8, 0x8, 0x2, 0xdcb, 0x4, 0xc00, 0x9, 0x8c, 0x4, 0x8000000000000001, 0x2, 0x7, 0x80, 0x6e, 0x2, 0x4, 0x71, 0x9, 0x15, 0xd, 0x4, 0xa, 0x6, 0x7ff, 0x6, 0xfffffffffffff7d2, 0xfffffffeffffffff, 0x7b64, 0x3, 0x4, 0x14000000000, 0x93, 0x100, 0x1, 0x9, 0x2c5190bf, 0x9, 0x8, 0x261, 0x4bae, 0x1, 0x9, 0x3, 0xffffffff7fffffff, 0x0, 0x4, 0xfffffffffffffaa8, 0x5, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x5, 0x101, 0x4, 0xe]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0xcfb475fa78792bf7, 0x4, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'team0\x00', {0x2}, 0x8}) close_range(r0, r0, 0x2) 16.73455893s ago: executing program 33 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002e80)=""/4096, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x400001ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f00000000c0)={0x2, r5, 0x1, 0x10000, 0x80000001, 0x81, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x6, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x10004, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.008876395s ago: executing program 34 (id=1119): setns(0xc9, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/152, 0x98) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000080801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) 8.903457822s ago: executing program 35 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000500)={0x1ff, 0x80, 0x2c0, &(0x7f0000000100)=[0xffffffff, 0x0, 0x8, 0x0, 0x9, 0x6, 0x7, 0xd, 0x100000001, 0x7ff, 0x7f, 0x9, 0x8, 0x40, 0x5, 0x10001, 0x800, 0x81, 0x7, 0x80, 0x0, 0xf0, 0x1, 0x2, 0xff, 0xfffffffffffffff9, 0x7, 0x9b5, 0x0, 0xa, 0x4, 0xc, 0x0, 0x0, 0x6, 0x4, 0x4, 0x4b8, 0x5, 0xffffffffffffffff, 0x2, 0x7, 0x6, 0x0, 0x400, 0x1, 0x9, 0x5bc931e8, 0x9e, 0x2, 0x100000000, 0x0, 0x1, 0x80, 0x81, 0x4, 0x3, 0xa, 0x0, 0x6, 0x1, 0x8, 0x4, 0x9, 0x3, 0xfffffffffffffff7, 0x2, 0x0, 0x7, 0x10000, 0x8, 0x8, 0x2, 0xdcb, 0x4, 0xc00, 0x9, 0x8c, 0x4, 0x8000000000000001, 0x2, 0x7, 0x80, 0x6e, 0x2, 0x4, 0x71, 0x9, 0x15, 0xd, 0x4, 0xa, 0x6, 0x7ff, 0x6, 0xfffffffffffff7d2, 0xfffffffeffffffff, 0x7b64, 0x3, 0x4, 0x14000000000, 0x93, 0x100, 0x1, 0x9, 0x2c5190bf, 0x9, 0x8, 0x261, 0x4bae, 0x1, 0x9, 0x3, 0xffffffff7fffffff, 0x0, 0x4, 0xfffffffffffffaa8, 0x5, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x5, 0x101, 0x4, 0xe]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0xcfb475fa78792bf7, 0x4, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'team0\x00', {0x2}, 0x8}) close_range(r0, r0, 0x2) 2.429764052s ago: executing program 1 (id=1212): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xf, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x4, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x6, 0x80000004, 0x800, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf77f, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x5, 0x102, 0x1, 0x6, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0xf7dbebca9ce01105) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r9, 0x0, 0x352d, 0x4b2448d0, 0x6, 0x98fd}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={r9, 0x50}, &(0x7f0000000140)=0x8) r10 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.011092476s ago: executing program 1 (id=1216): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000080200000008001e000100"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r7], 0x6c}}, 0x90) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x2010000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x8081, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x59) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000340)={0x2000, r10}, 0x0) landlock_restrict_self(r9, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1.960615568s ago: executing program 1 (id=1218): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xbf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @local}, 0xc) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000012cbd7000fbdbdf25fc000000000000080000000000000001e000000200000000000000000000000000000004000000000a0060803b00", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)="b82ca87fbf4ddfc9253795f9139cb364f7ab4483630f1b7e37d7d2dcb8e65f3c5003654435b055e458ebf622badce086c6fed3f09ef56fa6df8d8c745acb91d5f1966285012cc805480eb6db1dcbdcdc702ec4b32c4ee913e1c4fef13877063ea4ed839ed4be37eb6ea86e8cb1900709bc811426ea02cf06f1c6c2cdb879ea19d0c9703397f221a7e77a3809a3738576c3cffe99293d4dfe5370c4d5eda2f0aad1295a28f58a8725774a1838a5c661518d7691b2", 0xb4) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='y)', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0x68}}], 0x2, 0x2401c445) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r7, 0x9}, &(0x7f0000000180)=0x8) 1.76016132s ago: executing program 6 (id=1222): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1.75902092s ago: executing program 1 (id=1223): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x10000000}], 0x1, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 1.75879877s ago: executing program 6 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xf19}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.699564827s ago: executing program 6 (id=1225): r0 = syz_clone3(&(0x7f0000000c40)={0x400101000, 0x0, 0x0, &(0x7f0000000480), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002") getsockopt(r4, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x266, 0x801) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x9, 0x4000a, @vifc_lcl_ifindex=r9, @private=0x9}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f00000000c0)) r10 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) rt_sigsuspend(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000004c0)='ui&q\a\x00\x00\x00\x00\x00\x00\x00\x10\xa6\x8b&\xfbi\x1ckr\xff\x9c\x9a\x18\xb7\x14\x9e/\fT\x1c\x82\x9a\x1f\x8a-\x8dT\xa0\xde\x90\x9c\xde\x88\x921\xe9\xa9s\xc4?\x9fVw\x8c\xb0{\xf5{\xb2\x88{\x1e5\xf7\x11$P\xec\x00\xae\x952\x9d\x13\x1a\xaeoxM\"\x8c\xd8~\x9e\xa6\xca\xba\vs\xaa\xa6\x03\x04\xe8\xd5\xb0\x849Fy\x8eKM\xb9\xd5\xb4e\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$I2C_TENBIT(r6, 0x704, 0x0) 1.631319039s ago: executing program 6 (id=1226): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x4, 0x5, 0x6, @lba=0x6, @lba=0x15300276}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='lazy', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r6, 0x100000000) r7 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000340)={0x7ff, 0xfff, 0x9, 0x1, 0x83, 0x7, 0xffffffff, 0x1ff}) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003640)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x3a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x89f9, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.267563785s ago: executing program 5 (id=1229): r0 = socket$kcm(0x11, 0x3, 0x0) inotify_init1(0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) lseek(r4, 0x8, 0x2) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x2b) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.169748851s ago: executing program 5 (id=1230): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='pagemap\x00') (async) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='v7\x00', 0x2004800, &(0x7f0000000280)='@\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) (async) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1.091155567s ago: executing program 5 (id=1231): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001780)=0x5) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 833.059994ms ago: executing program 1 (id=1234): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="32fc9613dc52d6", 0x7}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ppoll(&(0x7f0000000a00)=[{r7, 0x8010}], 0x1, &(0x7f0000000a80)={0x0, 0x3938700}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000140)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r9, &(0x7f0000000240)=""/44, 0x7a) getdents64(r9, 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r10, 0x29}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="270100000000000000fb4ef3c625c1028000ff84", 0x14}], 0x1}, 0x40048c5) 660.260223ms ago: executing program 7 (id=1237): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000200)=0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f0000000340)=@updpolicy={0x1494, 0x19, 0x400, 0x70bd2b, 0x25dfdbfd, {{@in6=@empty, @in6=@remote, 0x4e23, 0x5, 0x4e22, 0x4, 0xa, 0x0, 0xa0, 0x3c, r3, r5}, {0x40e, 0x1, 0x577, 0x5, 0x24db, 0x9, 0xc, 0xd06}, {0x0, 0x0, 0x1, 0x9}, 0x302c, 0x6e6bb4, 0x2, 0x1, 0x1, 0x1}, [@sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x4e21, 0x7b1, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x3c, 0x0, r7}, {@in6=@local, 0x4d2, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0xc}, {0x8, 0x7fffffffffffffff, 0x1ff, 0xffffffff, 0x4, 0x5, 0x8, 0x5}, {0x9, 0x4, 0x1, 0x6}, {0x3, 0x3, 0x8001}, 0x70bd28, 0x3506, 0x2, 0x2, 0x4, 0x80}}, @proto={0x5, 0x19, 0x6c}, @replay_thresh={0x8}, @algo_crypt={0xb4, 0x2, {{'ecb-camellia-aesni-avx2\x00'}, 0x360, "0d9872a149cc9ea80fb106379ce24501e7fb27c7d55bacdee3b544861bc6cb4058f7cc3f4fc96b23386b1b32af5e87ae08167259f61b5cb5cec2bb9e4762e0286338d40c80e7e07861ec3d3b959b08da5d53c7a718167e2158b947904afb9d40af733f111511facc1ea430eb"}}, @sec_ctx={0x31, 0x8, {0x2d, 0x8, 0x0, 0x8, 0x25, "ebc10ff43e6aab0936be6f1029b3829aab01a9c1da8cbe4fd97f2d4384a7dff9733976975c"}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd28, 0x70bd25, 0x70bd2a, 0x70bd29, 0x0, [0x6, 0xa, 0x0, 0x1bd88f6d, 0x3]}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @algo_aead={0x10b, 0x12, {{'aegis128l\x00'}, 0x5f8, 0x80, "a66f26e7cfd531340d324715ad0849d375f6053f419c3cd5269632dbcfe1b62bfe6ce8fba0641eaa9c952aa9573ac77c51a96026b9861ef87922475f1256418e15cd042893348fa4cef775e3b16cd62c2ce2a7e6a77f7142fe6e71c95641820f1eb982a694cb0a1504ff3e08490d2a39177d3abe57b294e5dcfef223072124e104fa0e819dc92ac574cc99b44597f07a3b43c9089ec9bec2bf49d1e2decbedcc2ada022baf1db55556b22f855451b30306ed8571c8ec8997a0d22694832f0c"}}, @algo_aead={0x65, 0x12, {{'aegis256-aesni\x00'}, 0xc8, 0xa0, "4194a1317fa2579f1cd4514c74ec0c156d6e7ba20ea72d861f"}}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}]}, 0x1494}}, 0x840) r8 = syz_open_dev$video(&(0x7f00000018c0), 0x97a, 0x8100) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)=@o_path={&(0x7f0000001880)='./file0\x00', 0x0, 0x8, r8}, 0x18) mount(&(0x7f0000001940)=@nullb, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='overlay\x00', 0x400, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_ext={0x1c, 0x10, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001b00)={0x1, 0x1, 0x800, 0x5}, 0x10, 0x27e9b, r9, 0x2, &(0x7f0000001b40)=[0xffffffffffffffff, 0x1, r9, 0x1], &(0x7f0000001b80)=[{0x0, 0x3, 0xf, 0x9}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0x6}, 0x94) r11 = dup(r10) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000002180)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f0000001cc0)=@updpolicy={0x44c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfc, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x2, 0x4e24, 0x0, 0xa, 0xc0, 0x10, 0x6, r3, r5}, {0xff, 0x1, 0x7d, 0x81, 0x0, 0x5, 0x8, 0x2}, {0x8000000000000001, 0xe011, 0x2, 0x3822}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x2, 0x5}, [@sec_ctx={0x3c, 0x8, {0x38, 0x8, 0x0, 0xe, 0x30, "d54d806dfcc791db1077a96d6d80876330d63d9b9b6d457cc62994b809c4f6c80e737f658ac36d3ded545ae086fb9054"}}, @algo_auth_trunc={0xcd, 0x14, {{'sha3-384\x00'}, 0x408, 0x40, "f1e1e766c09b93814e87bbe8795a14bf02f36717785bc5e4b735139fe3416412e50328e1943e415c156e3a9ea2bb383bf1ac816ce066f3b6c89c0e1d393e93cbf6fda2a88fe7f9194a167ff290913ea26c7a2b98d8536b2275c9a6ba9f90998adf5eafa911703b3bb4abc5e12fdd816384cb673e4b5e073c955c139dc3bbefd8dc"}}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@empty, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0xffffffff}, @mark={0xc, 0x15, {0x35075d, 0x100}}, @iptfs_reorder_window={0x6, 0x25, 0x8}, @algo_crypt={0x115, 0x2, {{'fpu(cts(cbc(aes)))\x00'}, 0x668, "6d8502fe4e8dfed2b299d10849a35e4a2fc77fc828dfa2e3e2ce1bfb0a5791074edda9c2c5b6ef29967927bf019dd5627a3227d1a727de4ae5599b1f2d433ca7d73478607a9d2b9411843919597eb1de091e48b8b57e556ebd77738a6f3b33124b6466ace6f88ffad588597831d856f1180a018535dffdd8ea943b23319dfd9116c603af1d57a36088be4f21c2938bfba7f65758d6fa2569a676ecc2043f557ebeec7ee789823e9de96a57fad653f8348c9725d6ac25ac12a0736ed829c43589d86252631e00e8a7ea3eb8a89e"}}, @algo_aead={0x127, 0x12, {{'ccm(blowfish-generic)\x00'}, 0x6d8, 0x200, "ab02ab807c0d0a73856efd9e0760021f5d8df2e120df9bf0a43ed61d6f2485fbea5b23be9fe85943868d3a02e1a9b9d08a58ad02888e2ef88e8eba214985d5ee3e0961b8fd0b104caf5dca1ddb5f856f83a64aec2710610373bf727935ff4060e9a8cbf7c8c97bb448040fb9321972332bc8ca3658cd447143dc03dc554b586addc8d7f2b3304d1232694768bcd0b7bdee16a35fbdbba00e13f542bc5ea2fd68550fbda80715f18c86507d4c5e73b5e1ae8a0431a51d631bd934409c72b283e7844ea42995f202cadd5d0517927b174a8eddad5e98c0a3057ad4f8"}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc2a99337b2304961) ioctl$KVM_TDX_CAPABILITIES(r11, 0xc008aeba, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}}) r13 = openat2(0xffffffffffffff9c, &(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x40200, 0x40, 0x36}, 0x18) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c40), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r13, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x68, r14, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x24040144) r15 = syz_clone(0x20080000, &(0x7f0000002dc0)="c4", 0x1, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)="b84059d0e7f855449fda0181cd7a9336d445ccb93e81d0ed8a6d0a0314c99a775383bd31c984b3ff576c86bdff2b2f6c3ee0663464eb93b6aea9f3d000dffc0da85b3b11abd5c580919aaa0bbf78c6d64b5a222d7a97f66cac4e3ca4f865a41f6bbbba1db11f21f8bea98e74809c475152d89a6c95ec1fc9582d637416af163cfb9d9f108661490f725b186d85910e352c22d6480c52c87d3d2b4ef0f7ede8221f5a0bd924f91ed928c3122abe9ddc84d848041115b2be3875961604292071a2d0f78f5b5328862f8b59fecf5424be27a561770ba431b91ffeaee21993cd006cd8a872babe9d19d70be872ca5bcbcad1b1561d2cbd7716") ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000002f80)={0x100, 0x2c0, {r6}, {r7}, 0xffff, 0xfffffffffffffffc}) sendmsg$nl_route(r11, &(0x7f0000003080)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)=@RTM_GETNSID={0x64, 0x5a, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r15}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r13}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r11}, @NETNSA_PID={0x8, 0x2, r16}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0xc000050) r17 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000030c0), 0x2800, 0x0) ioctl$UI_GET_SYSNAME(r17, 0x8040552c, &(0x7f0000003100)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r11, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003280)={&(0x7f0000003180)={0xd0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008884}, 0x20000040) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000003440)={&(0x7f0000003300), 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000800) 508.383595ms ago: executing program 7 (id=1238): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) getpid() setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000540)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x1c, r3, 0x8000000}, 0x65) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0300907800000000450000000065000000890000ac141400ac1414aa01860dc045d45768c837efa0fc58440c00037f00000100000000890f0000000000ffffffffffffffff444c0001000000000000000000000000000000000000000000000000ac0c00aa000000047f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff000000004408000000000000000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 360.673285ms ago: executing program 1 (id=1239): socketpair(0x1a, 0x4, 0xe18, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x15) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@secondary) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x11, 0x3, 0x300) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002400)=0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002480)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000024c0)={0x8203200, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0), {0x1d}, &(0x7f0000002200)=""/211, 0xd3, &(0x7f0000002300)=""/240, &(0x7f0000002440)=[r5], 0x1, {r6}}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) epoll_create1(0x80000) r8 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x1, 0x8c}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)="95", 0x1, 0x4040004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="01154e00010000112233445588fbca010001160c", 0x22, 0x240440c0, &(0x7f0000000040)={0x11, 0x3, r9, 0x0, 0x0, 0x0}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001200ffff000000000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) sendmsg$rds(r0, &(0x7f0000002100)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/186, 0xba}], 0x2, &(0x7f0000001f80)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x17264bdf}, {&(0x7f0000000500)=""/48, 0x30}, &(0x7f0000000780)=[{&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000000680)=""/245, 0xf5}], 0x4, 0x28, 0xac}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_args={0x48, 0x114, 0x1, {{0xe, 0x3}, {&(0x7f00000007c0)=""/226, 0xe2}, &(0x7f0000001dc0)=[{&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/161, 0xa1}, {&(0x7f0000001ac0)=""/130, 0x82}, {&(0x7f0000001b80)=""/99, 0x63}, {&(0x7f0000001c00)=""/84, 0x54}, {&(0x7f0000001c80)=""/108, 0x6c}, {&(0x7f0000001d00)=""/156, 0x9c}], 0x9, 0x21, 0x1000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xf9}, &(0x7f0000001e80)=0x849f, &(0x7f0000001ec0)=0x1, 0x0, 0x800, 0x4, 0x7, 0x1d, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x194, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x9}, &(0x7f0000001f00)=0x5, &(0x7f0000001f40)=0x14, 0x24000000000, 0x0, 0x45b3, 0x3, 0x30, 0x80}}], 0x170, 0x40000000}, 0x8080) ioctl$NILFS_IOCTL_GET_SUINFO(r10, 0x80186e84, &(0x7f0000002580)={&(0x7f0000002540)=[{0x932, 0xd, 0x1}], 0x1, 0x10, 0x44, 0x4}) 310.947474ms ago: executing program 7 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x130, 0x98, 0x2c0, 0x0, 0x130, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000100), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth1_to_team\x00', 'team_slave_1\x00', {}, {0xff}, 0x88, 0x0, 0x42}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7f, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x100, 0xb, [0x24, 0x34, 0x1b, 0xf, 0x6, 0x3d, 0x1f, 0x2b, 0x2c, 0x2a, 0x31, 0x5, 0x12, 0x2a, 0x33, 0x39], 0x0, 0xffff, 0x401}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x12, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x28, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}}, 0x400c) 248.028128ms ago: executing program 7 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x110a, 0x2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/156, 0x9c, 0x0, 0x27}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@my=0x1, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x0, 0x0, 0x0, 0xfffffffc}) write$char_usb(0xffffffffffffffff, &(0x7f0000000440), 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) 247.668814ms ago: executing program 6 (id=1242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b703000000000000850000008300000081000000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852300000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 190.41866ms ago: executing program 6 (id=1243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x14, 0x0, &(0x7f0000000080)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cb000000", @ANYRESDEC=r1, @ANYRES64=r0], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000366000/0x4000)=nil, 0x4000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x42, 0x0, &(0x7f00007d0000)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r8, &(0x7f0000000300)='add syz0 127.0.0.1+7003:', 0x18) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x1, 0x0, {0x4006, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, r11, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x50) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0xfffffffffffffff5, r10, {0x7, 0x2d, 0x4, 0x40000000, 0x3, 0x5, 0x6, 0x8, 0x0, 0x0, 0x10, 0xc}}, 0x50) mmap$snddsp(&(0x7f0000174000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0xc000) 190.21619ms ago: executing program 5 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'dummy0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e"], 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 96.153933ms ago: executing program 7 (id=1245): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 95.719804ms ago: executing program 5 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='nfsd 127.0.0.1 2000000000 tes\\\n', 0x1f) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000000)='./proc\x00', 0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r1, 0x8b21, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 1.272292ms ago: executing program 7 (id=1247): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x7, 0x2000, 0x80, 0x10}, 0x8) (async, rerun: 64) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x802) (rerun: 64) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) r2 = eventfd(0x200) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000080)) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000100)={0x15, 0x80, 0x5, 0x10001, 0xfff}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'team0\x00', 0x100}) syz_open_dev$hiddev(&(0x7f0000000180), 0xa0, 0x20000) r5 = gettid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=r5) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r6, 0x40106e8c, &(0x7f0000000200)=[0x9, 0x6]) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000240)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000280)=0x8741) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x15c, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000540)={@local, @dev={0xac, 0x14, 0x14, 0x35}, 0x16, 0x18}}) ptrace(0x8, 0xffffffffffffffff) (async) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f00000005c0)="e003ee1d82053e886dde5ac58dbb95b823daf6873f15201a73d55c3b86ae054c2f08b8afcc2160001d8dfb4cfa730fe11bf6253d", 0x34) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) (async) openat2(r3, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x400000, 0x145, 0x11}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000880)={0x37, 0xf, 0x8000}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000900), &(0x7f0000000940)=0x4) 0s ago: executing program 5 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc00, 0xffffffffffff7ff4, 0x3, 0x8ca}}], 0x38}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000500)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x2, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x44040, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x183240, 0x0) ioctl$CDROM_LOCKDOOR(r10, 0x5329, 0x0) ioctl$CDROMEJECT_SW(r9, 0x530f, 0x1) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x80a0000) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0'. [ 106.090998][ T8373] tipc: Disabling bearer [ 106.335904][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 106.339545][ T8381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.393719][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.746'. [ 106.401225][ T8394] overlayfs: regular lower layers cannot follow data lower layers [ 106.495382][ T8409] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 106.507909][ T1346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.624191][ T8429] netlink: 'syz.2.753': attribute type 12 has an invalid length. [ 106.679002][ T1346] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 106.683247][ T1346] usb 5-1: Dual-Role OTG device on HNP port [ 106.685838][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.715321][ T1346] gspca_main: spca501-2.14.0 probing 0000:0000 [ 106.723167][ T1346] gspca_spca501: reg write: error -32 [ 106.725367][ T1346] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 106.739187][ T1346] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 106.946778][ T8457] netlink: 92 bytes leftover after parsing attributes in process `syz.3.757'. [ 106.969444][ T8457] netlink: 'syz.3.757': attribute type 1 has an invalid length. [ 106.990274][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 106.999003][ T8457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.003569][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 107.006436][ T8457] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 107.015559][ T8457] bond3: entered allmulticast mode [ 107.030249][ T8457] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.046935][ T8457] loop4: detected capacity change from 0 to 10832 [ 107.058599][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.063427][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.065965][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.069092][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.073963][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.077667][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.081887][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.085681][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.090215][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.093538][ T8457] ldm_validate_partition_table(): Disk read failed. [ 107.096118][ T8457] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.103864][ T8457] Dev loop4: unable to read RDB block 0 [ 107.106475][ T8457] loop4: unable to read partition table [ 107.109810][ T8457] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 107.300725][ T8478] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.537891][ T1346] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 107.683308][ T8495] XFS (nbd1): no-recovery mounts must be read-only. [ 107.700983][ T1346] usb 8-1: Using ep0 maxpacket: 32 [ 107.706541][ T1346] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 107.712888][ T1346] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.715601][ T1346] usb 8-1: config 0 has no interface number 0 [ 107.719624][ T1346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.722608][ T1346] usb 8-1: Product: syz [ 107.724117][ T1346] usb 8-1: Manufacturer: syz [ 107.725779][ T1346] usb 8-1: SerialNumber: syz [ 107.732522][ T1346] usb 8-1: config 0 descriptor?? [ 107.738863][ T1346] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.741763][ T1346] usb 8-1: selecting invalid altsetting 1 [ 107.743685][ T1346] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.751612][ T1346] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.755471][ T1346] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.758255][ T1346] usb 8-1: media controller created [ 107.761751][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 107.767468][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.877430][ T5800] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.017898][ T5800] usb 7-1: device descriptor read/64, error -71 [ 108.268229][ T5800] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 108.286902][ T8507] fuse: Unknown parameter ''' [ 108.330106][ T8509] binder: BINDER_SET_CONTEXT_MGR already set [ 108.333054][ T8509] binder: 8508:8509 ioctl 4018620d 200000000100 returned -16 [ 108.336338][ T8511] binder: 8508:8511 ioctl 40086607 200000000180 returned -22 [ 108.409872][ T5800] usb 7-1: device descriptor read/64, error -71 [ 108.528054][ T5800] usb usb7-port1: attempt power cycle [ 108.627964][ T1362] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 108.777952][ T1362] usb 6-1: Using ep0 maxpacket: 8 [ 108.782644][ T1362] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.788714][ T1362] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 108.792171][ T1362] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 108.796765][ T1362] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.801049][ T1362] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 108.805674][ T1362] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 108.808474][ T1346] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 108.810173][ T1362] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.812322][ T1346] zl10353_read_register: readreg error (reg=127, ret==-110) [ 108.817546][ T1362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.834933][ T8483] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 108.867959][ T5800] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.888764][ T5800] usb 7-1: device descriptor read/8, error -71 [ 108.943388][ T1346] usb 8-1: USB disconnect, device number 10 [ 109.031561][ T1362] usb 6-1: GET_CAPABILITIES returned 0 [ 109.033397][ T1362] usbtmc 6-1:16.0: can't read capabilities [ 109.127916][ T5800] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 109.148683][ T5800] usb 7-1: device descriptor read/8, error -71 [ 109.235234][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 109.238838][ T8514] usbtmc 6-1:16.0: Unable to send data, error -71 [ 109.242533][ T1362] usb 6-1: USB disconnect, device number 13 [ 109.258324][ T5800] usb usb7-port1: unable to enumerate USB device [ 110.040952][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 110.040973][ T42] audit: type=1400 audit(1787326363.052:1000): avc: denied { setopt } for pid=8524 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.055508][ T42] audit: type=1400 audit(1787326363.062:1001): avc: denied { ioctl } for pid=8524 comm="syz.1.777" path="socket:[25424]" dev="sockfs" ino=25424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.374876][ T5800] wiimote 0005:057E:0306.0006: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 110.379345][ T5800] wiimote 0005:057E:0306.0006: New device registered [ 110.472684][ T8536] wiimote 0005:057E:0306.0006: Device removed [ 110.648862][ T42] audit: type=1400 audit(1787326363.662:1002): avc: denied { name_bind } for pid=8544 comm="syz.2.783" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 110.874216][ T8564] __nla_validate_parse: 2 callbacks suppressed [ 110.874233][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 110.984945][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.993731][ T8567] netlink: 'syz.3.791': attribute type 15 has an invalid length. [ 110.996650][ T8567] program syz.3.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.099741][ T8577] bridge_slave_0: left allmulticast mode [ 111.101669][ T8577] bridge_slave_0: left promiscuous mode [ 111.105304][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.111924][ T8577] bridge_slave_1: left allmulticast mode [ 111.114245][ T8577] bridge_slave_1: left promiscuous mode [ 111.116562][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.127677][ T8577] bond0: (slave bond_slave_0): Releasing backup interface [ 111.137327][ T8577] bond0: (slave bond_slave_1): Releasing backup interface [ 111.145691][ T8577] team0: Port device team_slave_0 removed [ 111.152593][ T8577] team0: Port device team_slave_1 removed [ 111.155252][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.157643][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.161604][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.163979][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.167262][ T8577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.189016][ T8579] team0: Port device xfrm0 added [ 111.226660][ T8577] tipc: Enabled bearer , priority 0 [ 111.449913][ T5800] wiimote 0005:057E:0306.0006: detected device: Nintendo Wii Remote (Gen 1) [ 111.454921][ T8592] netlink: Invalid conntrack timeout [ 111.456768][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.503973][ T5800] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input19 [ 111.535327][ T5800] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input20 [ 111.544886][ T5800] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0006/input/input18 [ 111.615632][ T42] audit: type=1400 audit(1787326364.622:1003): avc: denied { associate } for pid=8595 comm="syz.2.801" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.617295][ T8596] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20265 [ 111.624324][ T6126] IPVS: starting estimator thread 0... [ 111.758048][ T8598] IPVS: using max 44 ests per chain, 105600 per kthread [ 112.040852][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 112.043689][ T8611] openvswitch: netlink: Missing key (keys=40, expected=80) [ 112.154683][ T42] audit: type=1400 audit(1787326365.162:1004): avc: denied { ioctl } for pid=8616 comm="syz.3.809" path="socket:[26868]" dev="sockfs" ino=26868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.757301][ T8645] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 114.120510][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 114.151247][ T8669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.234738][ T8675] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 114.241268][ T8675] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 114.251394][ T8675] CIFS mount error: No usable UNC path provided in device string! [ 114.251394][ T8675] [ 114.259668][ T8675] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 114.263523][ T8675] input input21: cannot allocate more than FF_MAX_EFFECTS effects [ 114.443344][ T42] audit: type=1400 audit(1787326367.452:1005): avc: denied { mount } for pid=8684 comm="syz.3.828" name="/" dev="hugetlbfs" ino=27843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 114.460855][ T42] audit: type=1400 audit(1787326367.472:1006): avc: denied { ioctl } for pid=8684 comm="syz.3.828" path="socket:[27849]" dev="sockfs" ino=27849 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.492869][ T42] audit: type=1400 audit(1787326367.502:1007): avc: denied { connect } for pid=8684 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.737868][ T5870] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 114.748167][ T1346] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 114.899123][ T5870] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.902954][ T5870] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.905736][ T5870] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.908912][ T5870] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.911675][ T5870] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.916192][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.922283][ T5870] usb 8-1: Product: syz [ 114.923627][ T5870] usb 8-1: Manufacturer: syz [ 114.928049][ T1346] usb 7-1: Using ep0 maxpacket: 8 [ 114.930757][ T5870] cdc_wdm 8-1:1.0: skipping garbage [ 114.932692][ T5870] cdc_wdm 8-1:1.0: skipping garbage [ 114.933066][ T1346] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.940812][ T5870] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 114.942696][ T5870] cdc_wdm 8-1:1.0: Unknown control protocol [ 114.948881][ T1346] usb 7-1: config 0 has no interfaces? [ 114.951274][ T1346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.971251][ T1346] usb 7-1: config 0 descriptor?? [ 115.132567][ T2229] usb 8-1: USB disconnect, device number 11 [ 115.209030][ T42] audit: type=1326 audit(1787326368.222:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8672 comm="syz.2.825" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c159e0d9 code=0x0 [ 115.311158][ T8676] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 115.597900][ T2229] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 115.748595][ T2229] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.753695][ T2229] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.757549][ T2229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.762218][ T2229] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.765968][ T2229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.773200][ T2229] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.776674][ T2229] usb 8-1: Product: syz [ 115.778478][ T2229] usb 8-1: Manufacturer: syz [ 115.793551][ T2229] cdc_wdm 8-1:1.0: skipping garbage [ 115.795867][ T2229] cdc_wdm 8-1:1.0: skipping garbage [ 115.800531][ T2229] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 115.803056][ T2229] cdc_wdm 8-1:1.0: Unknown control protocol [ 117.198266][ T5800] usb 7-1: USB disconnect, device number 15 [ 117.291114][ T8689] netlink: Invalid conntrack timeout [ 117.293070][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.445164][ T2229] usb 8-1: USB disconnect, device number 12 [ 117.505461][ T42] audit: type=1400 audit(1787326370.512:1009): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.560387][ T8693] pim6reg1: entered promiscuous mode [ 117.563041][ T8693] pim6reg1: entered allmulticast mode [ 117.815683][ T42] audit: type=1400 audit(1787326370.822:1010): avc: denied { setopt } for pid=8696 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.817257][ T8697] fuse: Bad value for 'fd' [ 117.830142][ T8697] CIFS: Attempting to mount //127.0.0.1/share [ 117.842154][ T8697] CIFS: VFS: Error connecting to socket. Aborting operation. [ 117.844702][ T8697] CIFS: VFS: cifs_mount failed w/return code = -111 [ 117.849048][ T42] audit: type=1400 audit(1787326370.862:1011): avc: denied { ioctl } for pid=8696 comm="syz.2.832" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.868455][ T2229] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.891564][ T8699] CIFS: VFS: UNC: path must begin with // or \\ [ 117.893522][ T8699] Malformed UNC in devname [ 117.893522][ T8699] [ 117.895736][ T8699] CIFS: VFS: Malformed UNC in devname [ 117.951319][ T8701] nft_compat: unsupported protocol 0 [ 117.995757][ T42] audit: type=1400 audit(1787326371.002:1012): avc: denied { write } for pid=8703 comm="syz.2.835" name="target" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.006392][ T42] audit: type=1400 audit(1787326371.012:1013): avc: denied { write } for pid=8703 comm="syz.2.835" name="target" dev="configfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.008504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.017000][ T42] audit: type=1400 audit(1787326371.012:1014): avc: denied { ioctl } for pid=8703 comm="syz.2.835" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.027956][ T2229] usb 8-1: Using ep0 maxpacket: 8 [ 118.041679][ T2229] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 118.049166][ T2229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.052984][ T2229] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.055991][ T2229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.078136][ T2229] kobil_sct 8-1:1.0: KOBIL USB smart card terminal converter detected [ 118.088261][ T8708] /dev/sg0: Can't lookup blockdev [ 118.092513][ T2229] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 118.284265][ T8693] netlink: 156 bytes leftover after parsing attributes in process `syz.3.830'. [ 118.347168][ T42] audit: type=1400 audit(1787326371.352:1015): avc: denied { write } for pid=8709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.444644][ T42] audit: type=1400 audit(1787326371.452:1016): avc: denied { write } for pid=8713 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.560335][ T42] audit: type=1400 audit(1787326371.572:1017): avc: denied { write } for pid=8716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.958077][ T24] usb 8-1: USB disconnect, device number 13 [ 119.009627][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 119.018075][ T24] kobil_sct 8-1:1.0: device disconnected [ 119.337869][ T2229] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 119.453380][ T8756] netlink: 184 bytes leftover after parsing attributes in process `syz.1.843'. [ 119.499269][ T2229] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 119.504189][ T2229] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.510555][ T2229] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.517172][ T2229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.521030][ T2229] usb 7-1: Product: syz [ 119.522866][ T2229] usb 7-1: Manufacturer: syz [ 119.524870][ T2229] usb 7-1: SerialNumber: syz [ 119.533156][ T2229] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 119.545692][ T2229] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 119.553539][ T2229] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 119.928344][ T5800] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 120.078483][ T5800] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 120.082987][ T5800] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.089912][ T5800] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.097449][ T5800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.102757][ T5800] usb 8-1: Product: syz [ 120.104549][ T5800] usb 8-1: Manufacturer: syz [ 120.106845][ T5800] usb 8-1: SerialNumber: syz [ 120.119290][ T5800] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 120.127334][ T5800] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 120.143114][ T5800] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 120.216589][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.220505][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.228672][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.233236][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.238428][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.244589][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.252699][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.261344][ T848] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0 [ 120.286688][ T848] hid-generic 0000:0000:0001.0007: hidraw1: HID v0.10 Device [syz0] on syz1 [ 120.290712][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.299513][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.302431][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.306223][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.310725][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.344226][ T8782] fido_id[8782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.461609][ T8796] netlink: 277 bytes leftover after parsing attributes in process `syz.1.853'. [ 120.468437][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 120.468452][ T42] audit: type=1400 audit(1787326373.482:1027): avc: denied { getopt } for pid=8794 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.599906][ T42] audit: type=1800 audit(1787326373.612:1028): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.856" name="iface_name" dev="configfs" ino=25996 res=0 errno=0 [ 120.652931][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.657095][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.661816][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 120.712972][ T42] audit: type=1400 audit(1787326373.722:1029): avc: denied { ioctl } for pid=8807 comm="syz.1.856" path="socket:[28187]" dev="sockfs" ino=28187 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.770693][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.774027][ T42] audit: type=1400 audit(1787326373.782:1030): avc: denied { ioctl } for pid=8807 comm="syz.1.856" path="/197/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=25996 ioctlcmd=0xae65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 120.776339][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.787223][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 120.829771][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.832214][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.835266][ T8780] bridge_slave_0: entered allmulticast mode [ 120.838688][ T8780] bridge_slave_0: entered promiscuous mode [ 120.845297][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.848208][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.851036][ T8780] bridge_slave_1: entered allmulticast mode [ 120.855227][ T8780] bridge_slave_1: entered promiscuous mode [ 120.878730][ T8780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.904525][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.908720][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.913132][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 120.929367][ T8780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.979239][ T8780] team0: Port device team_slave_0 added [ 120.986045][ T8780] team0: Port device team_slave_1 added [ 121.033864][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.035687][ T42] audit: type=1400 audit(1787326374.042:1031): avc: denied { write } for pid=8825 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.038194][ T8827] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.859'. [ 121.039352][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.057234][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.099498][ T8829] netlink: 14 bytes leftover after parsing attributes in process `syz.1.860'. [ 121.100777][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.105517][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.114360][ T8780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.120784][ T8780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.122993][ T8780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.123077][ T8829] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 121.131358][ T8780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.158286][ T8780] hsr_slave_0: entered promiscuous mode [ 121.160629][ T8780] hsr_slave_1: entered promiscuous mode [ 121.162679][ T8780] debugfs: 'hsr0' already exists in 'hsr' [ 121.164673][ T8780] Cannot create hsr debugfs directory [ 121.287934][ T5534] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.482168][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 121.498287][ T12] bond1 (unregistering): (slave geneve3): Releasing active interface [ 121.546597][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.553801][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.566939][ T12] bond0 (unregistering): (slave veth0): Releasing backup interface [ 121.572351][ T12] bond0 (unregistering): Released all slaves [ 121.577361][ T12] bond1 (unregistering): Released all slaves [ 121.585195][ T12] bond2 (unregistering): Released all slaves [ 121.593106][ T12] bond3 (unregistering): Released all slaves [ 121.638019][ T5799] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.643864][ T5799] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.646724][ T5799] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.741023][ T42] audit: type=1400 audit(1787326374.752:1032): avc: denied { write } for pid=8849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.792587][ T42] audit: type=1400 audit(1787326374.802:1033): avc: denied { write } for pid=8854 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.832224][ T5435] 8021q: adding VLAN 0 to HW filter on device eth2 [ 121.840168][ T8851] sit1: entered promiscuous mode [ 121.868095][ T8780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.874515][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.879727][ T8780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.888729][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.892374][ T8780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.904034][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.907430][ T8780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.927139][ T8780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.940627][ T42] audit: type=1400 audit(1787326374.952:1034): avc: denied { write } for pid=8859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.968129][ T8861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=8861 comm=syz.1.865 [ 121.988956][ T42] audit: type=1400 audit(1787326375.002:1035): avc: denied { write } for pid=8867 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.026623][ T5435] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.069213][ T8780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.116309][ T8780] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.126741][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.129823][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.134212][ T42] audit: type=1400 audit(1787326375.132:1036): avc: denied { write } for pid=8878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.136371][ T5728] usb 7-1: USB disconnect, device number 16 [ 122.154759][ T5728] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 122.175624][ T12] hsr_slave_0: left promiscuous mode [ 122.184694][ T12] hsr_slave_1: left promiscuous mode [ 122.186983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.191802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.194933][ T5728] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 122.200433][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 122.206147][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.206442][ T5728] ti_usb_3410_5052 7-1:2.0: device disconnected [ 122.209097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.223626][ T12] veth1_macvtap: left promiscuous mode [ 122.228704][ T12] veth0_macvtap: left promiscuous mode [ 122.232956][ T12] veth1_vlan: left promiscuous mode [ 122.234707][ T12] veth0_vlan: left promiscuous mode [ 122.329999][ T5083] Bluetooth: hci4: command tx timeout [ 122.419902][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'. [ 122.475406][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.502999][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.626254][ T5435] 8021q: adding VLAN 0 to HW filter on device eth4 [ 122.631378][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.633780][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.820879][ T5435] 8021q: adding VLAN 0 to HW filter on device eth5 [ 123.110787][ T8780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.193664][ T12] IPVS: stop unused estimator thread 0... [ 123.224824][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 123.238599][ T8949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.299051][ T8780] veth0_vlan: entered promiscuous mode [ 123.308203][ T8780] veth1_vlan: entered promiscuous mode [ 123.335888][ T8780] veth0_macvtap: entered promiscuous mode [ 123.341483][ T8780] veth1_macvtap: entered promiscuous mode [ 123.352684][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.365691][ T8780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.416172][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.440564][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.453104][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.482216][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.485549][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.517699][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 123.518026][ T5798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.520625][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 123.526393][ T8958] netlink: 'syz.2.881': attribute type 19 has an invalid length. [ 123.529555][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.535482][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.567960][ T5798] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.577152][ T5798] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.584581][ T5798] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.589362][ T5798] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.891600][ T8984] tls_set_device_offload_rx: netdev not found [ 123.951756][ T8987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46864 sclass=netlink_route_socket pid=8987 comm=syz.4.887 [ 123.990508][ T8989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.996515][ T6250] usb 8-1: USB disconnect, device number 14 [ 124.038341][ T6250] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 124.070487][ T6250] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 124.076485][ T6250] ti_usb_3410_5052 8-1:2.0: device disconnected [ 124.080670][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 124.118096][ T8991] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 124.121916][ T8991] overlayfs: missing 'lowerdir' [ 124.165500][ T8989] block device autoloading is deprecated and will be removed. [ 124.171156][ T8989] md: invalid raid superblock magic on ram32 [ 124.174427][ T8989] md: ram32 does not have a valid v0.0 superblock, not importing! [ 124.177581][ T8989] md: md_import_device returned -22 [ 124.413936][ T5083] Bluetooth: hci4: command tx timeout [ 124.778069][ T5807] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 124.907618][ T9017] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.938724][ T5807] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 124.944531][ T5807] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.950496][ T5807] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.956972][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.961549][ T5807] usb 7-1: Product: syz [ 124.963534][ T5807] usb 7-1: Manufacturer: syz [ 124.965550][ T5807] usb 7-1: SerialNumber: syz [ 124.981627][ T5807] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 124.988230][ T5807] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 124.995872][ T5807] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 125.044623][ T9025] tun0: tun_chr_ioctl cmd 1074025675 [ 125.046631][ T9025] tun0: persist enabled [ 125.429299][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 125.531733][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 125.531753][ T42] audit: type=1326 audit(1787326378.542:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.1.908" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f847999e0d9 code=0x0 [ 125.634081][ T42] audit: type=1400 audit(1787326378.642:1055): avc: denied { listen } for pid=9054 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.637651][ T9057] loop4: detected capacity change from 0 to 7 [ 125.674254][ T9057] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.679015][ T9057] loop4: partition table partially beyond EOD, truncated [ 125.682434][ T9057] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 125.729013][ T9060] printk: legacy console [ttyS0] disabled [ 125.833538][ T9068] printk: legacy console [ttyS0] enabled [ 125.835852][ T9067] syzkaller0: entered promiscuous mode [ 125.839023][ T9067] syzkaller0: entered allmulticast mode [ 125.907688][ T9071] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 125.913553][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.3.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.913578][ T9071] Tainted: [L]=SOFTLOCKUP [ 125.913583][ T9071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.913592][ T9071] Call Trace: [ 125.913606][ T9071] [ 125.913612][ T9071] dump_stack_lvl+0x100/0x190 [ 125.913726][ T9071] sysfs_warn_dup.cold+0x1c/0x28 [ 125.913759][ T9071] sysfs_do_create_link_sd+0x113/0x140 [ 125.913813][ T9071] sysfs_create_link+0x61/0xc0 [ 125.913829][ T9071] device_add+0x675/0x1970 [ 125.913894][ T9071] ? __pfx_device_add+0x10/0x10 [ 125.913912][ T9071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.913952][ T9071] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 125.914032][ T9071] wiphy_register+0x2151/0x3110 [ 125.914064][ T9071] ? __pfx_wiphy_register+0x10/0x10 [ 125.914087][ T9071] ? __asan_memset+0x23/0x50 [ 125.914115][ T9071] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 125.914158][ T9071] ieee80211_register_hw+0x3053/0x4580 [ 125.914198][ T9071] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 125.914217][ T9071] ? __pfx___debug_object_init+0x10/0x10 [ 125.914271][ T9071] ? find_held_lock+0x2b/0x80 [ 125.914293][ T9071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.914316][ T9071] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 125.914358][ T9071] ? __hrtimer_setup+0x208/0x330 [ 125.914379][ T9071] mac80211_hwsim_new_radio+0x2b08/0x6510 [ 125.914415][ T9071] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 125.914438][ T9071] ? __asan_memcpy+0x3c/0x60 [ 125.914460][ T9071] hwsim_new_radio_nl+0xc6b/0x13f0 [ 125.914482][ T9071] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 125.914510][ T9071] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 125.914561][ T9071] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 125.914583][ T9071] genl_family_rcv_msg_doit+0x214/0x300 [ 125.914603][ T9071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 125.914628][ T9071] ? bpf_lsm_capable+0x9/0x10 [ 125.914647][ T9071] ? security_capable+0x80/0x260 [ 125.914694][ T9071] ? ns_capable+0xd2/0xf0 [ 125.914721][ T9071] genl_rcv_msg+0x560/0x800 [ 125.914740][ T9071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.914757][ T9071] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 125.914785][ T9071] netlink_rcv_skb+0x159/0x420 [ 125.914809][ T9071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 125.914826][ T9071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.914859][ T9071] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.914885][ T9071] genl_rcv+0x28/0x40 [ 125.914908][ T9071] netlink_unicast+0x585/0x850 [ 125.914934][ T9071] ? __pfx_netlink_unicast+0x10/0x10 [ 125.914957][ T9071] ? __pfx_sock_has_perm+0x10/0x10 [ 125.914989][ T9071] netlink_sendmsg+0x8b0/0xda0 [ 125.915016][ T9071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.915041][ T9071] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.915067][ T9071] ____sys_sendmsg+0xa4d/0xbe0 [ 125.915110][ T9071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.915135][ T9071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.915166][ T9071] ___sys_sendmsg+0x190/0x1e0 [ 125.915188][ T9071] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.915210][ T9071] ? futex_wait+0x11e/0x370 [ 125.915241][ T9071] ? find_held_lock+0x2b/0x80 [ 125.915275][ T9071] __sys_sendmsg+0x160/0x210 [ 125.915293][ T9071] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.915322][ T9071] do_syscall_64+0x123/0x790 [ 125.915355][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.915372][ T9071] RIP: 0033:0x7f6c70d9e0d9 [ 125.915388][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.915403][ T9071] RSP: 002b:00007f6c71bf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.915428][ T9071] RAX: ffffffffffffffda RBX: 00007f6c71026090 RCX: 00007f6c70d9e0d9 [ 125.915439][ T9071] RDX: 00000000040400c4 RSI: 0000200000000100 RDI: 000000000000000b [ 125.915448][ T9071] RBP: 00007f6c70e35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.915457][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.915466][ T9071] R13: 00007f6c71026128 R14: 00007f6c71026090 R15: 00007ffe17e0f988 [ 125.915489][ T9071] [ 126.272771][ T42] audit: type=1400 audit(1787326379.282:1057): avc: denied { create } for pid=9086 comm="syz.4.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.281627][ T42] audit: type=1400 audit(1787326379.282:1058): avc: denied { ioctl } for pid=9086 comm="syz.4.920" path="socket:[30887]" dev="sockfs" ino=30887 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.487987][ T5083] Bluetooth: hci4: command tx timeout [ 126.518010][ T1362] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 126.668800][ T1362] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.674438][ T1362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.679115][ T1362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.683098][ T1362] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 126.687580][ T1362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.695025][ T1362] usb 9-1: config 0 descriptor?? [ 128.408168][ T9088] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 128.408343][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.568328][ T5083] Bluetooth: hci4: command tx timeout [ 128.663200][ T9032] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 128.781537][ T9032] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 128.790490][ T5870] usb 7-1: USB disconnect, device number 17 [ 128.818386][ T5870] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 128.833396][ T5870] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 128.841326][ T5870] ti_usb_3410_5052 7-1:2.0: device disconnected [ 129.183320][ T9088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.186344][ T9088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.189480][ T9088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.195372][ T9088] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.202006][ T9088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.204668][ T9088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.211758][ T9088] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.221822][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.226383][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.237011][ T1362] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 129.240227][ T1362] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 129.257879][ T1362] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 129.344386][ T42] audit: type=1400 audit(1787326382.352:1059): avc: denied { listen } for pid=9108 comm="syz.1.925" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.399720][ T9115] netlink: 348 bytes leftover after parsing attributes in process `syz.1.927'. [ 129.607052][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 129.619054][ T9132] program syz.1.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.660876][ T9138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.666440][ T42] audit: type=1400 audit(1787326382.672:1060): avc: denied { append } for pid=9137 comm="syz.3.934" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.751180][ T9146] netlink: 88 bytes leftover after parsing attributes in process `syz.1.937'. [ 129.765520][ T9146] syzkaller1: entered promiscuous mode [ 129.768704][ T9146] syzkaller1: entered allmulticast mode [ 129.935302][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 129.958804][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 129.960778][ T9157] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 130.090034][ T42] audit: type=1400 audit(1787326383.102:1061): avc: denied { getopt } for pid=9160 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.153472][ T9167] netlink: 'syz.1.944': attribute type 20 has an invalid length. [ 130.198952][ T9170] netlink: 'syz.3.945': attribute type 2 has an invalid length. [ 130.202405][ T9170] netlink: 151 bytes leftover after parsing attributes in process `syz.3.945'. [ 130.282214][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 130.292770][ T9169] block nbd1: shutting down sockets [ 130.348391][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 130.392649][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.950'. [ 130.498122][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.507073][ T9198] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.523084][ T9198] netlink: Invalid conntrack helper [ 130.525353][ T9198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.680401][ T42] audit: type=1400 audit(1787326383.692:1062): avc: denied { mounton } for pid=9211 comm="syz.2.958" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.688295][ T9212] binder: Unknown parameter 'ma0000000000005' [ 130.699863][ T1346] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 130.705323][ T9214] tipc: Enabling of bearer rejected, already enabled [ 130.709805][ T9214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.957'. [ 130.713719][ T9214] gre0: entered promiscuous mode [ 130.762413][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.945424][ T5734] Bluetooth: hci3: sending frame failed (-49) [ 130.951737][ T5083] Bluetooth: hci3: Entering manufacturer mode failed (-49) [ 131.027925][ T5870] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 131.187965][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 131.208017][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.208031][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.272042][ T42] audit: type=1400 audit(1787326384.282:1063): avc: denied { write } for pid=9239 comm="syz.2.969" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.282058][ T9240] binder: 9239:9240 unknown command 0 [ 131.284459][ T9240] binder: 9239:9240 ioctl c0306201 200000000080 returned -22 [ 131.400634][ T1346] usb 9-1: device descriptor read/64, error -71 [ 131.404598][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.411184][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.478590][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.481035][ T5870] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 131.483999][ T5870] usb 6-1: no configurations [ 131.485427][ T5870] usb 6-1: can't read configurations, error -22 [ 131.577939][ T24] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 131.637982][ T1346] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 131.729965][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 131.733293][ T24] usb 7-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 131.740708][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 131.742253][ T9254] afs: Bad value for 'source' [ 131.747388][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.751200][ T24] usb 7-1: Product: syz [ 131.752987][ T24] usb 7-1: Manufacturer: syz [ 131.754929][ T24] usb 7-1: SerialNumber: syz [ 131.788752][ T1346] usb 9-1: device firmware changed [ 131.800672][ T5800] usb 9-1: USB disconnect, device number 2 [ 131.815318][ T9258] ufs: You didn't specify the type of your ufs filesystem [ 131.815318][ T9258] [ 131.815318][ T9258] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 131.815318][ T9258] [ 131.815318][ T9258] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 131.827024][ T9258] ufs: ufstype=old is supported read-only [ 131.829426][ T9258] ufs: ufs_fill_super(): bad magic number [ 131.832651][ T9257] ufs: You didn't specify the type of your ufs filesystem [ 131.832651][ T9257] [ 131.832651][ T9257] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 131.832651][ T9257] [ 131.832651][ T9257] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 131.839147][ T42] audit: type=1400 audit(1787326384.852:1064): avc: denied { create } for pid=9256 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.845028][ T9257] ufs: ufstype=old is supported read-only [ 131.856204][ T9257] ufs: ufs_fill_super(): bad magic number [ 131.957906][ T5800] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.993137][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.995477][ T24] usb 7-1: MIDIStreaming interface descriptor not found [ 132.036492][ T24] usb 7-1: USB disconnect, device number 18 [ 132.069770][ T8264] udevd[8264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 132.112192][ T5800] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 132.118240][ T5800] usb 9-1: config 0 has no interfaces? [ 132.122163][ T5800] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.126347][ T5800] usb 9-1: config 0 descriptor?? [ 132.314568][ T42] audit: type=1400 audit(1787326385.322:1065): avc: denied { write } for pid=9282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.333213][ T5800] usb 9-1: USB disconnect, device number 3 [ 132.385011][ T42] audit: type=1400 audit(1787326385.392:1066): avc: denied { write } for pid=9287 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.729163][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.737638][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789288][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.793133][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.796430][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.799855][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.803106][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.806306][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.809707][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.812882][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: unknown main item tag 0x0 [ 132.820772][ T5728] hid-generic 000A:FFFFFF1D:0002.0009: hidraw1: HID v0.04 Device [syz0] on syz1 [ 132.882348][ T9302] fido_id[9302]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.984428][ T9307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.992008][ T42] audit: type=1400 audit(1787326386.002:1067): avc: denied { read } for pid=9305 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.996405][ T9308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.023560][ T42] audit: type=1400 audit(1787326386.032:1068): avc: denied { write } for pid=9306 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.023565][ T9307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029481][ T9312] socket: no more sockets [ 133.160110][ T42] audit: type=1400 audit(1787326386.172:1069): avc: denied { write } for pid=9314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.188799][ T41] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 133.210130][ T42] audit: type=1400 audit(1787326386.222:1070): avc: denied { write } for pid=9321 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.248118][ T24] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 133.288446][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.289991][ T5083] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.398763][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 133.448285][ T5870] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 133.508066][ T42] audit: type=1400 audit(1787326386.512:1071): avc: denied { write } for pid=9346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.537925][ T24] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 133.603373][ T5870] usb 6-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 133.607376][ T5870] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 133.611682][ T5870] usb 6-1: config 1 interface 0 altsetting 10 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 133.615167][ T5870] usb 6-1: config 1 interface 0 has no altsetting 0 [ 133.619780][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.622551][ T5870] usb 6-1: Product: Ð [ 133.623888][ T5870] usb 6-1: Manufacturer: Ñ [ 133.625383][ T5870] usb 6-1: SerialNumber: Л [ 133.629293][ T9325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.631710][ T9325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.687990][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 133.690710][ T24] usb usb7-port1: attempt power cycle [ 133.713290][ T5083] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 133.760611][ T9355] overlay: ./file0 is not a directory [ 133.764952][ T9355] overlay: ./file0 is not a directory [ 134.028204][ T24] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 134.049159][ T5870] usbhid 6-1:1.0: can't add hid device: -71 [ 134.050113][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 134.052062][ T5870] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 134.061345][ T5870] usb 6-1: USB disconnect, device number 16 [ 134.178060][ T24] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 134.200436][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 134.202925][ T24] usb usb7-port1: unable to enumerate USB device [ 134.260677][ T9376] openvswitch: netlink: Missing key (keys=40, expected=100) [ 135.368062][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.370160][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.534671][ T5083] Bluetooth: hci4: unexpected event for opcode 0x200d [ 135.553318][ T9426] hsr_slave_0: left promiscuous mode [ 135.557173][ T9426] hsr_slave_1: left promiscuous mode [ 135.601617][ T9427] bond0: entered promiscuous mode [ 135.605914][ T9427] gretap0: entered promiscuous mode [ 135.608766][ T9427] dummy0: entered promiscuous mode [ 135.614331][ T9427] debugfs: 'hsr0' already exists in 'hsr' [ 135.616518][ T9427] Cannot create hsr debugfs directory [ 135.621024][ T9427] __nla_validate_parse: 1 callbacks suppressed [ 135.621035][ T9427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1013'. [ 135.642186][ T9427] dummy0 (unregistering): left promiscuous mode [ 135.646724][ T9439] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 135.650473][ T9439] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 135.763965][ T9448] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 135.766609][ T9448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 135.801783][ T9453] openvswitch: netlink: Key type 30 is not supported [ 136.045546][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 136.073054][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 136.079380][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 136.079391][ T42] audit: type=1400 audit(1787326389.092:1084): avc: denied { accept } for pid=9488 comm="syz.1.1032" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.079881][ T9485] IPv6: sit1: Disabled Multicast RS [ 136.082695][ T9489] jffs2: notice: (9489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 136.102791][ T9491] virt_wifi0: entered promiscuous mode [ 136.104772][ T9491] virt_wifi0: entered allmulticast mode [ 136.110765][ T9489] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 136.112371][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 136.113721][ T9489] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1032'. [ 136.122379][ T9489] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1032'. [ 136.130025][ T42] audit: type=1400 audit(1787326389.132:1085): avc: denied { write } for pid=9493 comm="syz.2.1034" name="functions" dev="configfs" ino=10161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.139350][ T9499] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.142974][ T9498] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.146378][ T9499] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.149971][ T9498] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.160431][ T9507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 136.162536][ T9507] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.165278][ T9507] vhci_hcd vhci_hcd.0: Device attached [ 136.172761][ T42] audit: type=1400 audit(1787326389.182:1086): avc: denied { append } for pid=9504 comm="syz.1.1036" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.197932][ T42] audit: type=1400 audit(1787326389.182:1087): avc: denied { write } for pid=9504 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.226497][ T9508] vhci_hcd: connection closed [ 136.230387][ T12] vhci_hcd vhci_hcd.1: stop threads [ 136.234058][ T12] vhci_hcd vhci_hcd.1: release socket [ 136.235895][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 136.273363][ T9513] tipc: Resetting bearer [ 136.394651][ T9513] ip6erspan0: left allmulticast mode [ 136.398700][ T9513] bond3: left allmulticast mode [ 136.408135][ T5534] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.415568][ T5534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.419219][ T5534] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.422247][ T5534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.425137][ T5534] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.428497][ T5534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.431811][ T5534] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.434686][ T5534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.501578][ T42] audit: type=1400 audit(1787326389.512:1088): avc: denied { create } for pid=9534 comm="syz.3.1044" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.515439][ T42] audit: type=1400 audit(1787326389.512:1089): avc: denied { read } for pid=9534 comm="syz.3.1044" name="file0" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.524176][ T42] audit: type=1400 audit(1787326389.512:1090): avc: denied { open } for pid=9534 comm="syz.3.1044" path="/296/file0" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.533226][ T42] audit: type=1400 audit(1787326389.512:1091): avc: denied { ioctl } for pid=9534 comm="syz.3.1044" path="/296/file0" dev="tmpfs" ino=1613 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.542836][ T42] audit: type=1400 audit(1787326389.512:1092): avc: denied { setattr } for pid=9534 comm="syz.3.1044" path="/296/file0" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.551757][ T42] audit: type=1400 audit(1787326389.522:1093): avc: denied { unlink } for pid=5720 comm="syz-executor" name="file0" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.637924][ T41] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 136.787877][ T41] usb 9-1: Invalid ep0 maxpacket: 64 [ 136.805623][ T9549] Cannot find del_set index 2 as target [ 136.809100][ T9553] cgroup: none used incorrectly [ 136.809452][ T9555] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1050'. [ 136.917906][ T41] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 137.068005][ T41] usb 9-1: Invalid ep0 maxpacket: 64 [ 137.074048][ T41] usb usb9-port1: attempt power cycle [ 137.417901][ T41] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 137.439013][ T41] usb 9-1: Invalid ep0 maxpacket: 64 [ 137.567952][ T41] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 137.588426][ T41] usb 9-1: Invalid ep0 maxpacket: 64 [ 137.590859][ T41] usb usb9-port1: unable to enumerate USB device [ 137.671785][ T9560] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.883037][ T9569] qnx4: no qnx4 filesystem (no root dir). [ 137.952572][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 137.962292][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.966165][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.993568][ T9578] CacheFiles: Empty directory specified [ 137.998207][ T9578] ufs: ufs_fill_super(): bad magic number [ 138.029059][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 138.150735][ T9588] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 138.154696][ T9588] qnx6: wrong signature (magic) in superblock #1. [ 138.158428][ T9588] qnx6: unable to read the first superblock [ 138.269307][ T41] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 138.419268][ T41] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 138.424058][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.428530][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.434932][ T41] usb 6-1: config 0 descriptor?? [ 138.441468][ T41] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 138.509179][ T9602] blktrace: debugfs_dir not present for sg0 so skipping [ 138.528490][ T9603] blktrace: debugfs_dir not present for sg0 so skipping [ 138.644558][ T5728] usb 6-1: USB disconnect, device number 17 [ 138.748796][ T5083] Bluetooth: hci1: unexpected event for opcode 0x203e [ 139.097912][ T5728] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 139.257982][ T5728] usb 6-1: Using ep0 maxpacket: 8 [ 139.260998][ T5728] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.265862][ T5728] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 139.269594][ T5728] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.273779][ T5728] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.277748][ T5728] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 139.282563][ T5728] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.286733][ T5728] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.293091][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.296448][ T9614] xt_hashlimit: size too large, truncated to 1048576 [ 139.299110][ T9614] xt_hashlimit: invalid rate [ 139.423918][ T9619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.504119][ T5728] usb 6-1: GET_CAPABILITIES returned 0 [ 139.507457][ T5728] usbtmc 6-1:16.0: can't read capabilities [ 139.558883][ T9633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.568104][ T9634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9634 comm=syz.2.1076 [ 139.568124][ T9633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9633 comm=syz.2.1076 [ 139.577711][ T9634] bond1: entered promiscuous mode [ 139.709275][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.713119][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.716783][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.720463][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.724092][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.731064][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.734885][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.738699][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.751944][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.755652][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.762756][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.763500][ T9647] CacheFiles: Failed to register: -95 [ 139.766355][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.766378][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.766396][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.766414][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.766431][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 139.784579][ T5728] usb 6-1: USB disconnect, device number 18 [ 139.870583][ T9658] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 139.884400][ T9658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.897143][ T9658] SELinux: policydb magic number 0x1ca2ae8c does not match expected magic number 0xf97cff8c [ 139.901431][ T9658] SELinux: failed to load policy [ 139.954158][ T9663] vhci_hcd vhci_hcd.0: failed to lookup sock [ 140.163835][ T9677] netlink: 'syz.4.1089': attribute type 39 has an invalid length. [ 140.465488][ T9694] SELinux: truncated policydb string identifier [ 140.470690][ T9694] SELinux: failed to load policy [ 140.592933][ T9697] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 140.609616][ T9697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.624299][ T9697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.626619][ T9697] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 140.630464][ T9697] bond1: (slave gre1): Error -95 calling set_mac_address [ 140.636969][ T9700] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 140.640258][ T9700] __nla_validate_parse: 4 callbacks suppressed [ 140.640268][ T9700] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1097'. [ 140.673074][ T9703] macvlan2: entered promiscuous mode [ 140.675269][ T9703] macvlan2: entered allmulticast mode [ 140.678426][ T9703] bond1: entered promiscuous mode [ 140.686664][ T9703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.693195][ T9703] bond1: left promiscuous mode [ 140.707896][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 140.782138][ T9713] xt_connbytes: Forcing CT accounting to be enabled [ 140.869085][ T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 140.873733][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.877999][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.882013][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 140.896267][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 140.902120][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.908311][ T9695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.911368][ T9695] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.915815][ T24] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 140.920457][ T24] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 140.921250][ T9724] o2cb: This node has not been configured. [ 140.922912][ T24] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 140.925344][ T9724] o2cb: Cluster check failed. Fix errors before retrying. [ 140.931743][ T24] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 140.932321][ T9724] (syz.1.1103,9724,3):user_dlm_register:674 ERROR: status = -22 [ 140.937055][ T24] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 140.937617][ T9724] (syz.1.1103,9724,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 140.940837][ T24] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 140.947751][ T24] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 141.034434][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 141.038169][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 141.048106][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.051060][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.054315][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.057053][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.217304][ T9695] VFS: file-max limit 0 reached [ 141.298192][ T1346] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 141.375081][ T9] usb 9-1: USB disconnect, device number 8 [ 141.379879][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 141.385754][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 141.389152][ T9] keyspan 9-1:1.0: device disconnected [ 141.448256][ T1346] usb 6-1: device descriptor read/64, error -71 [ 141.633525][ T5800] hid_parser_main: 101 callbacks suppressed [ 141.633586][ T5800] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 141.640889][ T5800] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 141.698121][ T1346] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 141.828008][ T1346] usb 6-1: device descriptor read/64, error -71 [ 141.938497][ T1346] usb usb6-port1: attempt power cycle [ 142.104694][ T9753] binder: 9751:9753 ioctl 4018620d 0 returned -22 [ 142.105022][ T9754] binder: 9751:9754 ioctl 4018620d 0 returned -22 [ 142.184595][ T9756] netlink: 'syz.4.1110': attribute type 11 has an invalid length. [ 142.209717][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 142.212620][ T9756] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 142.215062][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 142.221819][ T9756] geneve2: entered promiscuous mode [ 142.223460][ T9756] geneve2: entered allmulticast mode [ 142.277959][ T1346] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 142.299215][ T1346] usb 6-1: device descriptor read/8, error -71 [ 142.538789][ T1346] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 142.563490][ T1346] usb 6-1: device descriptor read/8, error -71 [ 142.670630][ T1346] usb usb6-port1: unable to enumerate USB device [ 142.700783][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 142.716426][ T9770] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 142.742299][ T9770] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.817998][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 142.967491][ T9778] dummy_hcd dummy_hcd.0: remove, state 1 [ 142.967928][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 142.975886][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.977942][ T9778] usb usb5: USB disconnect, device number 1 [ 142.980081][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.981599][ T9778] usb 5-1: USB disconnect, device number 8 [ 142.985106][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.991682][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 142.993751][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.003927][ T24] usb 7-1: config 0 descriptor?? [ 143.143433][ T9780] batman_adv: batadv0: Adding interface: dummy0 [ 143.145444][ T9778] dummy_hcd dummy_hcd.0: stopped [ 143.146051][ T9780] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.147704][ T9778] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 143.163374][ T9780] batman_adv: batadv0: Interface activated: dummy0 [ 143.173424][ T9779] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 143.177096][ T9780] batadv0: mtu less than device minimum [ 143.178141][ T9779] dummy_hcd dummy_hcd.0: Dummy host controller [ 143.182044][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.189098][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.192916][ T9779] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 143.194243][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.197874][ T9779] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 143.201080][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.208118][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.208412][ T9779] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 143.213253][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.214911][ T9779] usb usb5: Product: Dummy host controller [ 143.220090][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.221037][ T9779] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 143.226084][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.227288][ T9779] usb usb5: SerialNumber: dummy_hcd.0 [ 143.232618][ T9780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.249971][ T9779] hub 5-0:1.0: USB hub found [ 143.252550][ T9779] hub 5-0:1.0: 1 port detected [ 143.453201][ T24] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 143.458972][ T24] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 143.461573][ T24] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 143.463600][ T24] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 143.465817][ T24] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 143.468801][ T24] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 143.528179][ T1346] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.688599][ T1346] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 143.692088][ T1346] usb 5-1: Dual-Role OTG device on HNP port [ 143.694418][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.704289][ T1346] gspca_main: spca501-2.14.0 probing 0000:0000 [ 143.707197][ T1346] gspca_spca501: reg write: error -32 [ 143.709303][ T1346] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 143.711697][ T1346] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 143.723668][ T24] usb 7-1: USB disconnect, device number 23 [ 144.126038][ T9786] loop4: detected capacity change from 0 to 7 [ 144.135518][ T8451] buffer_io_error: 7 callbacks suppressed [ 144.135537][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 144.139432][ T9786] sctp: [Deprecated]: syz.1.1120 (pid 9786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.139432][ T9786] Use struct sctp_sack_info instead [ 144.141248][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 144.147663][ T9786] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1120'. [ 144.149374][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 144.155810][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 144.158864][ T8451] Buffer I/O error on dev loop4, logical block 0, async page read [ 144.185383][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 144.185395][ T42] audit: type=1400 audit(1787326397.192:1105): avc: denied { kexec_image_load } for pid=9788 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 144.221207][ T9791] jffs2: notice: (9791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 144.267685][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 144.305224][ T9791] xfrm1: entered promiscuous mode [ 144.307363][ T9791] xfrm1: entered allmulticast mode [ 144.311597][ T42] audit: type=1400 audit(1787326397.322:1106): avc: denied { setattr } for pid=9790 comm="syz.1.1122" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.414306][ T9805] VFS: file-max limit 0 reached [ 144.458898][ T9807] bridge_slave_1: left allmulticast mode [ 144.460844][ T9807] bridge_slave_1: left promiscuous mode [ 144.462807][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.467321][ T9807] bridge_slave_0: left allmulticast mode [ 144.471380][ T9807] bridge_slave_0: left promiscuous mode [ 144.473638][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.532733][ T9811] i2c i2c-0: delete_device: Can't parse I2C address [ 144.918083][ T1346] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 147.836262][ T9827] netlink: 'syz.1.1134': attribute type 4 has an invalid length. [ 147.842738][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 147.853573][ T42] audit: type=1400 audit(1787326400.862:1107): avc: denied { shutdown } for pid=9826 comm="syz.1.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.065493][ T42] audit: type=1400 audit(1787326401.072:1108): avc: denied { append } for pid=9831 comm="syz.1.1136" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 148.081661][ T9832] binder: BINDER_SET_CONTEXT_MGR already set [ 148.084116][ T9832] binder: 9831:9832 ioctl 4018620d 200000004a80 returned -16 [ 148.140539][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.147377][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.650341][ T1346] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 148.787915][ T1346] usb 6-1: device descriptor read/64, error -71 [ 148.910301][ T1346] usb usb6-port1: attempt power cycle [ 149.248213][ T1346] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 149.268383][ T1346] usb 6-1: device descriptor read/8, error -71 [ 149.507976][ T1346] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 149.528623][ T1346] usb 6-1: device descriptor read/8, error -71 [ 149.638576][ T1346] usb usb6-port1: unable to enumerate USB device [ 150.648677][ C1] net_ratelimit: 12 callbacks suppressed [ 150.648709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.971581][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.981387][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.989744][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.995380][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.999190][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.127274][ T9866] dlm: no local IP address has been set [ 152.129996][ T9866] dlm: cannot start dlm midcomms -107 [ 152.357166][ T9872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9872 comm=syz.1.1144 [ 152.523147][ T9890] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1148'. [ 152.666106][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.668619][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.670921][ T9854] bridge_slave_0: entered allmulticast mode [ 152.673825][ T9854] bridge_slave_0: entered promiscuous mode [ 152.677458][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.679960][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.682865][ T9854] bridge_slave_1: entered allmulticast mode [ 152.691583][ T9854] bridge_slave_1: entered promiscuous mode [ 152.726666][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.744665][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.782026][ T9854] team0: Port device team_slave_0 added [ 152.785738][ T9854] team0: Port device team_slave_1 added [ 152.788317][ T9907] jffs2: notice: (9907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 152.797544][ T42] audit: type=1400 audit(1787326405.802:1109): avc: denied { write } for pid=9906 comm="syz.1.1151" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.808121][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.810370][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.816433][ T42] audit: type=1400 audit(1787326405.822:1110): avc: denied { read write } for pid=9906 comm="syz.1.1151" name="test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.818090][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.831091][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.833080][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.833841][ T42] audit: type=1400 audit(1787326405.832:1111): avc: denied { open } for pid=9906 comm="syz.1.1151" path="/307/mnt/test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.842487][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.925350][ T9854] hsr_slave_0: entered promiscuous mode [ 152.929723][ T9854] hsr_slave_1: entered promiscuous mode [ 152.933317][ T9854] debugfs: 'hsr0' already exists in 'hsr' [ 152.935355][ T9854] Cannot create hsr debugfs directory [ 153.214756][ T9854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.219855][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.222833][ T9854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.230288][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.233514][ T9854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.238645][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.241797][ T9854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.251165][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.277467][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.280420][ T9854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.283513][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.286231][ T9854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.350595][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.370971][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.379833][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.396448][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.410197][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.412472][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.426847][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.429249][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.571461][ T42] audit: type=1400 audit(1787326406.582:1112): avc: denied { write } for pid=9924 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.582450][ T9925] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 153.644204][ T9925] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 153.649264][ T9925] overlayfs: failed to look up (tracing) for ino (-66) [ 153.791906][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.011727][ T9854] veth0_vlan: entered promiscuous mode [ 154.027648][ T9854] veth1_vlan: entered promiscuous mode [ 154.071135][ T9854] veth0_macvtap: entered promiscuous mode [ 154.077037][ T9854] veth1_macvtap: entered promiscuous mode [ 154.097071][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.107263][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.171978][ T5734] Bluetooth: hci3: command tx timeout [ 154.178917][ T5534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.185023][ T5534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.188726][ T5534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.192296][ T5534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.225463][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.229253][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.275735][ T6126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.280227][ T6126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.356948][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1141'. [ 154.372222][ T42] audit: type=1400 audit(1787326407.382:1113): avc: denied { mounton } for pid=9941 comm="syz.1.1161" path="/file0" dev="ramfs" ino=36585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 154.531440][ T9950] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 156.247911][ T5734] Bluetooth: hci3: command tx timeout [ 158.328366][ T5734] Bluetooth: hci3: command tx timeout [ 159.642136][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.649194][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.652928][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.661838][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.664811][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.698081][ T5083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.710481][ T5083] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.714393][ T5083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.723249][ T5083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.728108][ T5083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.772843][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 159.836429][ T9] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 159.880995][T10011] fido_id[10011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.096221][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.099659][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.132161][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 160.298013][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.302227][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.335412][T10046] ip6t_rpfilter: unknown options [ 160.407958][ T5734] Bluetooth: hci3: command tx timeout [ 160.486278][ T9983] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.489034][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.491520][ T9983] bridge_slave_0: entered allmulticast mode [ 160.494610][ T9983] bridge_slave_0: entered promiscuous mode [ 160.504802][ T9983] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.508250][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.511426][ T9983] bridge_slave_1: entered allmulticast mode [ 160.515821][ T9983] bridge_slave_1: entered promiscuous mode [ 160.584440][ T9983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.610475][ T9983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.645646][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.650031][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.704410][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.711083][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.713419][ T9994] bridge_slave_0: entered allmulticast mode [ 160.719196][ T9994] bridge_slave_0: entered promiscuous mode [ 160.747112][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.750641][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.753776][ T9994] bridge_slave_1: entered allmulticast mode [ 160.757704][ T9994] bridge_slave_1: entered promiscuous mode [ 160.766076][ T9983] team0: Port device team_slave_0 added [ 160.789336][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.792746][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.821303][T10066] i2c i2c-0: delete_device: Extra parameters [ 160.842622][ T9983] team0: Port device team_slave_1 added [ 160.856629][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 160.868764][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.870913][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.879993][ T9983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.885205][ T9983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.887538][ T9983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.904487][ T9983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.911225][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.932742][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.019679][ T9994] team0: Port device team_slave_0 added [ 161.032272][ T9983] hsr_slave_0: entered promiscuous mode [ 161.034730][ T9983] hsr_slave_1: entered promiscuous mode [ 161.039420][ T9983] debugfs: 'hsr0' already exists in 'hsr' [ 161.041375][ T9983] Cannot create hsr debugfs directory [ 161.044637][ T9994] team0: Port device team_slave_1 added [ 161.057310][ T42] audit: type=1400 audit(1787326414.062:1114): avc: denied { call } for pid=10074 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.066532][ T42] audit: type=1400 audit(1787326414.062:1115): avc: denied { transfer } for pid=10074 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.126891][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.129979][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.138966][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.143684][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.146039][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.154358][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.171932][ T5798] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.257290][ T12] bridge_slave_1: left allmulticast mode [ 161.261032][ T12] bridge_slave_1: left promiscuous mode [ 161.269028][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.286562][ T12] bridge_slave_0: left allmulticast mode [ 161.289179][ T12] bridge_slave_0: left promiscuous mode [ 161.291654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.438563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.445079][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.450888][ T12] bond0 (unregistering): Released all slaves [ 161.462643][ T12] bond1 (unregistering): Released all slaves [ 161.564211][ T9994] hsr_slave_0: entered promiscuous mode [ 161.566943][ T9994] hsr_slave_1: entered promiscuous mode [ 161.569569][ T9994] debugfs: 'hsr0' already exists in 'hsr' [ 161.571276][ T9994] Cannot create hsr debugfs directory [ 161.608323][ T5799] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.625976][ T12] tipc: Left network mode [ 161.768071][ T5734] Bluetooth: hci5: command tx timeout [ 161.768277][ T5083] Bluetooth: hci0: command tx timeout [ 161.839010][ T5799] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.878512][T10089] ip6t_srh: unknown srh match flags 4000 [ 161.950601][T10087] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 161.965103][T10087] ubi0: attaching mtd0 [ 162.001800][T10087] ubi0: scanning is finished [ 162.008015][ T5799] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.025365][T10087] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 162.072801][ T42] audit: type=1400 audit(1787326415.082:1116): avc: denied { write } for pid=10100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.121179][ T9983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.135876][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.146373][ T9983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.157744][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.163910][ T9983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.176483][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.204231][T10107] FAULT_INJECTION: forcing a failure. [ 162.204231][T10107] name failslab, interval 1, probability 0, space 0, times 0 [ 162.204738][ T42] audit: type=1400 audit(1787326415.212:1117): avc: denied { write } for pid=10105 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.209474][T10107] CPU: 2 UID: 0 PID: 10107 Comm: syz.1.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.209496][T10107] Tainted: [L]=SOFTLOCKUP [ 162.209501][T10107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.209510][T10107] Call Trace: [ 162.209535][T10107] [ 162.209544][T10107] dump_stack_lvl+0x100/0x190 [ 162.209612][T10107] should_fail_ex.cold+0x5/0xa [ 162.209636][T10107] ? find_held_lock+0x2b/0x80 [ 162.209664][T10107] should_failslab+0xc2/0x120 [ 162.209701][T10107] kmem_cache_alloc_noprof+0x91/0x6a0 [ 162.209724][T10107] ? dst_alloc+0x99/0x1a0 [ 162.209772][T10107] ? __pfx_ip6_dst_gc+0x10/0x10 [ 162.209803][T10107] dst_alloc+0x99/0x1a0 [ 162.209821][T10107] icmp6_dst_alloc+0x79/0x4f0 [ 162.209834][T10107] ndisc_send_skb+0x133f/0x1bf0 [ 162.209853][T10107] ? __lock_acquire+0x4c5/0x1ec0 [ 162.209883][T10107] ? __pfx_ndisc_send_skb+0x10/0x10 [ 162.209896][T10107] ? kmalloc_reserve+0xf9/0x350 [ 162.209916][T10107] ? ndisc_alloc_skb+0x319/0x530 [ 162.209927][T10107] ? __asan_memcpy+0x3c/0x60 [ 162.209943][T10107] ndisc_send_na+0x47b/0xa50 [ 162.209956][T10107] ? __pfx_ndisc_send_na+0x10/0x10 [ 162.209971][T10107] ndisc_recv_ns+0x108e/0x1730 [ 162.209986][T10107] ? __pfx_ndisc_recv_ns+0x10/0x10 [ 162.209998][T10107] ? lock_acquire+0x1b9/0x370 [ 162.210020][T10107] ? skb_checksum+0x7f4/0x950 [ 162.210039][T10107] ndisc_rcv+0x64a/0x7a0 [ 162.210052][T10107] icmpv6_rcv+0x15ac/0x1ae0 [ 162.210071][T10107] ? __pfx_icmpv6_rcv+0x10/0x10 [ 162.210087][T10107] ip6_protocol_deliver_rcu+0x1021/0x15b0 [ 162.210107][T10107] ip6_input_finish+0x1e4/0x4a0 [ 162.210120][T10107] ip6_input+0x105/0x2f0 [ 162.210131][T10107] ip6_mc_input+0x513/0x1050 [ 162.210144][T10107] ? __pfx_ip6_mc_input+0x10/0x10 [ 162.210156][T10107] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 162.210170][T10107] ? __pfx_ip6_mc_input+0x10/0x10 [ 162.210182][T10107] ipv6_rcv+0x34c/0x3d0 [ 162.210193][T10107] ? __pfx_ipv6_rcv+0x10/0x10 [ 162.210203][T10107] __netif_receive_skb_one_core+0x12d/0x1e0 [ 162.210220][T10107] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 162.210240][T10107] ? lock_acquire+0x1b9/0x370 [ 162.210259][T10107] __netif_receive_skb+0x1f/0x120 [ 162.210275][T10107] netif_receive_skb+0x139/0x7d0 [ 162.210291][T10107] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.210311][T10107] tun_rx_batched.isra.0+0x3f6/0x750 [ 162.210339][T10107] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 162.210359][T10107] ? tun_get_user+0x1e1e/0x3cc0 [ 162.210373][T10107] tun_get_user+0x1f53/0x3cc0 [ 162.210389][T10107] ? __pfx_tun_get_user+0x10/0x10 [ 162.210401][T10107] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.210444][T10107] ? find_held_lock+0x2b/0x80 [ 162.210456][T10107] ? tun_get+0x191/0x370 [ 162.210472][T10107] ? tun_get+0x191/0x370 [ 162.210492][T10107] tun_chr_write_iter+0xdc/0x200 [ 162.210504][T10107] vfs_write+0x6af/0x1050 [ 162.210528][T10107] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.210540][T10107] ? __pfx_vfs_write+0x10/0x10 [ 162.210552][T10107] ? find_held_lock+0x2b/0x80 [ 162.210573][T10107] ksys_write+0x12a/0x250 [ 162.210586][T10107] ? __pfx_ksys_write+0x10/0x10 [ 162.210604][T10107] do_syscall_64+0x123/0x790 [ 162.210648][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.210661][T10107] RIP: 0033:0x7f847995e90e [ 162.210671][T10107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.210682][T10107] RSP: 002b:00007f847a901fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.210699][T10107] RAX: ffffffffffffffda RBX: 00007f847a9026c0 RCX: 00007f847995e90e [ 162.210707][T10107] RDX: 0000000000000066 RSI: 0000200000000380 RDI: 00000000000000c8 [ 162.210713][T10107] RBP: 00007f847a902090 R08: 0000000000000000 R09: 0000000000000000 [ 162.210719][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.210728][T10107] R13: 00007f8479c26038 R14: 00007f8479c25fa0 R15: 00007ffcba754bf8 [ 162.210742][T10107] [ 162.367683][ T12] hsr_slave_0: left promiscuous mode [ 162.380619][ T12] hsr_slave_1: left promiscuous mode [ 162.383947][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.386957][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.392244][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.395405][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.441665][ T12] veth1_macvtap: left promiscuous mode [ 162.445353][ T12] veth0_macvtap: left promiscuous mode [ 162.447260][T10087] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 162.450384][ T12] veth1_vlan: left promiscuous mode [ 162.453132][ T12] veth0_vlan: left promiscuous mode [ 162.617995][ T5728] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 162.693883][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.707295][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.798702][ T5728] usb 6-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 162.802604][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.806156][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.811702][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.825803][ T5728] usb 6-1: config 0 descriptor?? [ 162.874652][ T9983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.881799][ T9983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.922172][ T5435] 8021q: adding VLAN 0 to HW filter on device eth6 [ 163.083660][ T9994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.093543][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.102442][ T9994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.108539][ T42] audit: type=1400 audit(1787326416.122:1118): avc: denied { write } for pid=10120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.122114][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.129347][ T9994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.154171][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.157246][ T9994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.175942][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.203474][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.232380][ T42] audit: type=1400 audit(1787326416.242:1119): avc: denied { write } for pid=10132 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.254663][ T9983] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.275371][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.277746][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.302443][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.304832][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.312851][ T5435] 8021q: adding VLAN 0 to HW filter on device eth7 [ 163.370816][ T12] IPVS: stop unused estimator thread 0... [ 163.374513][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.404407][T10090] syz.1.1188 (10090) used greatest stack depth: 17912 bytes left [ 163.406136][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.432972][ T42] audit: type=1400 audit(1787326416.442:1120): avc: denied { write } for pid=10139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.455503][T10146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=10146 comm=syz.5.1196 [ 163.455744][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.462645][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.498902][ T42] audit: type=1400 audit(1787326416.512:1121): avc: denied { write } for pid=10147 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.545967][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.564556][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.566802][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.572143][ T5435] 8021q: adding VLAN 0 to HW filter on device eth8 [ 163.676932][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.719350][ T42] audit: type=1400 audit(1787326416.722:1122): avc: denied { write } for pid=10158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.793771][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.805911][ T42] audit: type=1400 audit(1787326416.812:1123): avc: denied { write } for pid=10168 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.850146][ T5083] Bluetooth: hci5: command tx timeout [ 163.850177][ T5734] Bluetooth: hci0: command tx timeout [ 163.880384][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.888616][ T5435] 8021q: adding VLAN 0 to HW filter on device eth9 [ 163.965928][ T9983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.001353][ T5827] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 164.020094][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.055109][ T12] bridge_slave_1: left allmulticast mode [ 164.057001][ T12] bridge_slave_1: left promiscuous mode [ 164.059229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.065048][ T12] bridge_slave_0: left allmulticast mode [ 164.066898][ T12] bridge_slave_0: left promiscuous mode [ 164.069810][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.157863][ T5827] usb 10-1: Using ep0 maxpacket: 8 [ 164.160176][ T5827] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.164107][ T5827] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.167359][ T5827] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.170778][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.175221][ T5827] usb 10-1: config 0 descriptor?? [ 164.211656][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.215933][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.221906][ T12] bond0 (unregistering): Released all slaves [ 164.268078][ T5798] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.271301][ T5798] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.273995][ T5798] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.289939][ T5798] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.388578][ T9983] veth0_vlan: entered promiscuous mode [ 164.400740][ T41] usb 10-1: USB disconnect, device number 2 [ 164.403239][ T9983] veth1_vlan: entered promiscuous mode [ 164.446893][ T5435] 8021q: adding VLAN 0 to HW filter on device eth10 [ 164.521942][ T9994] veth0_vlan: entered promiscuous mode [ 164.553130][ T9994] veth1_vlan: entered promiscuous mode [ 164.580825][ T9983] veth0_macvtap: entered promiscuous mode [ 164.620526][ T9983] veth1_macvtap: entered promiscuous mode [ 164.644049][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.654585][ T9994] veth0_macvtap: entered promiscuous mode [ 164.660531][ T9983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.669252][ T9994] veth1_macvtap: entered promiscuous mode [ 164.698177][ T5798] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.761174][ T12] hsr_slave_0: left promiscuous mode [ 164.770260][ T12] hsr_slave_1: left promiscuous mode [ 164.772657][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.778337][ T12] batadv0: mtu less than device minimum [ 164.783685][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.790712][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.796075][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.801380][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.806562][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.811810][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.817082][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.822418][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.827649][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.844278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.848771][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.870983][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.875045][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.877972][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 164.885355][ T12] veth1_macvtap: left promiscuous mode [ 164.887679][ T12] veth0_macvtap: left promiscuous mode [ 164.890633][ T12] veth1_vlan: left promiscuous mode [ 164.892948][ T12] veth0_vlan: left promiscuous mode [ 165.120860][ T12] team0 (unregistering): Port device team_slave_1 removed [ 165.132562][ T12] team0 (unregistering): Port device team_slave_0 removed [ 165.282682][ T5435] 8021q: adding VLAN 0 to HW filter on device eth11 [ 165.294959][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.316355][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.384343][ T5534] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.427935][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.431137][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.434606][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.437550][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.479481][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.490139][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.492733][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.608268][ T5534] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.620793][ T5728] usbhid 6-1:0.0: can't add hid device: -71 [ 165.622832][ T5728] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 165.646960][ T5728] usb 6-1: USB disconnect, device number 27 [ 165.704296][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.708702][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.725298][ T6123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.730644][ T6123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.793806][ T5435] 8021q: adding VLAN 0 to HW filter on device eth12 [ 165.805121][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.808345][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.930255][ T5734] Bluetooth: hci0: command tx timeout [ 165.937929][ T5807] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 165.938307][ T5734] Bluetooth: hci5: command tx timeout [ 165.956745][T10262] binder: 10261:10262 ioctl c0306201 200000000640 returned -14 [ 165.962628][ T5435] 8021q: adding VLAN 0 to HW filter on device eth13 [ 165.963975][T10264] binder: 10261:10264 ioctl c0306201 200000000080 returned -22 [ 166.002860][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'. [ 166.095023][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 166.095045][ T42] audit: type=1400 audit(1787326419.102:1132): avc: denied { mount } for pid=10271 comm="syz.7.1211" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 166.111727][ T5807] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 166.150002][ T5807] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 166.153979][ T5807] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.172844][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1210'. [ 166.174733][ T5807] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.191228][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.202173][T10232] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.210411][ T5807] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 166.221855][ T5807] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 166.262213][T10283] netlink: 'syz.7.1213': attribute type 1 has an invalid length. [ 166.413506][T10291] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 166.419614][T10229] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 166.428096][ T5807] usb 10-1: USB disconnect, device number 3 [ 166.446427][ T5807] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 166.454352][ T5807] cyberjack 10-1:1.0: device disconnected [ 166.487003][ T42] audit: type=1400 audit(1787326419.492:1133): avc: denied { write } for pid=10292 comm="syz.1.1216" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 166.593052][ T42] audit: type=1400 audit(1787326419.602:1134): avc: denied { watch_reads } for pid=10304 comm="syz.6.1219" path="/5" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.621710][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1219'. [ 166.625191][T10305] bridge: RTM_NEWNEIGH with invalid ether address [ 166.636951][ T42] audit: type=1326 audit(1787326419.642:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.644256][ T42] audit: type=1326 audit(1787326419.642:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.657590][ T42] audit: type=1326 audit(1787326419.642:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.667990][ T42] audit: type=1326 audit(1787326419.642:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.675309][ T42] audit: type=1326 audit(1787326419.642:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.682409][ T42] audit: type=1326 audit(1787326419.642:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.686098][T10301] block2mtd: parameter too long [ 166.690095][ T42] audit: type=1326 audit(1787326419.642:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10300 comm="syz.1.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847999e0d9 code=0x7ffc0000 [ 166.702211][T10312] overlay: Unknown parameter './proc_mnt' [ 166.797274][T10321] ip6gretap0: entered allmulticast mode [ 166.800800][T10321] netlink: 'syz.6.1225': attribute type 21 has an invalid length. [ 166.803053][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 166.811857][T10321] netlink: 'syz.6.1225': attribute type 21 has an invalid length. [ 166.814169][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 166.848068][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.853487][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.858468][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.861486][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.189776][T10330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.477225][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=10347 comm=syz.7.1232 [ 167.489600][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=10347 comm=syz.7.1232 [ 167.573400][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1233'. [ 167.669655][T10355] Bluetooth: MGMT ver 1.23 [ 167.942471][T10367] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 168.008213][ T5083] Bluetooth: hci5: command tx timeout [ 168.010824][ T5734] Bluetooth: hci0: command tx timeout [ 168.120621][T10326] Dynamic Preempt: lazy [ 168.208429][T10373] xt_hashlimit: size too large, truncated to 1048576 [ 168.298053][T10383] binder_alloc: 10376: binder_alloc_buf, no vma [ 168.318688][T10386] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 168.586580][T10398] [ 168.587371][T10398] ============================================ [ 168.589244][T10398] WARNING: possible recursive locking detected [ 168.591122][T10398] syzkaller #0 Tainted: G L [ 168.593122][T10398] -------------------------------------------- [ 168.595070][T10398] syz.7.1247/10398 is trying to acquire lock: [ 168.597026][T10398] ffff888065aca160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 168.600179][T10398] [ 168.600179][T10398] but task is already holding lock: [ 168.602455][T10398] ffff88802e681960 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 168.605613][T10398] [ 168.605613][T10398] other info that might help us debug this: [ 168.608615][T10398] Possible unsafe locking scenario: [ 168.608615][T10398] [ 168.611039][T10398] CPU0 [ 168.612137][T10398] ---- [ 168.613169][T10398] lock(&rmidi->open_mutex); [ 168.614741][T10398] lock(&rmidi->open_mutex); [ 168.616451][T10398] [ 168.616451][T10398] *** DEADLOCK *** [ 168.616451][T10398] [ 168.618932][T10398] May be due to missing lock nesting notation [ 168.618932][T10398] [ 168.621781][T10398] locks held by syz.7.1247/10398: 2, last CPU#0: [ 168.623860][T10398] #0: ffff88802e681960 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x45/0x280 [ 168.627071][T10398] #1: ffff888065aca460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0x117/0x300 [ 168.631065][T10398] [ 168.631065][T10398] stack backtrace: [ 168.633005][T10398] CPU: 0 UID: 0 PID: 10398 Comm: syz.7.1247 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 168.633022][T10398] Tainted: [L]=SOFTLOCKUP [ 168.633026][T10398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.633033][T10398] Call Trace: [ 168.633047][T10398] [ 168.633053][T10398] dump_stack_lvl+0x100/0x190 [ 168.633112][T10398] print_deadlock_bug.cold+0xbd/0xca [ 168.633138][T10398] __lock_acquire+0x1343/0x1ec0 [ 168.633175][T10398] lock_acquire+0x1b9/0x370 [ 168.633190][T10398] ? rawmidi_release_priv+0x45/0x280 [ 168.633207][T10398] ? __pfx___might_resched+0x10/0x10 [ 168.633222][T10398] ? lock_acquire+0x1b9/0x370 [ 168.633238][T10398] __mutex_lock+0x1a4/0x1bc0 [ 168.633288][T10398] ? rawmidi_release_priv+0x45/0x280 [ 168.633302][T10398] ? rawmidi_release_priv+0x45/0x280 [ 168.633317][T10398] ? trace_contention_end+0x126/0x160 [ 168.633334][T10398] ? __pfx___mutex_lock+0x10/0x10 [ 168.633345][T10398] ? __lock_acquire+0x4c5/0x1ec0 [ 168.633361][T10398] ? __pfx___mutex_lock+0x10/0x10 [ 168.633373][T10398] ? lock_acquire+0x1b9/0x370 [ 168.633389][T10398] ? rawmidi_release_priv+0x45/0x280 [ 168.633403][T10398] rawmidi_release_priv+0x45/0x280 [ 168.633419][T10398] snd_rawmidi_kernel_release+0x3a/0xd0 [ 168.633434][T10398] snd_ump_legacy_close+0x234/0x300 [ 168.633451][T10398] close_substream.part.0+0x16b/0x860 [ 168.633467][T10398] ? __pfx_close_substream.part.0+0x10/0x10 [ 168.633482][T10398] ? __pfx___fsnotify_parent+0x10/0x10 [ 168.633513][T10398] ? locks_remove_file+0xd1/0x600 [ 168.633534][T10398] rawmidi_release_priv+0x210/0x280 [ 168.633549][T10398] snd_rawmidi_release+0x5a/0xf0 [ 168.633563][T10398] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 168.633578][T10398] __fput+0x3ff/0xb50 [ 168.633596][T10398] task_work_run+0x150/0x240 [ 168.633612][T10398] ? __pfx_task_work_run+0x10/0x10 [ 168.633627][T10398] do_exit+0x951/0x2ae0 [ 168.633640][T10398] ? __pfx_do_exit+0x10/0x10 [ 168.633651][T10398] ? do_raw_spin_lock+0x128/0x260 [ 168.633661][T10398] ? find_held_lock+0x2b/0x80 [ 168.633673][T10398] ? get_signal+0x7e0/0x21e0 [ 168.633690][T10398] do_group_exit+0xd5/0x2a0 [ 168.633702][T10398] get_signal+0x1ec7/0x21e0 [ 168.633720][T10398] ? __pfx_get_signal+0x10/0x10 [ 168.633736][T10398] ? do_futex+0x190/0x440 [ 168.633750][T10398] arch_do_signal_or_restart+0x91/0x7e0 [ 168.633775][T10398] ? sock_ioctl+0x2dc/0x6b0 [ 168.633805][T10398] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.633821][T10398] exit_to_user_mode_loop+0x139/0x700 [ 168.633839][T10398] ? rcu_is_watching+0x13/0xc0 [ 168.633851][T10398] do_syscall_64+0x661/0x790 [ 168.633863][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.633875][T10398] RIP: 0033:0x7fd48f39e0d9 [ 168.633884][T10398] Code: Unable to access opcode bytes at 0x7fd48f39e0af. [ 168.633894][T10398] RSP: 002b:00007fd4902120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 168.633905][T10398] RAX: 0000000000000000 RBX: 00007fd48f625fa8 RCX: 00007fd48f39e0d9 [ 168.633911][T10398] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd48f625fa8 [ 168.633917][T10398] RBP: 00007fd48f625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 168.633924][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.633930][T10398] R13: 00007fd48f626038 R14: 00007fff220f5850 R15: 00007fff220f5938 [ 168.633939][T10398] [ 173.744199][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 173.744218][ T42] audit: type=1400 audit(1787326426.752:1191): avc: denied { write } for pid=10408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.780994][ T42] audit: type=1400 audit(1787326426.792:1192): avc: denied { write } for pid=10411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.383525][ T42] audit: type=1400 audit(1787326427.392:1193): avc: denied { write } for pid=10414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.418893][ T42] audit: type=1400 audit(1787326427.432:1194): avc: denied { write } for pid=10417 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.847974][ T42] audit: type=1400 audit(1787326427.852:1195): avc: denied { write } for pid=10420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.882632][ T42] audit: type=1400 audit(1787326427.892:1196): avc: denied { write } for pid=10423 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.495958][ T42] audit: type=1400 audit(1787326428.502:1197): avc: denied { write } for pid=10426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.539464][ T42] audit: type=1400 audit(1787326428.552:1198): avc: denied { write } for pid=10429 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.602689][ T42] audit: type=1400 audit(1787326428.612:1199): avc: denied { write } for pid=10432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.643162][ T42] audit: type=1400 audit(1787326428.652:1200): avc: denied { write } for pid=10435 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1