last executing test programs: 50.731877591s ago: executing program 2 (id=177): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000004, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xf88c, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080046080020006800008002907f00000000e00003000702b2000800907800060001"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x2, 0x40000006}, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="f210040fbc756187152d608a2bfac52370e3a80ce2d83cc3ab02a19ef300f39be6c49a56f6f1ab3326f93529c8638b6ca31251be3f023f281a3e60a98f4c6759800b8a4ee0d221fa1cc9d257fe8618afcaa64266e427705c1e60839bb4815a626ee41a04d3e7c4f5f0feb90ccb46897cec802a7807f971001d3c96939f554511221521bdaa90f4312622c36eb488a97ddb69f9718de293b79558e3b4c7ad8e9e0bb64f53c4ff85f1b0c84748007f3b54ff2b1dc14cbff1c832236c5f82dc31c725251361171e0159"}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000280)={0x1, 0x2, 0x1}) r9 = socket(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000000340)={0x2, 0x0, [{0x80000019, 0x0, 0x1, 0x2652, 0x1c49, 0x400, 0x100}, {0xc0000000, 0x81, 0x2, 0x3, 0x100, 0x0, 0x100}]}}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000080)=0x2) 50.540293457s ago: executing program 2 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="340800222089252b729b286b219543ec", @ANYRES16=r3, @ANYBLOB="0d022abd7000fedbdf25010000000500060002000000050005000400000008000300060000000800040026000000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) 50.391349685s ago: executing program 2 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fca029eb0000001a00010029bd70140000fd0100006c1a00a7edc8653f"], 0xdc}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 50.281609542s ago: executing program 2 (id=195): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a00000061c7513cf97155360000000000010000000000000000000000000000000183009078000936c0fe8000000000000000000000000000bb"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0142d4c29aad06b82b7e3ce8002bbd7000fddbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, r1}) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000340)=r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000cd0702f437d3d60f00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000d81b39be889c5e7fcb7e9768881a591f69e3b7f5d2946783be9f24df8c1ecc4331fb19622ce2954136ac6a7bb395325bad23d859f7e0d9aecbdb29e760c39bf162e6461475f1623ed22248ed558a783c35eed0441d0be8253bf1e3685c01b926ead21ac04a436f8e35f99f3b8513f67529eebe5568be615df7953f13d1dce73094ea6f9452ea8c2cbace19775e366972345a12ef3fd237cf13426a4cb7a4d0f7db10b2c30000000000000000995ee0723e79bfaa0dd5faf27a4d00000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e00000085000000150000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000540)={0x28, 0x0, 0x0, @hyper}, 0x10) 50.081868736s ago: executing program 2 (id=199): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="020b0e080600000025bd7000fedbdf25040003000400000005000000000000000f000000000000000100000000001000bc123a28cc1a5847ba5c7ff0ef8b1f095230336e82cfc2d9940e6fedf7f9feeeafc87660e81f38b2ae99f678938e307633c1c699412b17c02ec62b3a4643afd2b06d602fbe6a5e0030b9bcdf04b1a3590a662527d613588764f4590b92ed070463a71ba9"], 0x30}}, 0x4000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xffffffff, @private0, 0xfffffffe}]}, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r0 = socket$kcm(0x2, 0x2, 0x73) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050004770000000000000a0000000900020073797a30000001000500010007000000050005000a0000000c00078008000b400000cb57050004000000000011000300686173683a69702c6d61726b00"], 0x58}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) (async) chdir(0x0) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) socket$kcm(0x2, 0x2, 0x73) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @broadcast}, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="1c00238005401d00000000000050f3220104b01e000509d5aa4af6c6be5a0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0x4, 0x1, 0xfffb, 0x1af2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000004c0)="b829000f00d80f23d80f21f86635400000900f23f8640fc75e076766c74424004fffffff0fc7fa6766c744240600000000670f01142466b98c02000066b80000000066ba010000000f300f2316ba210066b83d2ac03766ef0f205c36f080b1da9205660f38819f8f00f30f5bcd", 0x6d}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0xffff1000, 0x8, 0x9, 0xfb, 0x8, 0x40, 0x17, 0x0, 0x2e, 0x19, 0xab}, {0x60000, 0x70000, 0x4, 0x0, 0x24, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0xd, 0x81}, {0x6000, 0x1, 0xd, 0x1, 0x0, 0x42, 0xb, 0x0, 0xfe, 0x7, 0xc, 0x12}, {0xeeef0000, 0x126000, 0x3, 0x3, 0x15, 0x19, 0xab, 0x7d, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0xffffffff, 0xc, 0x9, 0x1, 0x10, 0x1, 0xf8, 0x9, 0x5, 0xf7}, {0x10a000, 0x50000, 0xd, 0x5, 0x8, 0x5, 0x9, 0xe, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x2, 0xb, 0x7, 0x8, 0x34, 0x2, 0xb, 0xa, 0x9}, {0x8000000, 0x30}, {0x100000, 0x6}, 0x80000031, 0x0, 0xdddd0000, 0x400000, 0x3, 0x8000, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0x4]}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r10, @ANYRES8=r3, @ANYRES8=r9], 0x6f4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="fd022cbd7000db26287dc180239b16755375054b17df2514000000faff9800008000003b000000060012010010000006003600410700003125d8eee29f1801170e060e28717b23e80c9871552cc98d582b18b38939b5697320eaaa4f35645f29833294c301fd00ae826cb2465876e8964c919cc1acd9e3efdc322293ca86f67705135159d2e00e4d0a128e19ccd88d33101ecbb40c92b4610bd6bad3133353860286dca6ed62137b88a89ffa96c6f6169418eb5d8dd752ac3e63a4d52617b5fbe1abdd07353efe4a257d0c4e342f2e332407b0b804f294fea77c032b8247175443d331c3b2148d9e8cce1d53cbaf045e23b14b"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x6000000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[@ANYBLOB="140000004600010029bd70000400000003"], 0x14}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 49.681753236s ago: executing program 2 (id=207): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800040005000000050015"], 0x44}}, 0x4004010) 49.649309059s ago: executing program 32 (id=207): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0308010000000000240012800b0001006272696467650000140002800800040005000000050015"], 0x44}}, 0x4004010) 1.61066012s ago: executing program 0 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.341568389s ago: executing program 3 (id=536): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap$xdp(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x3000005, 0x4000010, 0xffffffffffffffff, 0x80000000) 1.260177008s ago: executing program 0 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x1000) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x60, r8, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000040)) 1.259296301s ago: executing program 3 (id=538): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x62, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, [@alu={0x4, 0x1, 0xb, 0x4, 0xa, 0x1, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xa}, @tail_call]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0xb2, &(0x7f0000000480)=""/178, 0x41100, 0x18, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xe, 0x1, 0x4}, 0x10, r2, 0x0, 0x5, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x4, 0x1, 0x8, 0x7}, {0x0, 0x3, 0x4, 0xb}, {0x3, 0x4, 0x6, 0xb}, {0x1, 0x1, 0x9, 0x2}, {0x0, 0x3, 0xe, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x22, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000a40)={{0x0, 0x2, 0x9, 0x2, 0x7, 0xe, 0x6, 0x1, 0xb, 0x401, 0x7, 0x7, 0x8, 0x5, 0xf}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000ac0)={{r4, 0x6a3e, 0xd, 0x0, 0x0, 0x7, 0xfffffffffffff885, 0x8, 0x3ff, 0x56, 0x4, 0x4a4be716, 0x8, 0x2, 0x5}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x40, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{}, {0x7d56}, @broadcast, @device_b, @initial, {0xa, 0x5}}, 0x2a, @void}}]}, 0x40}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000d40)={0x401, 0x8}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) sendto(r8, &(0x7f0000000e40)="1c287fc2b7ba1638ee3e9d2f84dd3fa2ab0ec0a3be5c090acfc65bb6a048bdcd853fdbd9411e8f15656d7c494f40e2329e09e2eb18dc8a8ec1eeb2855e1c1121c12199dd579b601d6e3a9d3d41dba441140743afdab8c7288f3d", 0x5a, 0x20004000, &(0x7f0000000ec0)=@isdn={0x22, 0x5, 0x1, 0x0, 0x4}, 0x80) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0}, &(0x7f0000002280)=0xc) lstat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() r16 = geteuid() fstat(r8, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000f40)="758cc278d4b8ee8e07671a6a2118f62e656bdadf2327e015ee83de280eb3a01eecc50bd451f10a817e490a6a4360bb7aa7b26b103e20b9e8ccd30895e35f8ee60378cef6b907ab6e0b4b094e5f8d77d10a9ba7e4f626ca80ee2d55c217c4825eba0eef628462d3ba67bdd42ebb995b5f9d5580c7afda2a62b4767e9e8b074d57edcd64f6ea99cfb17193364b49bab9db74369c01c8", 0x95}, {&(0x7f0000001000)="a379e8d6a317670c8c302df18e6f2532816daa7fa1733d35da61563dfc819050c27133e2850d4cee76f813e3169c6bb21a93da6c226ed547467e17e950316218bf7edc6f82599886fe66df169a90be759980de5cd6996954904fb19afeba11d7a821cf902826c689e771f3f11cdef47c8bb30a99be6c6622a892d6d7d42cfb41199aacd57319e5d1e4fc778268c23fdd982ab7b35b6d6909c60e49c60b7fb6d16da235656c9fda64faf8f78e19a894cbcbf73b796b2510fe504d0108b595a4dad3133e56f58d6c5d055c4cdf5ae065d6bf27a285b8b294b94910ee9049dd215d77f5af6b0f4d44c63421bf97f75e9a720c9389901b7349c7", 0xf8}, {&(0x7f0000001100)="65d7d1c1f17df82f9ee8377d6dc213e947171e8f8a315dec22642c8258c820e99ca8e6b5a4d0951c9b78ce6b046701ae0199193ee84d921146d2309ba70a9e78d59bd0b3a4a159300af100ae77f2543fbaa7ac3b6de886da9210cb16660b3e41b858b920d4db07fc27ab177b9bf299329db2db449f9896d355ee4437e84b080ad049b73f11eac65047da9a10a736afd586b18cf423d1564207a34adc27dd74246bafe8699a6285b402781e66052de67876b14399187b2bf567187c5a300eda720ba97efaa7f81daf60cd46ba868a12c5d6c0a424ab41ed7d5f6febbcd2c9e03c70073af65459", 0xe6}, {&(0x7f0000001200)="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", 0x1000}], 0x4, &(0x7f00000024c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r10, r3, r5, r8]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, r13}}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r11, r16, r18}}}], 0xa8}, 0x20000000) ioctl$KVM_GET_IRQCHIP(r10, 0xc208ae62, &(0x7f00000025c0)={0x2, 0x0, @ioapic={0x12000, 0xfff, 0x3, 0x0, 0x0, [{0x0, 0x1, 0x9e, '\x00', 0x40}, {0xc, 0xd, 0xf, '\x00', 0x4}, {0x5, 0xa4, 0x2, '\x00', 0x1}, {0x8, 0x9a, 0x2, '\x00', 0x10}, {0x3, 0x3, 0xb, '\x00', 0x8}, {0xf7, 0xb, 0x7, '\x00', 0x3}, {0x7, 0x9, 0x2, '\x00', 0x3}, {0x3, 0x81, 0x2, '\x00', 0x1}, {0x32, 0x8, 0x80, '\x00', 0xa}, {0x10, 0x7a, 0x1, '\x00', 0x80}, {0x81, 0x3, 0x6, '\x00', 0x7f}, {0x2, 0x7, 0x4, '\x00', 0x9}, {0x0, 0x5, 0xd5, '\x00', 0xb}, {0x25, 0x2, 0x8, '\x00', 0x5}, {0x7, 0x0, 0x3, '\x00', 0x9}, {0x1, 0x97, 0x45, '\x00', 0x5b}, {0xa, 0x7, 0xa, '\x00', 0x99}, {0x7, 0xb8, 0x81, '\x00', 0xd1}, {0x9, 0x81, 0x7}, {0x2, 0x2, 0x9, '\x00', 0x3}, {0x80, 0x5, 0x9, '\x00', 0xff}, {0x9, 0x33, 0xec, '\x00', 0x10}, {0xfb, 0x1, 0x4, '\x00', 0x1}, {0x0, 0x5, 0x5, '\x00', 0x8}]}}) r19 = getuid() mount$nfs4(&(0x7f0000002800)='wlan0\x00', &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f00000028c0)={[{}, {'nl80211\x00'}, {'nl80211\x00'}, {'\xff\xff\xff\xff\xff\xff'}, {'/!-'}, {'\xff\xff\xff\xff\xff\xff'}, {'}['}, {'syzkaller\x00'}, {'${}'}], [{@euid_eq={'euid', 0x3d, r17}}, {@hash}, {@fowner_eq={'fowner', 0x3d, r14}}, {@subj_type}, {@hash}, {@fowner_lt={'fowner<', r19}}]}) ioctl$UBLK_U_IO_FETCH_REQ(r10, 0xc0107520, &(0x7f0000003980)={0x3, 0x58b, 0x0, &(0x7f0000002980)=@buf_1k="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"}) r20 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) write$FUSE_CREATE_OPEN(r20, &(0x7f0000005a80)={0xa0, 0x0, 0x0, {{0x3, 0x2, 0x0, 0x724b, 0xffff, 0x9, {0x0, 0x1, 0xdb, 0x6, 0x10, 0x5, 0xd719, 0x80000001, 0x7ff, 0xc000, 0x0, r17, r18, 0x9, 0x7}}}}, 0xa0) 1.151412536s ago: executing program 3 (id=539): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) (async) listen(0xffffffffffffffff, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x9ffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d4, 0x6c}, @in=@loopback, {0xfffffffffffffffc, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x3}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000c3f735d60000000000e7ffff09008000a3286ab0803d4e3177c92aaead8b5212de9d8c8641bd9ca07dbc7b450a2f918dc335e4dfa683c7ac0bd1d1c35b12fa9e6bc9a2a83a", @ANYRES32=r0, @ANYBLOB="0000000008001f00400000001400", @ANYRESOCT=r1], 0x38}}, 0x0) (async, rerun: 32) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES64=r7], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x3f7, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0xb, './file0', './proc/mtrr'}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) (async, rerun: 32) syz_fuse_handle_req(r8, &(0x7f0000004500)="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", 0x2000, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="08000000010000", 0x7) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x100, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) (async) landlock_create_ruleset(&(0x7f0000000000)={0x1d00, 0xf7653f4f0e53a2bd, 0x2, 0x10000, 0x2, 0x1}, 0x30, 0x5) 1.081204152s ago: executing program 1 (id=540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.080963796s ago: executing program 3 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x4048004) 1.07932734s ago: executing program 0 (id=542): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="db95b2503afd80b44496a128a68909d421855fadb68487945a2fa396e9dabe7af5b6a27d282b72bfeca62962a44b67a5f6282f36a5ca41a1105b068cff87eb6235a104027fae8e96048cb91afa1866119a91b5a09ff8205b0a0063054f7dd01638c665a70e12356c3a315c9f9a0afef690a6c74d7f7bdf946197e56e525f240cc81f31d21fbdfa6a4b72893d5b183ead3a773fa9be11e81d0c0a19b0f73ca052bf4bd1781a0b1f56cffa711babbfe19ec907"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000000), 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000800)=[@free_buffer], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0xf7, 0x6, 0x0}) 961.258869ms ago: executing program 4 (id=543): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004804) memfd_create(&(0x7f0000000480)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9Y\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5#\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\x03\x00\x00\x00\x00\x00\x00\x00\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xc1\xd4\xae\x05\x17=\xd9S\xd0\xd4\x90\xcf\x9b\xdc\x8eV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xf9`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xfc*\xd2\xd0\'cZ\xbd\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3\x89d\xf0\xee\xd1\x00\x02\x81\x9d\x94\xa5\xb6\xf0\"\x8d\x94G\x84 d\xbeBL\xffS\x9eY\xf4\xb0U \xf8\xd0\x14\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\\\r\xef\xfe-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab', 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) lseek(r6, 0x28c1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2040) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000140)=0x6, 0x4) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 890.32277ms ago: executing program 3 (id=544): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) write$selinux_validatetrans(r0, 0x0, 0x79) 889.948869ms ago: executing program 1 (id=545): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 831.482752ms ago: executing program 4 (id=546): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80880) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80880) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x5, 0x4, 0x24, @remote, @local, 0x7800, 0x700, 0xa87, 0x3}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x9, r2, 0xa}, 0xc) poll(&(0x7f0000000d40)=[{r0, 0x8}], 0x1, 0x7) getpid() (async) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x700}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x10000040, 0xfffffff7, 0xf45d, 0x8, 0x81, 0x10001, 0x9, 0x20103932}, 0x0) 701.170343ms ago: executing program 4 (id=547): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ee, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e1e, 0x10000003, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001700)={0x53, 0xffffffffffffffff, 0x5a, 0x5, @buffer={0x0, 0x73, &(0x7f00000005c0)=""/115}, &(0x7f0000000640)="bf42936b6ca063b9d8e434e15d05d4283bff32b85cde1cff3f907942cd45c83b5087c41cf37135f958de552aa72b21cd069881027f4941faa6d69421a8e3ff0dc8b4cf4e5b9f7cdc48c11417c648c0baec8c049af75338cbfcaf", &(0x7f00000006c0)=""/4096, 0x148, 0x26, 0x1, &(0x7f00000016c0)}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x101800, &(0x7f0000000000)="a4b2289de2e59f4bd165cd7ce72f8334667f732c114a26e0b55abff8b590fdb0ca230c7e659ba762f872bd0989ecf32e5cb3a5ec", 0x34, &(0x7f0000000340), &(0x7f00000004c0), &(0x7f0000001780)="79af13e987e8e2584d5e7f655e562a64ef9e71c8408ba8770fd574723f7142572af970efdf52e8c4dcca749f62f8fd2ccee380a720244517f6b7928e7693322a99603061c9d38aef787c37f5976949aca5f685c91a6eea133e4e037c3d7511559a1dce5e87b4c8119ab58ef0e770301d2d548823826a6a7c69e3d137a5b9a2ece358d280c53e8aff") sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xe, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x0, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5bf0}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) 630.621294ms ago: executing program 1 (id=548): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f000000e5c0), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ppoll(&(0x7f00000003c0)=[{r3, 0x4}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) ioctl$FE_READ_SIGNAL_STRENGTH(r2, 0x80026f47, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x98;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#\xff\x00\x00\x00\x00\x00\x00\x00\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fSM\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f\x82\xad\xa3E\x140x\x16\xeb\x0e\xd2\x95V\x99&R1ZO)q\xb9\xf3\xb9\x8a\xe0\xa2\x16\x04foH\xc2\xca\xf2\xfc\xfb\xb21e\xa5\xa1YX\xf4B\x0ft\xact9\t(\xd3\xaa\x90\xd2\x7f|\x9d\x1a\x93\xe4>Y\x9b\x1c\xc6\xa6\n\x10n:\x84\xe3\n\xaa', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) 630.361046ms ago: executing program 1 (id=549): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000280)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x400}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r4, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x4, @empty, 0x4}], 0x1c) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x4}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000080)={r7, 0x5}, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') ioctl$NS_GET_PARENT(r9, 0x8004b709, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000680)={0x0, 0xfffffffffffffffa, 0x4, 0x1}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r10, @ANYBLOB, @ANYRESOCT]) move_mount(r8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 551.714595ms ago: executing program 1 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) (async) r1 = socket$inet(0x2, 0x80000, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x48) (async) socket(0x10, 0x803, 0x0) (async) syz_io_uring_setup(0x6245, &(0x7f0000000400)={0x0, 0xffffffff, 0x2008, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 64) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ecb95f847000fddbdf250700000014000200fe80000000000000008addd213320000000000002897ef23175d548f14aa0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44044) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {0x1, 0x3}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_QUANTUM={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40448d4) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) 496.531337ms ago: executing program 4 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x96066ccddc7e458b, 0x5}}}}]}, 0x40}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f00000000c0)={0x1, 0x82, 0x803ff, 0x1, 0x1}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1017}}, 0x1006) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 495.002803ms ago: executing program 1 (id=552): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) timerfd_create(0x1, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x8863}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x2) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r0, 0x0) 339.975863ms ago: executing program 4 (id=553): syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 239.010887ms ago: executing program 4 (id=554): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='on\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r6, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r7, &(0x7f0000000180)='1\x00', 0x1) dup2(r2, r3) sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') 190.92449ms ago: executing program 0 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000010c0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000010c0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) 108.186109ms ago: executing program 0 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@index_off}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 107.792687ms ago: executing program 0 (id=557): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000940)=ANY=[@ANYRESDEC=0x0], 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0), 0x1c, 0x0, 0x800) msgsnd(r0, &(0x7f00000000c0)={0x2, "2c2c0492e574b6ae995923e4f9ff9e78db"}, 0x19, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa3a080045a0003c400000001d06907800000000000100", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYRESDEC=r0], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='/dev/loop0,', 0xb) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000080)={0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 0s ago: executing program 3 (id=558): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x14) r1 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 37.898920][ T42] audit: type=1400 audit(1785714051.392:114): avc: denied { rlimitinh } for pid=5641 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.906520][ T42] audit: type=1400 audit(1785714051.392:115): avc: denied { siginh } for pid=5641 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.099413][ T42] audit: type=1400 audit(1785714052.622:116): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.160435][ T42] audit: type=1400 audit(1785714052.682:117): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:13101' (ED25519) to the list of known hosts. [ 39.630699][ T42] audit: type=1400 audit(1785714053.152:118): avc: denied { name_bind } for pid=5654 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.666641][ T42] audit: type=1400 audit(1785714053.182:119): avc: denied { execute } for pid=5655 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.678362][ T42] audit: type=1400 audit(1785714053.182:120): avc: denied { execute_no_trans } for pid=5655 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.170682][ T42] audit: type=1400 audit(1785714053.692:121): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.217135][ T42] audit: type=1400 audit(1785714053.732:122): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.281935][ T42] audit: type=1400 audit(1785714053.802:123): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.332394][ T42] audit: type=1400 audit(1785714053.852:124): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.421787][ T42] audit: type=1400 audit(1785714053.942:125): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.294056][ T5655] cgroup: Unknown subsys name 'net' [ 42.422146][ T5655] cgroup: Unknown subsys name 'cpuset' [ 42.426756][ T5655] cgroup: Unknown subsys name 'rlimit' [ 42.671059][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.434955][ T5655] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.066521][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 47.066534][ T42] audit: type=1400 audit(1785714060.582:158): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.261493][ T42] audit: type=1400 audit(1785714060.782:159): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.269747][ T42] audit: type=1400 audit(1785714060.782:160): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.277130][ T42] audit: type=1400 audit(1785714060.782:161): avc: denied { open } for pid=5735 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.284839][ T42] audit: type=1400 audit(1785714060.782:162): avc: denied { ioctl } for pid=5735 comm="syz-executor" path="socket:[4988]" dev="sockfs" ino=4988 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.326369][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.326370][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.326703][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.330113][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.333901][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.335690][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.337966][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.338090][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.339243][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.339614][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.339800][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.340037][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.341035][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.341313][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.343186][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.343848][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.344562][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.346152][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.349483][ T42] audit: type=1400 audit(1785714060.862:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.357289][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.358752][ T42] audit: type=1400 audit(1785714060.872:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.363869][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.366290][ T42] audit: type=1400 audit(1785714060.872:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.395902][ T42] audit: type=1400 audit(1785714060.872:166): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.404253][ T42] audit: type=1400 audit(1785714060.902:167): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.046611][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.049570][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.052511][ T5736] bridge_slave_0: entered allmulticast mode [ 48.056463][ T5736] bridge_slave_0: entered promiscuous mode [ 48.062759][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.065928][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.069517][ T5736] bridge_slave_1: entered allmulticast mode [ 48.073519][ T5736] bridge_slave_1: entered promiscuous mode [ 48.077474][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.080525][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.083823][ T5735] bridge_slave_0: entered allmulticast mode [ 48.087571][ T5735] bridge_slave_0: entered promiscuous mode [ 48.122422][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.125514][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.128355][ T5735] bridge_slave_1: entered allmulticast mode [ 48.131757][ T5735] bridge_slave_1: entered promiscuous mode [ 48.135173][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.138394][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.141408][ T5741] bridge_slave_0: entered allmulticast mode [ 48.145209][ T5741] bridge_slave_0: entered promiscuous mode [ 48.149914][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.153678][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.156689][ T5741] bridge_slave_1: entered allmulticast mode [ 48.161156][ T5741] bridge_slave_1: entered promiscuous mode [ 48.192086][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.226323][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.259584][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.263367][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.266222][ T5739] bridge_slave_0: entered allmulticast mode [ 48.269761][ T5739] bridge_slave_0: entered promiscuous mode [ 48.284171][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.290286][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.296183][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.300187][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.303056][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.305903][ T5739] bridge_slave_1: entered allmulticast mode [ 48.309394][ T5739] bridge_slave_1: entered promiscuous mode [ 48.314306][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.319507][ T5736] team0: Port device team_slave_0 added [ 48.345315][ T5736] team0: Port device team_slave_1 added [ 48.371170][ T5735] team0: Port device team_slave_0 added [ 48.381511][ T5741] team0: Port device team_slave_0 added [ 48.386431][ T5741] team0: Port device team_slave_1 added [ 48.390449][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.394449][ T5735] team0: Port device team_slave_1 added [ 48.419924][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.422890][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.433409][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.441867][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.480055][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.483080][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.493823][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.511379][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.514297][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.525122][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.530621][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.533595][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.544147][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.550388][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.553263][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.561679][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.567151][ T5739] team0: Port device team_slave_0 added [ 48.572105][ T5739] team0: Port device team_slave_1 added [ 48.576637][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.579861][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.590601][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.641380][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.644293][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.655007][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.670823][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.673834][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.684498][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.714663][ T5736] hsr_slave_0: entered promiscuous mode [ 48.717966][ T5736] hsr_slave_1: entered promiscuous mode [ 48.751733][ T5735] hsr_slave_0: entered promiscuous mode [ 48.755451][ T5735] hsr_slave_1: entered promiscuous mode [ 48.758743][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.761401][ T5735] Cannot create hsr debugfs directory [ 48.775907][ T5741] hsr_slave_0: entered promiscuous mode [ 48.778361][ T5741] hsr_slave_1: entered promiscuous mode [ 48.780775][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 48.782592][ T5741] Cannot create hsr debugfs directory [ 48.861140][ T5739] hsr_slave_0: entered promiscuous mode [ 48.863472][ T5739] hsr_slave_1: entered promiscuous mode [ 48.865696][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.867469][ T5739] Cannot create hsr debugfs directory [ 49.123873][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.131130][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.133844][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.138062][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.143878][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.148482][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.151227][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.155009][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.217451][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.223333][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.226940][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.233224][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.235906][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.240932][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.243631][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.247235][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.320667][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.326886][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.331365][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.337172][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.340619][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.344911][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.347667][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.352020][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.398778][ T5747] Bluetooth: hci2: command tx timeout [ 49.398785][ T64] Bluetooth: hci0: command tx timeout [ 49.403869][ T5742] Bluetooth: hci1: command tx timeout [ 49.409548][ T5747] Bluetooth: hci3: command tx timeout [ 49.442390][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.450225][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.453963][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.460143][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.469386][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.473958][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.476724][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.481303][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.498168][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.540282][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.544356][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.563915][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.567428][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.590547][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.593696][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.610651][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.635164][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.638488][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.655106][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.660366][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.662667][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.693490][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.713438][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.720343][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.731432][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.733881][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.741538][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.743830][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.755788][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.768628][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.770941][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.779892][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.782684][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.949749][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.997313][ T5736] veth0_vlan: entered promiscuous mode [ 50.016353][ T5736] veth1_vlan: entered promiscuous mode [ 50.044875][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.053939][ T5736] veth0_macvtap: entered promiscuous mode [ 50.070220][ T5736] veth1_macvtap: entered promiscuous mode [ 50.088558][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.097279][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.116037][ T5735] veth0_vlan: entered promiscuous mode [ 50.130669][ T5735] veth1_vlan: entered promiscuous mode [ 50.142164][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.159773][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.197799][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.201285][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.225749][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.229663][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.230643][ T5735] veth0_macvtap: entered promiscuous mode [ 50.241400][ T5735] veth1_macvtap: entered promiscuous mode [ 50.265471][ T5741] veth0_vlan: entered promiscuous mode [ 50.272278][ T5739] veth0_vlan: entered promiscuous mode [ 50.276815][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.284213][ T5741] veth1_vlan: entered promiscuous mode [ 50.287809][ T5736] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.289471][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.305171][ T5739] veth1_vlan: entered promiscuous mode [ 50.351201][ T5739] veth0_macvtap: entered promiscuous mode [ 50.362037][ T5741] veth0_macvtap: entered promiscuous mode [ 50.370284][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.384041][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.389766][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.397950][ T5741] veth1_macvtap: entered promiscuous mode [ 50.404349][ T5739] veth1_macvtap: entered promiscuous mode [ 50.408284][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.431565][ T5887] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 50.441779][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.445352][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.450648][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.464206][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.470086][ T5887] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 50.476414][ T5887] hwsim0: entered promiscuous mode [ 50.481851][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.517724][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.526515][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.529506][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.548790][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553448][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598888][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.652442][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.658368][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.659486][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.692373][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.700006][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.743120][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.747118][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.770060][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.775699][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.778814][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778896][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778915][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778933][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778951][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778969][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.778987][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.804907][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.873354][ T5910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8'. [ 50.962836][ T5919] Cannot find add_set index 0 as target [ 50.989669][ T5923] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.993720][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.997327][ T5923] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.999273][ T5927] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.002178][ T5923] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 51.010595][ T5923] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 51.013923][ T5923] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.025223][ T5747] Bluetooth: Frame is too long (len 12, expected len 4) [ 51.029476][ T5927] Cannot find set identified by id 0 to match [ 51.033861][ T5923] overlayfs: conflicting lowerdir path [ 51.123563][ T5932] syzkaller0: entered promiscuous mode [ 51.126021][ T5932] syzkaller0: entered allmulticast mode [ 51.479500][ T5742] Bluetooth: hci2: command tx timeout [ 51.479581][ T5095] Bluetooth: hci1: command tx timeout [ 51.482269][ T5747] Bluetooth: hci3: command tx timeout [ 51.484345][ T64] Bluetooth: hci0: command tx timeout [ 51.488342][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.647789][ T5837] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.663769][ T5837] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 51.667069][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.669670][ T5837] usb 7-1: Product: syz [ 51.671026][ T5837] usb 7-1: Manufacturer: syz [ 51.672498][ T5837] usb 7-1: SerialNumber: syz [ 51.701661][ T5837] symbolserial 7-1:1.0: symbol converter detected [ 51.751920][ T5837] usb 7-1: symbol converter now attached to ttyUSB0 [ 51.925888][ T5822] usb 7-1: USB disconnect, device number 2 [ 51.983345][ T5822] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 51.987120][ T5822] symbolserial 7-1:1.0: device disconnected [ 52.176227][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 52.176239][ T42] audit: type=1400 audit(1785714065.692:245): avc: denied { mount } for pid=5958 comm="syz.1.16" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.189130][ T42] audit: type=1400 audit(1785714065.712:246): avc: denied { setopt } for pid=5958 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.203327][ T5919] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 52.228962][ T42] audit: type=1400 audit(1785714065.742:247): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.246377][ T42] audit: type=1400 audit(1785714065.762:248): avc: denied { create } for pid=5964 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.246863][ T5963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.257268][ T42] audit: type=1400 audit(1785714065.762:249): avc: denied { setopt } for pid=5964 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.268661][ T42] audit: type=1400 audit(1785714065.762:250): avc: denied { getopt } for pid=5964 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.281455][ T42] audit: type=1400 audit(1785714065.762:251): avc: denied { connect } for pid=5964 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.291179][ T42] audit: type=1400 audit(1785714065.762:252): avc: denied { name_connect } for pid=5964 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.300139][ T42] audit: type=1400 audit(1785714065.792:253): avc: denied { mmap_zero } for pid=5966 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 52.306363][ T42] audit: type=1400 audit(1785714065.802:254): avc: denied { create } for pid=5966 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 52.317645][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 52.326495][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.327527][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 52.330399][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.337465][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.340691][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.627570][ T5989] rdma_op ffff88802727a1f0 conn xmit_rdma 0000000000000000 [ 52.631190][ T1351] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.790226][ T1351] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.794683][ T1351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.799781][ T1351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.802902][ T1351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.806968][ T1351] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.810381][ T1351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.814419][ T1351] usb 6-1: config 0 descriptor?? [ 52.865454][ T5992] syzkaller0: entered promiscuous mode [ 52.867214][ T5992] syzkaller0: entered allmulticast mode [ 53.302097][ T1351] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 53.568517][ T5747] Bluetooth: hci3: command tx timeout [ 53.570859][ T5742] Bluetooth: hci2: command tx timeout [ 53.573216][ T5095] Bluetooth: hci0: command 0x040f tx timeout [ 54.368276][ T5095] Bluetooth: hci1: command tx timeout [ 55.138578][ T29] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 55.267387][ T5967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.429731][ T6019] netlink: 'syz.2.32': attribute type 21 has an invalid length. [ 55.432344][ T6019] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.435101][ T6019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.437841][ T6019] IPv6: NLM_F_CREATE should be set when creating new route [ 55.440167][ T6019] IPv6: NLM_F_CREATE should be set when creating new route [ 55.442462][ T6019] IPv6: NLM_F_CREATE should be set when creating new route [ 55.504738][ T6034] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 55.507609][ T6034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.514389][ T6034] vhci_hcd vhci_hcd.0: Device attached [ 55.519357][ T6035] vhci_hcd: unknown pdu 2 [ 55.523171][ T13] vhci_hcd vhci_hcd.0: stop threads [ 55.526688][ T13] vhci_hcd vhci_hcd.0: release socket [ 55.529473][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 55.638232][ T5095] Bluetooth: hci0: command 0x040f tx timeout [ 55.640149][ T5747] Bluetooth: hci2: command tx timeout [ 55.641259][ T64] Bluetooth: hci3: command tx timeout [ 55.689311][ T6043] Unsupported ieee802154 address type: 0 [ 55.729495][ T6045] process 'syz.3.40' launched './file0' with NULL argv: empty string added [ 55.737002][ T6045] syzkaller0: entered promiscuous mode [ 55.739710][ T6045] syzkaller0: entered allmulticast mode [ 55.740071][ T6047] sock: sock_set_timeout: `syz.2.41' (pid 6047) tries to set negative timeout [ 55.791741][ T6049] loop5: detected capacity change from 0 to 7 [ 55.797840][ T6049] Dev loop5: unable to read RDB block 7 [ 55.800152][ T6049] loop5: unable to read partition table [ 55.802912][ T6049] loop5: partition table beyond EOD, truncated [ 55.805690][ T6049] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 55.895803][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 56.081842][ T55] usb 6-1: USB disconnect, device number 2 [ 56.100895][ T6092] syzkaller0: entered promiscuous mode [ 56.102699][ T6092] syzkaller0: entered allmulticast mode [ 56.230059][ T6101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.240585][ T6101] ======================================================= [ 56.240585][ T6101] WARNING: The mand mount option has been deprecated and [ 56.240585][ T6101] and is ignored by this kernel. Remove the mand [ 56.240585][ T6101] option from the mount to silence this warning. [ 56.240585][ T6101] ======================================================= [ 56.274666][ T6101] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 56.277897][ T6101] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 56.370636][ T6119] tipc: Can't bind to reserved service type 2 [ 56.425942][ T6125] Zero length message leads to an empty skb [ 56.603548][ T6132] sd 0:0:0:0: PR command failed: 1026 [ 56.605457][ T6132] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 56.608509][ T6132] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 56.618988][ T6132] capability: warning: `syz.1.65' uses 32-bit capabilities (legacy support in use) [ 56.779021][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.845806][ T6146] netlink: 'syz.0.70': attribute type 39 has an invalid length. [ 56.860770][ T6146] hsr_slave_0 (unregistering): left promiscuous mode [ 56.938265][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 56.942766][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.946674][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.950048][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.952219][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 56.955946][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.963133][ T29] usb 7-1: config 0 descriptor?? [ 57.037961][ T6158] netlink: 'syz.1.74': attribute type 39 has an invalid length. [ 57.116105][ T6160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.75'. [ 57.185493][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 57.185505][ T42] audit: type=1400 audit(1785714070.702:348): avc: denied { read write } for pid=6167 comm="syz.3.77" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.196207][ T42] audit: type=1400 audit(1785714070.712:349): avc: denied { open } for pid=6167 comm="syz.3.77" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.204449][ T42] audit: type=1400 audit(1785714070.722:350): avc: denied { mount } for pid=6170 comm="syz.0.78" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.216059][ T42] audit: type=1400 audit(1785714070.722:351): avc: denied { search } for pid=6170 comm="syz.0.78" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.223016][ T42] audit: type=1400 audit(1785714070.722:352): avc: denied { search } for pid=6170 comm="syz.0.78" name="usb_gadget" dev="configfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.230465][ T42] audit: type=1400 audit(1785714070.722:353): avc: denied { write search } for pid=6170 comm="syz.0.78" name="usb_gadget" dev="configfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.238062][ T42] audit: type=1400 audit(1785714070.722:354): avc: denied { add_name } for pid=6170 comm="syz.0.78" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.246212][ T42] audit: type=1400 audit(1785714070.722:355): avc: denied { ioctl } for pid=6167 comm="syz.3.77" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.255371][ T42] audit: type=1400 audit(1785714070.722:356): avc: denied { create } for pid=6170 comm="syz.0.78" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 57.261961][ T42] audit: type=1400 audit(1785714070.732:357): avc: denied { search } for pid=6170 comm="syz.0.78" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.343026][ T6190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.85'. [ 57.351637][ T6186] bond1: ARP target 9.0.0.0 is already present [ 57.353902][ T6186] bond1: option arp_ip_target: invalid value (9) [ 57.357537][ T6186] bond1 (unregistering): Released all slaves [ 57.382240][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 57.384540][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 57.386672][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 57.390064][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 57.392858][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 57.395881][ T29] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 57.592490][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 57.595255][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 57.606950][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 57.610885][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 57.629210][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.633899][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.637736][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.644839][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.680706][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.690362][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 57.713353][ T6214] ip6gretap1: entered promiscuous mode [ 57.715490][ T6214] ip6gretap1: entered allmulticast mode [ 57.717802][ T29] usb 7-1: USB disconnect, device number 3 [ 57.720355][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 57.723052][ T64] Bluetooth: hci0: command 0x040f tx timeout [ 57.746301][ T6222] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 57.748447][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 57.752297][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 57.757407][ T6222] vhci_hcd vhci_hcd.0: port 0 already used [ 57.762068][ T6223] vhci_hcd: connection closed [ 57.763505][ T13] vhci_hcd vhci_hcd.0: stop threads [ 57.767906][ T13] vhci_hcd vhci_hcd.0: release socket [ 57.770959][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 57.774449][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 57.777230][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 57.781447][ T6228] geneve0: entered promiscuous mode [ 57.840728][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.845058][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 57.849235][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 57.853298][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 57.857455][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 57.862446][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 57.866478][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 57.870637][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 57.874655][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 57.880457][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 57.884768][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 57.888890][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 57.896572][ T55] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 57.900455][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.903765][ T55] usb 6-1: Product: syz [ 57.905488][ T55] usb 6-1: Manufacturer: syz [ 57.907399][ T55] usb 6-1: SerialNumber: syz [ 57.914364][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.917696][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.921054][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.924245][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.927354][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.930594][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.933610][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.936646][ T6197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.942816][ T55] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 57.948089][ T55] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 57.952943][ T55] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 57.957681][ T55] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 57.962739][ T55] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 57.966041][ T55] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 57.969514][ T55] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 57.974286][ T55] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 58.270093][ T1483] usb 6-1: USB disconnect, device number 3 [ 58.282903][ T1483] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 58.295544][ T1483] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 58.304306][ T1483] keyspan 6-1:1.0: device disconnected [ 58.804097][ T6294] tmpfs: Unknown parameter 'UsrqUota' [ 58.846386][ T6300] nft_compat: unsupported protocol 0 [ 58.955663][ T6307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.069710][ T6312] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 59.158292][ T6325] /dev/sg0: Can't lookup blockdev [ 59.223448][ T6329] mmap: syz.2.125 (6329) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.302513][ T6337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.372766][ T6342] autofs: Bad value for 'fd' [ 59.551566][ T6357] netlink: 'syz.0.135': attribute type 8 has an invalid length. [ 59.559015][ T6357] bond0: entered promiscuous mode [ 59.560699][ T6357] bond_slave_0: entered promiscuous mode [ 59.562699][ T6357] bond_slave_1: entered promiscuous mode [ 59.567339][ T6357] gretap0: entered promiscuous mode [ 59.571276][ T6357] team0: entered promiscuous mode [ 59.572995][ T6357] team_slave_0: entered promiscuous mode [ 59.574891][ T6357] team_slave_1: entered promiscuous mode [ 59.578789][ T6357] hsr1: entered promiscuous mode [ 59.587532][ T6359] block nbd3: not configured, cannot reconfigure [ 59.927879][ T6380] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 60.227965][ T6397] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 60.230719][ T6397] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 60.296475][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.448300][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 60.453139][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 60.459933][ T10] usb 8-1: string descriptor 0 read error: -22 [ 60.462833][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 60.465799][ T10] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 60.477177][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 60.480109][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 60.482465][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 60.489919][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.493696][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 60.496472][ T10] usb 8-1: media controller created [ 60.499571][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.502730][ T10] dw2102: i2c transfer failed. [ 60.504844][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.506674][ T10] dw2102: i2c transfer failed. [ 60.509858][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.511728][ T10] dw2102: i2c transfer failed. [ 60.513324][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.515146][ T10] dw2102: i2c transfer failed. [ 60.516689][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.520563][ T10] dw2102: i2c transfer failed. [ 60.522590][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 60.524673][ T10] dw2102: i2c transfer failed. [ 60.526652][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 60.540996][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.558618][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 60.561538][ T10] dw2102: command 0x0e transfer failed. [ 60.565380][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 60.567995][ T10] dw2102: command 0x0e transfer failed. [ 60.725635][ T6428] fuse: Bad value for 'user_id' [ 60.727858][ T6428] fuse: Bad value for 'user_id' [ 60.766022][ T6429] evm: overlay not supported [ 60.878582][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 60.883854][ T10] dw2102: command 0x0e transfer failed. [ 60.886312][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 60.888871][ T10] dw2102: command 0x0e transfer failed. [ 60.890686][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 60.892694][ T10] dw2102: command 0x51 transfer failed. [ 60.897947][ T6392] dvb-usb: bulk message failed: -22 (4/0) [ 60.901904][ T6392] dw2102: i2c transfer failed. [ 60.930533][ T10] DVB: Unable to find symbol ds3000_attach() [ 60.932618][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 60.956862][ T6448] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 60.988564][ T10] rc_core: IR keymap rc-su3000 not found [ 60.994900][ T10] Registered IR keymap rc-empty [ 61.002339][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 61.016793][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input6 [ 61.032706][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 61.035721][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 61.039795][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 61.054222][ T10] usb 8-1: USB disconnect, device number 2 [ 61.063101][ T40] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 61.084012][ T6458] tmpfs: Cannot disable swap on remount [ 61.087986][ T6458] syzkaller0: entered promiscuous mode [ 61.089836][ T6458] syzkaller0: entered allmulticast mode [ 61.117082][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 61.230990][ T40] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 61.233826][ T40] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.237061][ T40] usb 6-1: config 0 has no interfaces? [ 61.238951][ T40] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 61.242959][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.247414][ T40] usb 6-1: config 0 descriptor?? [ 61.294081][ T6471] loop5: detected capacity change from 0 to 2640 [ 61.312508][ T6471] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 61.315328][ T6471] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 61.319027][ T6471] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 61.321904][ T6471] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 61.324707][ T6471] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 61.327368][ T6471] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 61.330869][ T6471] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 61.334071][ T6471] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 61.336800][ T6471] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 61.339634][ T6471] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 61.462223][ T40] usb 6-1: string descriptor 0 read error: -71 [ 61.466163][ T40] usb 6-1: USB disconnect, device number 4 [ 61.492186][ T6489] netlink: 'syz.2.171': attribute type 11 has an invalid length. [ 61.573848][ T6496] f2fs: block size(16384) > page size(4096) not supported by filesystem [ 61.579613][ T6496] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 61.583747][ T6496] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 61.586492][ T6496] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 61.589492][ T6496] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 61.639048][ T6499] veth1_to_bridge: entered allmulticast mode [ 61.655890][ T6501] program syz.0.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.664147][ T6501] __nla_validate_parse: 4 callbacks suppressed [ 61.664163][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.178'. [ 61.693634][ T6499] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 61.698043][ T6499] syz_tun: entered allmulticast mode [ 61.762000][ T6508] sctp: [Deprecated]: syz.3.181 (pid 6508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.762000][ T6508] Use struct sctp_sack_info instead [ 61.794436][ T6498] veth1_to_bridge: left allmulticast mode [ 61.805613][ T6512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6512 comm=syz.3.182 [ 61.842953][ T6518] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 61.891164][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 62.161548][ T6549] syzkaller0: entered promiscuous mode [ 62.163370][ T6549] syzkaller0: entered allmulticast mode [ 62.225699][ T6548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6548 comm=syz.1.196 [ 62.230718][ T6548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6548 comm=syz.1.196 [ 62.234393][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.198'. [ 62.237721][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 62.240691][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.198'. [ 62.283821][ T42] kauditd_printk_skb: 145 callbacks suppressed [ 62.283834][ T42] audit: type=1400 audit(2000000001.549:503): avc: denied { create } for pid=6561 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.293757][ T42] audit: type=1400 audit(2000000001.549:504): avc: denied { ioctl } for pid=6561 comm="syz.3.200" path="socket:[12834]" dev="sockfs" ino=12834 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.302724][ T42] audit: type=1400 audit(2000000001.549:505): avc: denied { setopt } for pid=6561 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.363767][ T6556] syz_tun (unregistering): left allmulticast mode [ 62.365590][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 62.406206][ T42] audit: type=1400 audit(2000000001.669:506): avc: denied { read } for pid=6571 comm="syz.0.202" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.416874][ T42] audit: type=1400 audit(2000000001.669:507): avc: denied { open } for pid=6571 comm="syz.0.202" path="/75/config" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.425567][ T42] audit: type=1400 audit(2000000001.669:508): avc: denied { bind } for pid=6570 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.433021][ T42] audit: type=1400 audit(2000000001.669:509): avc: denied { listen } for pid=6570 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.440500][ T42] audit: type=1400 audit(2000000001.679:510): avc: denied { accept } for pid=6570 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.462042][ T42] audit: type=1400 audit(2000000001.729:511): avc: denied { connect } for pid=6570 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.513006][ T6576] syzkaller1: entered promiscuous mode [ 62.514785][ T6576] syzkaller1: entered allmulticast mode [ 62.683509][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.732769][ T42] audit: type=1400 audit(2000000001.999:512): avc: denied { execute } for pid=6589 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.751751][ T6592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62208 sclass=netlink_route_socket pid=6592 comm=syz.3.209 [ 62.756085][ T6593] overlayfs: upper fs does not support file handles, falling back to index=off. [ 62.760192][ T6593] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 62.814947][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.845687][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.856180][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.867313][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.868023][ T224] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.871773][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.878544][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.889737][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.984469][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.003864][ T6614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.213'. [ 63.109487][ T6624] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 63.111834][ T6624] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 63.114507][ T6624] vhci_hcd vhci_hcd.0: Device attached [ 63.119553][ T6627] vhci_hcd: connection closed [ 63.121470][ T5786] vhci_hcd vhci_hcd.0: stop threads [ 63.128077][ T5786] vhci_hcd vhci_hcd.0: release socket [ 63.130412][ T5786] vhci_hcd vhci_hcd.0: disconnect device [ 63.155985][ T13] bridge_slave_1: left allmulticast mode [ 63.158801][ T13] bridge_slave_1: left promiscuous mode [ 63.163095][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.172785][ T13] bridge_slave_0: left allmulticast mode [ 63.174827][ T13] bridge_slave_0: left promiscuous mode [ 63.177249][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.305668][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.313877][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.319011][ T13] bond0 (unregistering): Released all slaves [ 63.509221][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.566602][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.575769][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.578970][ T6598] bridge_slave_0: entered allmulticast mode [ 63.582552][ T6598] bridge_slave_0: entered promiscuous mode [ 63.617274][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.620987][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.624154][ T6598] bridge_slave_1: entered allmulticast mode [ 63.631959][ T6598] bridge_slave_1: entered promiscuous mode [ 63.652689][ T6658] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 63.656386][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT(full) [ 63.656413][ T6658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.656425][ T6658] Call Trace: [ 63.656432][ T6658] [ 63.656440][ T6658] dump_stack_lvl+0x100/0x190 [ 63.656588][ T6658] sysfs_warn_dup.cold+0x1c/0x28 [ 63.656625][ T6658] sysfs_create_dir_ns+0x24b/0x2b0 [ 63.656676][ T6658] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 63.656693][ T6658] ? find_held_lock+0x2b/0x80 [ 63.656732][ T6658] ? kobject_add_internal+0x25f/0x930 [ 63.656823][ T6658] ? kobject_add_internal+0x25f/0x930 [ 63.656852][ T6658] ? class_dir_child_ns_type+0xd/0x60 [ 63.656932][ T6658] kobject_add_internal+0x2c8/0x930 [ 63.656965][ T6658] kobject_add+0x16a/0x1e0 [ 63.656991][ T6658] ? __pfx_kobject_add+0x10/0x10 [ 63.657016][ T6658] ? get_device_parent+0x1b3/0x4c0 [ 63.657049][ T6658] ? kobject_put+0xb9/0x640 [ 63.657080][ T6658] device_add+0x294/0x1970 [ 63.657105][ T6658] ? lockdep_init_map_type+0x5c/0x250 [ 63.657127][ T6658] ? __pfx_device_add+0x10/0x10 [ 63.657150][ T6658] ? lockdep_init_map_type+0x5c/0x250 [ 63.657170][ T6658] ? __init_waitqueue_head+0xca/0x150 [ 63.657196][ T6658] tty_register_device_attr+0x388/0x7f0 [ 63.657242][ T6658] ? lockdep_init_map_type+0x5c/0x250 [ 63.657265][ T6658] ? __pfx_tty_register_device_attr+0x10/0x10 [ 63.657292][ T6658] ? tty_port_init+0x156/0x1c0 [ 63.657324][ T6658] gsm_activate_mux+0x155/0x2a0 [ 63.657349][ T6658] gsmld_ioctl+0xbbc/0x15c0 [ 63.657379][ T6658] ? kasan_quarantine_put+0x104/0x240 [ 63.657407][ T6658] ? __pfx_gsmld_ioctl+0x10/0x10 [ 63.657436][ T6658] ? __ldsem_down_read_nested+0xf3/0x890 [ 63.657467][ T6658] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 63.657504][ T6658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.657529][ T6658] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 63.657550][ T6658] ? __pfx_gsmld_ioctl+0x10/0x10 [ 63.657575][ T6658] tty_ioctl+0x11b4/0x1640 [ 63.657596][ T6658] ? __pfx_tty_ioctl+0x10/0x10 [ 63.657617][ T6658] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.657694][ T6658] ? __fget_files+0x215/0x3d0 [ 63.657720][ T6658] ? hook_file_ioctl_common+0x140/0x440 [ 63.657756][ T6658] ? selinux_file_ioctl+0x13b/0x290 [ 63.657785][ T6658] ? selinux_file_ioctl+0xb6/0x290 [ 63.657813][ T6658] ? __pfx_tty_ioctl+0x10/0x10 [ 63.657835][ T6658] __x64_sys_ioctl+0x18e/0x210 [ 63.657865][ T6658] do_syscall_64+0x115/0x870 [ 63.657889][ T6658] ? clear_bhb_loop+0x40/0x90 [ 63.657913][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.657933][ T6658] RIP: 0033:0x7fbaefd9e019 [ 63.657949][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.657964][ T6658] RSP: 002b:00007fbaf0ccd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.657992][ T6658] RAX: ffffffffffffffda RBX: 00007fbaf0026090 RCX: 00007fbaefd9e019 [ 63.658004][ T6658] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 63.658015][ T6658] RBP: 00007fbaefe3500c R08: 0000000000000000 R09: 0000000000000000 [ 63.658026][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.658037][ T6658] R13: 00007fbaf0026128 R14: 00007fbaf0026090 R15: 00007ffca3305e38 [ 63.658063][ T6658] [ 63.658087][ T6658] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 63.684161][ T6661] openvswitch: netlink: IP tunnel dst address not specified [ 63.835896][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.841005][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.868519][ T13] hsr_slave_0: left promiscuous mode [ 63.869035][ T13] hsr_slave_1: left promiscuous mode [ 63.869448][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.869467][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.871636][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.871648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.883509][ T13] veth1_macvtap: left promiscuous mode [ 63.883569][ T13] veth0_macvtap: left promiscuous mode [ 63.883642][ T13] veth1_vlan: left promiscuous mode [ 63.883682][ T13] veth0_vlan: left promiscuous mode [ 63.979803][ T6675] 9p: Bad value for 'wfdno' [ 64.155507][ T13] team0 (unregistering): Port device team_slave_1 removed [ 64.175214][ T13] team0 (unregistering): Port device team_slave_0 removed [ 64.249878][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.277480][ T6598] team0: Port device team_slave_0 added [ 64.312618][ T6598] team0: Port device team_slave_1 added [ 64.362332][ T6690] syzkaller1: entered promiscuous mode [ 64.364079][ T6690] syzkaller1: entered allmulticast mode [ 64.369198][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.372196][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.383334][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.389433][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.393548][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.404201][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.484560][ T6598] hsr_slave_0: entered promiscuous mode [ 64.489147][ T6598] hsr_slave_1: entered promiscuous mode [ 64.541772][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.590408][ T5742] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 64.724092][ T6598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.730397][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.733223][ T6598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.744571][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.747252][ T6598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.760929][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.763688][ T6598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.769520][ T6598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.802688][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 64.843095][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.857964][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.864340][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.866618][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.876310][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.878444][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.919243][ T5095] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 64.920941][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 64.931023][ T64] Bluetooth: hci1: command tx timeout [ 65.001010][ T5526] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.158252][ T5526] usb 6-1: Using ep0 maxpacket: 8 [ 65.163317][ T5526] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 65.166292][ T5526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.172988][ T5526] pvrusb2: Hardware description: Terratec Grabster AV400 [ 65.175459][ T5526] pvrusb2: ********** [ 65.176752][ T5526] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 65.180837][ T5526] pvrusb2: Important functionality might not be entirely working. [ 65.183328][ T5526] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 65.187037][ T5526] pvrusb2: ********** [ 65.199223][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.385817][ T2521] pvrusb2: Invalid write control endpoint [ 65.420712][ T6598] veth0_vlan: entered promiscuous mode [ 65.436111][ T6598] veth1_vlan: entered promiscuous mode [ 65.455501][ T2521] pvrusb2: Invalid write control endpoint [ 65.458443][ T2521] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 65.464762][ T6598] veth0_macvtap: entered promiscuous mode [ 65.467312][ T2521] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 65.470355][ T2521] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 65.471979][ T6598] veth1_macvtap: entered promiscuous mode [ 65.473827][ T2521] pvrusb2: Device being rendered inoperable [ 65.475811][ T2521] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 65.482814][ T2521] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 65.486688][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.491335][ T2521] pvrusb2: Attached sub-driver cx25840 [ 65.493663][ T2521] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 65.496726][ T2521] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 65.506041][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.539489][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.543377][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.546132][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.551002][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.586728][ T6712] pvrusb2: Attempted to execute control transfer when device not ok [ 65.591857][ T29] usb 6-1: USB disconnect, device number 5 [ 66.998203][ T64] Bluetooth: hci1: command tx timeout [ 67.056414][ T6790] capability: warning: `syz.1.248' uses deprecated v2 capabilities in a way that may be insecure [ 67.081807][ T6790] gfs2: error -5 reading superblock [ 67.493130][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 67.493148][ T42] audit: type=1400 audit(2000000006.759:550): avc: denied { write } for pid=6803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.542312][ T42] audit: type=1400 audit(2000000006.809:551): avc: denied { write } for pid=6806 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.615129][ T42] audit: type=1400 audit(2000000006.879:552): avc: denied { write } for pid=6808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.655805][ T42] audit: type=1400 audit(2000000006.919:553): avc: denied { write } for pid=6811 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.730586][ T42] audit: type=1400 audit(2000000006.999:554): avc: denied { write } for pid=6813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.789199][ T42] audit: type=1400 audit(2000000007.059:555): avc: denied { write } for pid=6816 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.450665][ T6771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.517548][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.523577][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.562265][ T42] audit: type=1400 audit(2000000007.829:556): avc: denied { map } for pid=6827 comm="syz.3.255" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.575005][ T42] audit: type=1400 audit(2000000007.849:557): avc: denied { call } for pid=6827 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.578884][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.589216][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.613602][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 68.615876][ T42] audit: type=1400 audit(2000000007.879:558): avc: denied { mounton } for pid=6598 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.762597][ T6838] affs: No valid root block on device nullb0 [ 68.816306][ T42] audit: type=1400 audit(2000000008.079:559): avc: denied { bind } for pid=6837 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.928245][ T1351] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.058274][ T1351] usb 9-1: device descriptor read/64, error -71 [ 69.078244][ T64] Bluetooth: hci1: command tx timeout [ 69.298277][ T1351] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 69.399456][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 69.428228][ T1351] usb 9-1: device descriptor read/64, error -71 [ 69.538587][ T1351] usb usb9-port1: attempt power cycle [ 69.878874][ T1351] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 69.898933][ T1351] usb 9-1: device descriptor read/8, error -71 [ 70.138227][ T1351] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 70.158835][ T1351] usb 9-1: device descriptor read/8, error -71 [ 70.269234][ T1351] usb usb9-port1: unable to enumerate USB device [ 71.159358][ T64] Bluetooth: hci1: command tx timeout [ 71.332931][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.336941][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.639143][ T42] audit: type=1400 audit(2000000011.899:560): avc: denied { write } for pid=6850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.687617][ T42] audit: type=1400 audit(2000000011.949:561): avc: denied { write } for pid=6853 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.330493][ T42] audit: type=1400 audit(2000000014.599:562): avc: denied { write } for pid=6855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.384137][ T42] audit: type=1400 audit(2000000014.649:563): avc: denied { write } for pid=6858 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.704625][ T42] audit: type=1400 audit(2000000014.969:564): avc: denied { write } for pid=6861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.750744][ T42] audit: type=1400 audit(2000000015.019:565): avc: denied { write } for pid=6864 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.971516][ T42] audit: type=1400 audit(2000000015.239:566): avc: denied { write } for pid=6867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.030423][ T42] audit: type=1400 audit(2000000015.299:567): avc: denied { write } for pid=6870 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.122769][ T42] audit: type=1400 audit(2000000015.389:568): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.182816][ T42] audit: type=1400 audit(2000000015.449:569): avc: denied { write } for pid=6876 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.582078][ T34] cfg80211: failed to load regulatory.db [ 82.223650][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 82.223665][ T42] audit: type=1400 audit(2000000021.489:572): avc: denied { getopt } for pid=6886 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.233261][ T42] audit: type=1400 audit(2000000021.499:573): avc: denied { mounton } for pid=6886 comm="syz.0.259" path="/98/file0" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 82.278066][ T42] audit: type=1800 audit(2000000021.539:574): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.259" name="/" dev="fuse" ino=1 res=0 errno=0 [ 82.285859][ T42] audit: type=1400 audit(2000000021.549:575): avc: denied { map } for pid=6903 comm="syz.4.264" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.306327][ T6914] block2mtd: illegal erase size [ 82.307573][ T6887] XFS (loop0): SB validate failed with error -5. [ 82.558396][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.708478][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 82.711477][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.714690][ T10] usb 8-1: config 0 has no interfaces? [ 82.716379][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 82.719328][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.723406][ T10] usb 8-1: config 0 descriptor?? [ 82.930110][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.935619][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.939450][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.942496][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.946103][ T10] usb 8-1: USB disconnect, device number 3 [ 83.106227][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 83.248371][ T6925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6925 comm=syz.0.268 [ 83.407812][ T6923] kvm_intel: kvm [6921]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b [ 83.420282][ T6923] kvm: kvm [6921]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06 [ 83.433461][ T6923] kvm: kvm [6921]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e [ 83.523727][ T6929] trusted_key: syz.3.270 sent an empty control message without MSG_MORE. [ 83.561713][ T6929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=6929 comm=syz.3.270 [ 83.953894][ T6938] netlink: 48 bytes leftover after parsing attributes in process `syz.3.272'. [ 85.231149][ T6891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.277855][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 85.283100][ T42] audit: type=1400 audit(2000000024.549:576): avc: denied { open } for pid=6942 comm="syz.1.274" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.292534][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.292629][ T6947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.297361][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 85.297446][ T42] audit: type=1400 audit(2000000024.549:577): avc: denied { name_bind } for pid=6945 comm="syz.3.276" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.297472][ T42] audit: type=1400 audit(2000000024.559:578): avc: denied { ioctl } for pid=6942 comm="syz.1.274" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.312008][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 85.327039][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 85.330877][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 85.349299][ T6947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.276'. [ 85.419983][ T6947] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 85.477003][ T6965] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.493537][ T6965] netlink: 14 bytes leftover after parsing attributes in process `syz.3.279'. [ 85.621811][ T6977] netlink: 'syz.4.281': attribute type 4 has an invalid length. [ 85.624996][ T6977] netlink: 152 bytes leftover after parsing attributes in process `syz.4.281'. [ 85.634007][ T6977] .`: renamed from bond0 (while UP) [ 85.728229][ T848] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.890741][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.895263][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.899271][ T848] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.902936][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.911301][ T848] usb 6-1: config 0 descriptor?? [ 88.505838][ T6971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.597210][ T42] audit: type=1400 audit(2000000027.859:579): avc: denied { name_bind } for pid=6993 comm="syz.4.286" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.607778][ T6994] ehci-pci 0000:00:1d.7: remove, state 1 [ 88.615773][ T6994] usb usb2: USB disconnect, device number 1 [ 88.619363][ T6994] usb 2-1: USB disconnect, device number 2 [ 88.674973][ T6998] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.720563][ T42] audit: type=1400 audit(2000000027.989:580): avc: denied { write } for pid=6993 comm="syz.4.286" name="functions" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.742672][ T42] audit: type=1400 audit(2000000028.009:581): avc: denied { write } for pid=6993 comm="syz.4.286" name="functions" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.750365][ T42] audit: type=1400 audit(2000000028.009:582): avc: denied { remove_name } for pid=6993 comm="syz.4.286" name="geth.usb0" dev="configfs" ino=14284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.762506][ T42] audit: type=1400 audit(2000000028.009:583): avc: denied { rmdir } for pid=6993 comm="syz.4.286" name="geth.usb0" dev="configfs" ino=14284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.770998][ T42] audit: type=1400 audit(2000000028.039:584): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.832093][ T42] audit: type=1400 audit(2000000028.099:585): avc: denied { setopt } for pid=7001 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.846243][ T42] audit: type=1400 audit(2000000028.109:586): avc: denied { getopt } for pid=7001 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.864882][ T6994] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 89.138257][ T34] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 89.337069][ T34] usb 1-1: not running at top speed; connect to a high speed hub [ 89.358792][ T34] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 89.367121][ T34] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 89.370336][ T34] usb 1-1: Product: QEMU USB Tablet [ 89.372332][ T34] usb 1-1: Manufacturer: QEMU [ 89.374295][ T34] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 89.410083][ T34] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input7 [ 89.489121][ T34] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 89.516640][ T6997] usb 1-1: USB disconnect, device number 2 [ 89.774799][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/report_descriptor': No such file or directory [ 89.817049][ T6997] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 89.838037][ T6997] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 89.854713][ T6997] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 89.858269][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.030428][ T6997] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 90.040288][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.040606][ T6997] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 90.048339][ T6997] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 90.051082][ T6997] usb usb2: Product: EHCI Host Controller [ 90.053358][ T6997] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 90.055628][ T6997] usb usb2: SerialNumber: 0000:00:1d.7 [ 90.058305][ T34] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 90.062065][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.104012][ T34] as10x_usb: device has been detected [ 90.106020][ T34] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 90.110199][ T6997] hub 2-0:1.0: USB hub found [ 90.116348][ T6997] hub 2-0:1.0: 6 ports detected [ 90.133716][ T34] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 90.185731][ T42] audit: type=1400 audit(2000000029.449:587): avc: denied { firmware_load } for pid=34 comm="kworker/3:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 90.186168][ T34] as10x_usb: error during firmware upload part1 [ 90.195881][ T34] Registered device Abilis Systems DVB-Titan [ 90.217913][ T6997] hub 1-0:1.0: USB hub found [ 90.226306][ T6997] hub 1-0:1.0: 2 ports detected [ 90.286897][ T6997] hub 3-0:1.0: USB hub found [ 90.289516][ T6997] hub 3-0:1.0: 2 ports detected [ 90.343869][ T6997] hub 4-0:1.0: USB hub found [ 90.347393][ T6997] hub 4-0:1.0: 2 ports detected [ 90.432350][ T42] audit: type=1400 audit(2000000029.699:588): avc: denied { read } for pid=7011 comm="syz.4.292" path="socket:[16656]" dev="sockfs" ino=16656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.448575][ T55] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 90.501057][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 90.534661][ T6966] kexec: Could not allocate control_code_buffer [ 90.551314][ T848] usbhid 6-1:0.0: can't add hid device: -71 [ 90.553944][ T848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.565206][ T848] usb 6-1: USB disconnect, device number 6 [ 90.610450][ T7026] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 90.613488][ T7027] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 90.615029][ T7024] overlay: Unknown parameter 'fowner>00000000000000049663' [ 90.623817][ T7026] team0: Port device dummy0 added [ 90.656371][ T55] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 90.663477][ T55] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 90.669471][ T55] usb 2-1: Product: QEMU USB Tablet [ 90.675965][ T55] usb 2-1: Manufacturer: QEMU [ 90.677559][ T55] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 90.723375][ T55] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input8 [ 90.876028][ T55] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 91.095264][ T7063] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 91.679278][ T7047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.781910][ T7096] program syz.4.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.827728][ T7100] Bluetooth: MGMT ver 1.23 [ 91.880716][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 91.884213][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 91.920403][ T5837] usb 8-1: USB disconnect, device number 4 [ 91.935932][ T5837] Unregistered device Abilis Systems DVB-Titan [ 91.937390][ T5837] as10x_usb: device has been disconnected [ 91.953115][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 91.956243][ T7111] hsr_slave_0: left promiscuous mode [ 91.961706][ T7111] hsr_slave_1: left promiscuous mode [ 92.129451][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.242851][ T7121] syzkaller0: entered promiscuous mode [ 92.244627][ T7121] syzkaller0: entered allmulticast mode [ 92.292609][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 92.295972][ T5829] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.300601][ T5829] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.304246][ T5829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.306557][ T5829] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.309921][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.317554][ T5829] usb 5-1: config 0 descriptor?? [ 92.632706][ T34] IPVS: starting estimator thread 0... [ 92.644011][ T7136] netlink: 'syz.3.329': attribute type 21 has an invalid length. [ 92.731595][ T5829] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 92.734592][ T5829] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 92.737442][ T5829] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 92.748404][ T5829] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 92.753513][ T5829] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 92.759571][ T7141] IPVS: using max 45 ests per chain, 108000 per kthread [ 92.762660][ T5829] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 92.767792][ T7153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.335'. [ 92.796145][ T7150] Bluetooth: MGMT ver 1.23 [ 92.831015][ T7161] fuse: Bad value for 'fd' [ 93.102682][ T1351] usb 5-1: USB disconnect, device number 2 [ 93.387197][ T7192] kvm: emulating exchange as write [ 93.508803][ T64] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 93.631288][ T7198] Trying to write to read-only block-device nullb0 [ 93.772629][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 93.772647][ T42] audit: type=1400 audit(2000000033.039:603): avc: denied { write } for pid=7216 comm="syz.4.353" name="functions" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.791044][ T42] audit: type=1400 audit(2000000033.059:604): avc: denied { mounton } for pid=7216 comm="syz.4.353" path="/27/config" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.948028][ T7206] infiniband syz1: set down [ 93.952087][ T7206] infiniband syz1: added ipvlan0 [ 93.980011][ T7206] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.980679][ T7237] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 93.987050][ T7206] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.989371][ T7237] netlink: 64 bytes leftover after parsing attributes in process `syz.4.358'. [ 93.996295][ T7206] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 94.022382][ T7237] overlayfs: failed to resolve './file2': -2 [ 94.033732][ T7206] RDS/IB: syz1: added [ 94.037530][ T7206] smc: adding ib device syz1 with port count 1 [ 94.040163][ T7206] smc: ib device syz1 port 1 has no pnetid [ 94.438287][ T1351] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.578315][ T1351] usb 5-1: device descriptor read/64, error -71 [ 94.818309][ T1351] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.948286][ T1351] usb 5-1: device descriptor read/64, error -71 [ 94.964151][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 94.975549][ T7247] bridge0: port 3(macvlan0) entered blocking state [ 94.978572][ T7247] bridge0: port 3(macvlan0) entered disabled state [ 94.979665][ T848] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.981698][ T7247] macvlan0: entered allmulticast mode [ 94.991215][ T7247] macvlan0: left allmulticast mode [ 95.059680][ T1351] usb usb5-port1: attempt power cycle [ 95.122676][ T7251] netlink: 84 bytes leftover after parsing attributes in process `syz.4.364'. [ 95.138896][ T848] usb 6-1: Using ep0 maxpacket: 8 [ 95.143027][ T848] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.150686][ T848] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.167934][ T848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 95.170412][ T848] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.173643][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.177877][ T848] usb 6-1: config 0 descriptor?? [ 95.298008][ T42] audit: type=1400 audit(2000000034.559:605): avc: denied { accept } for pid=7257 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.305508][ T42] audit: type=1400 audit(2000000034.559:606): avc: denied { setopt } for pid=7257 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.398945][ T1351] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.419042][ T1351] usb 5-1: device descriptor read/8, error -71 [ 95.494446][ T42] audit: type=1400 audit(2000000034.759:607): avc: denied { ioctl } for pid=7271 comm="syz.4.369" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.547296][ T42] audit: type=1400 audit(2000000034.809:608): avc: denied { create } for pid=7291 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 95.596317][ T7295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 95.598689][ T7295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.601754][ T7295] vhci_hcd vhci_hcd.0: Device attached [ 95.611671][ T7332] vhci_hcd: connection closed [ 95.613285][ T5786] vhci_hcd vhci_hcd.4: stop threads [ 95.616965][ T5786] vhci_hcd vhci_hcd.4: release socket [ 95.619185][ T5786] vhci_hcd vhci_hcd.4: disconnect device [ 95.651323][ T848] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 95.656993][ T848] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 95.659710][ T848] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 95.661941][ T848] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 95.664414][ T848] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 95.667030][ T848] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 95.668304][ T1351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.688972][ T1351] usb 5-1: device descriptor read/8, error -71 [ 95.798558][ T1351] usb usb5-port1: unable to enumerate USB device [ 96.035748][ T1351] usb 6-1: USB disconnect, device number 7 [ 96.069615][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 96.073246][ T42] audit: type=1400 audit(2000000035.339:609): avc: denied { write } for pid=7335 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.073358][ T7336] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.084380][ T7336] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.087151][ T7336] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.089211][ T7336] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.091784][ T7336] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.094324][ T7336] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.097403][ T7336] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.099707][ T7336] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.103191][ T7336] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.105514][ T7336] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.202923][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 96.325589][ T42] audit: type=1400 audit(2000000035.589:610): avc: denied { append } for pid=7348 comm="syz.4.376" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.334887][ T7349] input: syz0 as /devices/virtual/input/input9 [ 96.525199][ T42] audit: type=1400 audit(2000000035.789:611): avc: denied { setopt } for pid=7360 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.660185][ T42] audit: type=1400 audit(2000000035.929:612): avc: denied { read } for pid=7376 comm="syz.4.385" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.667984][ T7377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.385'. [ 96.678897][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.682718][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.884946][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 96.926421][ T7390] sctp: [Deprecated]: syz.3.388 (pid 7390) Use of int in max_burst socket option deprecated. [ 96.926421][ T7390] Use struct sctp_assoc_value instead [ 96.933682][ T7395] atomic_op ffff88802dc4e198 conn xmit_atomic 0000000000000000 [ 96.935226][ T7390] sctp: [Deprecated]: syz.3.388 (pid 7390) Use of int in max_burst socket option deprecated. [ 96.935226][ T7390] Use struct sctp_assoc_value instead [ 97.228252][ T1483] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.353719][ T7423] syzkaller0: entered promiscuous mode [ 97.355544][ T7423] syzkaller0: entered allmulticast mode [ 97.372541][ T7423] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 97.381105][ T7423] veth0: entered promiscuous mode [ 97.383444][ T7423] team0: Port device veth0 added [ 97.389994][ T1483] usb 8-1: Using ep0 maxpacket: 8 [ 97.395048][ T1483] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.402370][ T1483] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.406024][ T1483] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.408754][ T1483] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.412120][ T1483] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.417153][ T1483] usb 8-1: config 0 descriptor?? [ 97.530205][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 97.620027][ T7433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.399'. [ 97.700611][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 97.705623][ T34] usb 9-1: config 0 has no interfaces? [ 97.707625][ T34] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.713786][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.720168][ T34] usb 9-1: config 0 descriptor?? [ 97.841674][ T1483] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 97.844314][ T1483] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 97.846755][ T1483] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 97.849619][ T1483] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 97.852226][ T1483] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 97.855195][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 97.855800][ T1483] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 98.073224][ T5837] usb 9-1: USB disconnect, device number 6 [ 98.195304][ T10] usb 8-1: USB disconnect, device number 5 [ 98.565121][ T7461] raw_sendmsg: syz.0.401 forgot to set AF_INET. Fix it! [ 98.587950][ T7461] xt_CT: No such helper "snmp_trap" [ 98.725898][ T7468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.823291][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 98.823310][ T42] audit: type=1400 audit(2000000038.089:626): avc: denied { write } for pid=7472 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.840433][ T7473] netlink: 'syz.0.406': attribute type 4 has an invalid length. [ 98.897445][ T7475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.900689][ T7475] IPv6: NLM_F_CREATE should be set when creating new route [ 98.922177][ T7475] binder_alloc: binder_alloc_mmap_handler: 7474 200000ffd000-200001000000 already mapped failed -16 [ 98.937147][ T7477] binder: 7474:7477 ioctl c0306201 0 returned -14 [ 98.942457][ T7475] binder_alloc: 7474: binder_alloc_buf, no vma [ 99.018894][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 99.075249][ T42] audit: type=1400 audit(2000000038.339:627): avc: denied { create } for pid=7486 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.091788][ T42] audit: type=1400 audit(2000000038.349:628): avc: denied { setopt } for pid=7486 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.229268][ T42] audit: type=1400 audit(2000000038.499:629): avc: denied { bpf } for pid=7495 comm="syz.0.412" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.238942][ T42] audit: type=1400 audit(2000000038.499:630): avc: denied { perfmon } for pid=7495 comm="syz.0.412" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.241573][ T7479] netlink: 104 bytes leftover after parsing attributes in process `syz.4.408'. [ 99.356294][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 99.478223][ T42] audit: type=1400 audit(2000000038.739:631): avc: denied { write } for pid=7519 comm="syz.4.421" name="interface.ncm" dev="configfs" ino=17858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.498218][ T42] audit: type=1400 audit(2000000038.739:632): avc: denied { write } for pid=7519 comm="syz.4.421" name="functions" dev="configfs" ino=9199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.567339][ T42] audit: type=1400 audit(2000000038.829:633): avc: denied { getopt } for pid=7525 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.598369][ T848] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.764221][ T7542] netlink: 'syz.4.428': attribute type 39 has an invalid length. [ 99.768219][ T848] usb 5-1: Using ep0 maxpacket: 8 [ 99.792255][ T848] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.796965][ T848] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.802795][ T848] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.805606][ T848] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.809918][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.815639][ T848] usb 5-1: config 0 descriptor?? [ 99.847741][ T42] audit: type=1400 audit(2000000039.109:634): avc: denied { module_request } for pid=7545 comm="syz.1.430" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.048051][ T42] audit: type=1400 audit(2000000039.309:635): avc: denied { search } for pid=7551 comm="syz.4.431" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 100.058432][ T1351] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 100.126367][ T7558] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 100.183798][ T7561] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.193578][ T7561] CIFS: Unable to determine destination address [ 100.219528][ T1351] usb 8-1: Using ep0 maxpacket: 8 [ 100.236046][ T1351] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 100.240305][ T1351] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.245820][ T1351] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.246331][ T848] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 100.249596][ T1351] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.253366][ T848] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 100.255287][ T1351] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.257385][ T848] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 100.263525][ T1351] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.267577][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.270676][ T848] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 100.270693][ T848] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 100.271103][ T848] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 100.484545][ T7544] qrtr: Invalid version 48 [ 100.485780][ T1351] usb 8-1: usb_control_msg returned -32 [ 100.500479][ T1351] usbtmc 8-1:16.0: can't read capabilities [ 100.619997][ T848] usb 5-1: USB disconnect, device number 7 [ 100.722373][ T7599] macsec0: entered promiscuous mode [ 100.724769][ T7599] macsec0: entered allmulticast mode [ 100.726582][ T7599] veth1_macvtap: entered allmulticast mode [ 100.849637][ T7601] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 101.465745][ T7621] efs: cannot read volume header [ 101.469993][ T7622] efs: cannot read volume header [ 101.514721][ T7624] syz.0.453 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.574495][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 101.754200][ T7633] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 101.756852][ T7633] ipvlan0: entered allmulticast mode [ 101.759086][ T7633] veth0_vlan: entered allmulticast mode [ 101.766314][ T7633] team0: Device ipvlan0 failed to register rx_handler [ 102.143012][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 102.146573][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 102.799945][ T5837] usb 8-1: USB disconnect, device number 6 [ 102.919864][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.923379][ T5095] Bluetooth: hci4: command 0x1003 tx timeout [ 103.738793][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 104.374984][ T7615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.472401][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 104.472418][ T42] audit: type=1400 audit(2000000043.739:687): avc: denied { read } for pid=7690 comm="syz.4.475" dev="sockfs" ino=19790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.478447][ T7691] netlink: 92 bytes leftover after parsing attributes in process `syz.4.475'. [ 104.485264][ T42] audit: type=1400 audit(2000000043.739:688): avc: denied { append } for pid=7692 comm="syz.3.474" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.573783][ T7706] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 104.581501][ T42] audit: type=1400 audit(2000000043.849:689): avc: denied { relabelto } for pid=7705 comm="syz.4.479" name="71" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.598056][ T42] audit: type=1400 audit(2000000043.849:690): avc: denied { associate } for pid=7705 comm="syz.4.479" name="71" dev="tmpfs" ino=405 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 104.612089][ T42] audit: type=1400 audit(2000000043.879:691): avc: denied { read } for pid=7705 comm="syz.4.479" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.621469][ T42] audit: type=1400 audit(2000000043.879:692): avc: denied { open } for pid=7705 comm="syz.4.479" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.629346][ T42] audit: type=1400 audit(2000000043.879:693): avc: denied { ioctl } for pid=7705 comm="syz.4.479" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 104.648836][ T42] audit: type=1400 audit(2000000043.909:694): avc: denied { write } for pid=6598 comm="syz-executor" name="71" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.651197][ T7696] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.476'. [ 104.661373][ T42] audit: type=1400 audit(2000000043.909:695): avc: denied { remove_name } for pid=6598 comm="syz-executor" name="binderfs" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 104.670791][ T42] audit: type=1400 audit(2000000043.909:696): avc: denied { write } for pid=6598 comm="syz-executor" name="71" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 105.049339][ T7742] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.715188][ T7719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.720183][ T7733] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.487'. [ 107.724271][ T7733] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 107.826549][ T7745] syzkaller0: entered promiscuous mode [ 107.833600][ T7745] syzkaller0: entered allmulticast mode [ 107.850576][ T7745] tipc: Started in network mode [ 107.853848][ T7745] tipc: Node identity 663de6c3cb61, cluster identity 4711 [ 107.859749][ T7745] tipc: Enabled bearer , priority 0 [ 107.904663][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 107.963417][ T7761] SELinux: failed to load policy [ 108.144352][ T7744] tipc: Resetting bearer [ 108.146867][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 108.176205][ T7744] tipc: Disabling bearer [ 108.241213][ T7768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7768 comm=syz.1.491 [ 108.326261][ T64] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 108.543629][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 108.554693][ T7789] xfrm0: entered promiscuous mode [ 108.556457][ T7789] xfrm0: entered allmulticast mode [ 108.870841][ T7805] net_ratelimit: 68 callbacks suppressed [ 108.870860][ T7805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.165549][ T64] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 109.261730][ T7817] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 109.273551][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 109.276566][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 109.280509][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 109.283422][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 109.341079][ T7820] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 109.490693][ T7823] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 109.619821][ T7823] NILFS (nbd4): device size too small [ 109.891478][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 109.896232][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 109.896250][ T42] audit: type=1400 audit(2000000049.149:704): avc: denied { watch } for pid=7830 comm="syz.0.517" path="/163/file0" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.914306][ T42] audit: type=1400 audit(2000000049.159:705): avc: denied { watch_sb watch_reads } for pid=7830 comm="syz.0.517" path="/163/file0" dev="tmpfs" ino=904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.204346][ T7849] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.302271][ T42] audit: type=1400 audit(2000000049.559:706): avc: denied { write } for pid=7856 comm="syz.3.523" name="usbmon4" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.344633][ T42] audit: type=1400 audit(2000000049.609:707): avc: denied { map } for pid=7850 comm="syz.0.522" path="/proc/487/pagemap" dev="proc" ino=20920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.364548][ T42] audit: type=1400 audit(2000000049.609:708): avc: denied { execute } for pid=7850 comm="syz.0.522" path="/proc/487/pagemap" dev="proc" ino=20920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.380810][ T7859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.522'. [ 110.423881][ T42] audit: type=1400 audit(2000000049.689:709): avc: denied { write } for pid=7863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.451050][ T42] audit: type=1400 audit(2000000049.719:710): avc: denied { read } for pid=7860 comm="syz.3.525" dev="nsfs" ino=4026533286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.466201][ T42] audit: type=1400 audit(2000000049.719:711): avc: denied { open } for pid=7860 comm="syz.3.525" path="net:[4026533286]" dev="nsfs" ino=4026533286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.531466][ T42] audit: type=1400 audit(2000000049.799:712): avc: denied { write } for pid=7870 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.630235][ T42] audit: type=1400 audit(2000000049.899:713): avc: denied { append } for pid=7878 comm="syz.3.529" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 110.811504][ T7900] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 110.833895][ T7900] bond1 (unregistering): Released all slaves [ 110.891890][ T7909] geneve1: entered promiscuous mode [ 110.894268][ T7909] geneve1: entered allmulticast mode [ 110.928571][ T5786] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.934691][ T5786] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.937965][ T5786] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.945437][ T5786] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.145495][ T7919] tipc: New replicast peer: 127.0.0.1 [ 111.149117][ T7919] tipc: Enabled bearer , priority 10 [ 111.152652][ T7919] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0001 [ 111.346099][ T7935] binder: 7933:7935 ioctl c0306201 2000000004c0 returned -14 [ 111.361202][ T5146] pmem0: [POWERTEC] [ 111.863011][ T7967] loop5: detected capacity change from 0 to 2640 [ 111.868451][ T7967] buffer_io_error: 320 callbacks suppressed [ 111.868462][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.875354][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.877918][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.889212][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.896430][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.900144][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.902895][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.906168][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.909578][ T7967] ldm_validate_partition_table(): Disk read failed. [ 111.911853][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.914402][ T7967] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.917538][ T7967] Dev loop5: unable to read RDB block 0 [ 111.922260][ T7967] loop5: unable to read partition table [ 111.927683][ T7967] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 112.248938][ T7981] overlay: filesystem on ./file1 not supported as upperdir [ 112.403682][ T7975] smpboot: CPU 1 is now offline [ 112.536009][ T7982] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 112.577587][ T0] Disabled fast string operations [ 112.580131][ T0] ------------[ cut here ]------------ [ 112.582339][ T0] alternatives_patched [ 112.582346][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 112.587459][ T0] Modules linked in: [ 112.588986][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 112.592858][ T5526] tipc: Node number set to 2908546755 [ 112.593111][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 112.597958][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.602310][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 112.604744][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 88 c6 59 00 85 ed 0f 84 7d fd ff ff e8 0b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 cb 59 00 8b [ 112.612966][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 112.615628][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 112.618536][ T0] RDX: ffff88801ee8a540 RSI: ffffffff81b095d5 RDI: ffff88801ee8a540 [ 112.621160][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 112.623744][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 112.626411][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 112.629053][ T0] FS: 0000000000000000(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 112.631989][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.634186][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 112.637297][ T0] Call Trace: [ 112.638428][ T0] [ 112.639478][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 112.641490][ T0] ? _printk+0xcf/0x110 [ 112.643297][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 112.645476][ T0] ? early_init_intel.cold+0x129/0x1eb [ 112.647564][ T0] early_init_intel.cold+0x13f/0x1eb [ 112.649334][ T0] init_intel+0x1c/0x7b0 [ 112.650748][ T0] identify_cpu+0x8b0/0x1c30 [ 112.652299][ T0] ? __pfx_cpu_init+0x10/0x10 [ 112.653862][ T0] identify_secondary_cpu+0x178/0x270 [ 112.655648][ T0] start_secondary+0xcf/0x2d0 [ 112.657219][ T0] ? __pfx_start_secondary+0x10/0x10 [ 112.658923][ T0] common_startup_64+0x13e/0x158 [ 112.660513][ T0] [ 112.661552][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.663927][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 112.667325][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 112.669355][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.672662][ T0] Call Trace: [ 112.673776][ T0] [ 112.674774][ T0] dump_stack_lvl+0x100/0x190 [ 112.676386][ T0] vpanic+0x552/0x970 [ 112.677747][ T0] ? __pfx_vpanic+0x10/0x10 [ 112.679276][ T0] panic+0xd1/0xe0 [ 112.680568][ T0] ? __pfx_panic+0x10/0x10 [ 112.682085][ T0] ? check_panic_on_warn+0x1f/0x90 [ 112.683803][ T0] check_panic_on_warn.cold+0x19/0x34 [ 112.685592][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 112.687270][ T0] __warn.cold+0x191/0x318 [ 112.688764][ T0] __report_bug+0x30f/0x440 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.690333][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 112.692207][ T0] ? __pfx___report_bug+0x10/0x10 [ 112.693800][ T0] ? prb_read_valid+0x78/0xa0 [ 112.695377][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 112.697111][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 112.698871][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 112.700535][ T0] report_bug+0xb2/0x220 [ 112.701816][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 112.703500][ T0] handle_bug+0x16a/0x2a0 [ 112.704958][ T0] exc_invalid_op+0x17/0x50 [ 112.706704][ T0] asm_exc_invalid_op+0x1a/0x20 [ 112.708606][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 112.710997][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 88 c6 59 00 85 ed 0f 84 7d fd ff ff e8 0b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 cb 59 00 8b [ 112.718199][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 112.720389][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 112.723217][ T0] RDX: ffff88801ee8a540 RSI: ffffffff81b095d5 RDI: ffff88801ee8a540 [ 112.726445][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 112.729280][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 112.731897][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 112.734512][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 112.736202][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 112.737874][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 112.739542][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 112.741359][ T0] ? _printk+0xcf/0x110 [ 112.742746][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 112.744575][ T0] ? early_init_intel.cold+0x129/0x1eb [ 112.746384][ T0] early_init_intel.cold+0x13f/0x1eb [ 112.748151][ T0] init_intel+0x1c/0x7b0 [ 112.749566][ T0] identify_cpu+0x8b0/0x1c30 [ 112.751141][ T0] ? __pfx_cpu_init+0x10/0x10 [ 112.752700][ T0] identify_secondary_cpu+0x178/0x270 [ 112.754490][ T0] start_secondary+0xcf/0x2d0 [ 112.756071][ T0] ? __pfx_start_secondary+0x10/0x10 [ 112.757827][ T0] common_startup_64+0x13e/0x158 [ 112.759520][ T0] [ 112.761308][ T0] Kernel Offset: disabled [ 112.762745][ T0] Rebooting in 86400 seconds..