last executing test programs: 3.770144333s ago: executing program 2 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}], 0x20}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="65f3ab262e5678dbbaf80c66b8e835598966efbafc0c66b8c86c00000e762b102b10620066b9ad0200000f32664a8000b6c00f326635008000000f300f01d6ba4200b80748ef2edb8807baf80c66b8fcc21c8c66efbafc0c66ed", 0x5a}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.789972243s ago: executing program 2 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000380)={0x9000, 0x10000}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x0, 0xd, 0x2, 0x20000005, 0x8, 0x8002, 0x6, 0x7, 0xc72d, 0x4, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0x6, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x80010001, 0xaf, 0x0, 0x283, 0x8001, 0x4]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r7, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.786501124s ago: executing program 2 (id=414): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x80000000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r5, @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r9, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0) setfsgid(0xee00) 1.780957156s ago: executing program 2 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x87]}, &(0x7f0000000040)=0x6) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x36803, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0008d6}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x87]}, &(0x7f0000000040)=0x6) (async) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x36803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0008d6}, 0x0) (async) 1.709101085s ago: executing program 2 (id=438): userfaultfd(0x80801) (async) r0 = userfaultfd(0x80801) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x4e22, 0x4, @remote, 0xfff}, 0x1c) r8 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r9, &(0x7f0000000580)='7', 0x1) (async) write$char_usb(r9, &(0x7f0000000580)='7', 0x1) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) syz_usb_disconnect(r8) bind$inet6(r7, &(0x7f00000008c0)={0xa, 0x4e23, 0x80, @private0, 0x4}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) syz_emit_ethernet(0xbd, &(0x7f00000000c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x8001, 0x0, 0x1}, {}], @generic="e12f0af1d9826ddb6a3fdabc851ea2ebd57ee4d612f5e3dbdd0896a4f25f4b2385c7f6c4915d4ac77a632384349a82ffbc858c9c4c4e56bd5d3ab4ee9aa873c0bd89ca2b55bb49ca219c88c0c7565d04610e51183054d441ca620382e0a8b3cd843c6bd1e86c8569b7541b4f34caa4b3cac7878559add3944b65314ff263015b6048c58d8471ea6d98032a82b87324474571ba26f306843499c8ad2dba081d1fe65937"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x743, 0x773, 0x74e, 0x622]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x6) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 1.589808462s ago: executing program 3 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000fbff010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0xb}, 0x1c) r7 = dup(r6) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x40) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x40) connect$802154_dgram(r7, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000080)=0x4) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000000c0)={0xb, 0x9, {0x51, 0x5, 0x2, {0x4, 0xffff}, {0x10, 0x101}, @period={0x58, 0x8001, 0x200, 0x9, 0x6, {0xffff, 0x80, 0x5, 0xac21}, 0x8, &(0x7f0000000040)=[0x3, 0x1, 0xfb, 0x2, 0x401, 0x2, 0xeff7, 0xc]}}, {0x55, 0xd, 0x0, {0xb, 0x1}, {0x0, 0xfffd}, @cond=[{0xf, 0x8f8, 0x7, 0x80, 0x8, 0x9}, {0x8, 0xfa, 0xb, 0x4, 0x5, 0x8000}]}}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x23) read$FUSE(r10, &(0x7f0000006380)={0x2020}, 0x2020) 1.460975176s ago: executing program 2 (id=442): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000c80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x4, @remote, 0xfffffffe}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x100}}]}, 0x190) syz_emit_ethernet(0x14a, &(0x7f00000003c0)={@broadcast, @dev, @void, {@mpls_uc={0x8847, {[], @ipv4=@tipc={{0x6, 0x4, 0x2, 0x2, 0x13c, 0x64, 0x0, 0xf8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, {[@generic={0x83, 0x4, "0a17"}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x1, 0x0, 0x1, 0x8, 0x71, 0x2, 0x4e23, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x1}, [{0x9, 0x200, 0x8, 0x5, 0x1, 0x4000000, 0x6, 0x5}, {0x0, 0x2, 0x52b, 0x8, 0x1, 0x4, 0x7, 0x4}, {0x4, 0x1, 0x10, 0x27, 0x7, 0x6, 0xf, 0x7}, {0x1, 0xfffffffe, 0x80, 0x0, 0xa, 0x2, 0xa, 0x6a37fe6}, {0x5, 0x44, 0x0, 0x0, 0xc, 0x10000, 0xc, 0x7}, {0xd, 0xbbaa, 0x73e, 0xa08, 0x800, 0x6, 0xa, 0x4}, {0x4, 0x663676af, 0x5, 0x911, 0x5, 0xc, 0xf, 0x8}, {0x4000000, 0x9, 0xa, 0x80000000, 0x9, 0xe5, 0x5, 0xb}, {0xa, 0x7f, 0xda, 0x2, 0x2, 0x7605, 0x1, 0xfffffff}]}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x6}) r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x1, &(0x7f0000000200)={0x4, "b13143a67725ddd753fd2967453d8f333a2a9ac6c0a46fb4ecdbd970a4167e9239"}}) fcntl$lock(r4, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x80002000000006, 0x100000000}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="a2", @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0xb0cd34343a7e0505) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000040)=0x8) 1.028881928s ago: executing program 0 (id=445): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r1, &(0x7f0000000100)="8c", 0x1, 0x81, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0, 0x1}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x9}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x80000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) syz_ublk_setup_io_uring(0x2b04, &(0x7f0000000340)={0x0, 0x9768, 0x20040, 0x2, 0x2bc, 0x0, r3}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000004c0)) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000500)=0x3, &(0x7f0000000540)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000922000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000c9000/0x1000)=nil, &(0x7f000016d000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56a7, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x1, 0x143}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e24, 0x9, @empty, 0x6}}, 0x4, 0x6}, &(0x7f00000003c0)=0x90) 971.20538ms ago: executing program 0 (id=446): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) chroot(&(0x7f0000000100)='./file0\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x10) faccessat2(r3, &(0x7f00000000c0)='./file0\x00', 0x28, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001002bbd7000fcffffff03"], 0x14}], 0x1, 0x0, 0x0, 0x8088}, 0x0) 909.088609ms ago: executing program 0 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000001"], 0x5c}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x3d, 0x8382) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) setresuid(0xffffffffffffffff, 0x0, 0xee01) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x25, 0x0, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 690.807978ms ago: executing program 3 (id=452): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0xfffffffe, 0x2, 0x0, 0x1, "d9160e961711a077609475ea0d11e885090000f2170e65e3f50327e422000000000000000000000200000000001900", 0xd}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0xfffffffe, 0x2, 0x0, 0x1, "d9160e961711a077609475ea0d11e885090000f2170e65e3f50327e422000000000000000000000200000000001900", 0xd}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) syz_usb_connect$cdc_ncm(0x5, 0x8f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x7f, 0x10, 0xfe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "40c5c869"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x80, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x40, 0x15}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x39}, @obex={0x5, 0x24, 0x15, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xbf, 0xce, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x17, 0x4}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x4b0, 0xbf, 0x0, 0xbf, 0x40, 0x2}, 0x159, &(0x7f0000000340)={0x5, 0xf, 0x159, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x50, 0xe, 0x6}, @generic={0xaa, 0x10, 0x2, "e3251bd067b9d9ca16c5758002916b0141418fe4c9cdb810fefe1c47d4335899af73ccaf8f09de16a6c4ab1d832af1cae17083da5c8fcd85148d2d09aed7684f6891c2eb6570631b7ec20d9923d06ecb355a48d68f4e23a972d5c2f8f9f20637e633a7af3c7e6456b3e2502823db7fd29124b6eb45540c941bc67b90d827d638892437bc32a2ba634279c6f36bf0f67f48a539ef85d5b8cf6a1cab08e281e4a3f4a2928f1ae762"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x4, 0x2}, @generic={0x81, 0x10, 0x2, "a9cb852809ec5fbb8bea939b4ea89f3006c96acc45e951619eb2a55b4526f9b4e982aed9635fc981b444042cefab3415d048a0bae24a3afdf4e09b92ade5ee2a22ba5f4076f46865d813326f2938707cc1554064b659333f261d4c6955f186a2d5c65b0d7d2a53146a1fa8364d1df82c106f6e7eec3deae2afe7eeb4d12f"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "e9d0a81531fb3236c6d182c001bd8cb9"}]}, 0x8, [{0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "d97f9d05e104474a2d4c463fe48b36f0942dc576b0f9b611e93f704aa015719389d1553d498126f1dbcf7928ecb927452f107a14c4185e8f77d3e7b32552bfc9bed4bd8f04d52b30089e335b53c4ae55a6a5427bc14b86083812c7fbb8d168b5eb1ad6a9d9a3cb116cc44d3f6c705adb40cb1f7ee5dbfef00d63bae1931cfe2be3e43bf87804e3ff5ee5d355fdbec3"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x807}}, {0xd9, &(0x7f0000000600)=@string={0xd9, 0x3, "d4ed20192118b7fb536865b757554946636238cb7507968c16e76dcb11007a616ee18dc1ed86900ffa8809064e85fad3982b923df96c4402d0e93c52949076b04bb033369c1ecb40856d1344f8fc1067ce5c0e41b208fb1852c1cc0bb4cd300162ec1091e7473582bf1e24bcf8933e1f20a637ae04df218f1e61a4dfee5857e6809e0bdb1d75a5d39514313a2b11994cef199eda52d7af309fb238c8907e7b13ab9f7396928625f8b24842b2e97f9a96580df76702da982329fba46b42876b5d912409992ea49baf2b13919a8cdd8853fb3f266bc5a01f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1849}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x100c}}, {0x64, &(0x7f0000000780)=@string={0x64, 0x3, "b89d0b6394b0ebe1e0c9764a9f505302af3e6863ddd18ea6cc703412f16e13106a132232bcd5afe0f8f201eaf94383aa0c2ebdf37ff3f648a2d1006660a9199175aaf88e326fe270983aae6293acf38882ad41175ccb0d83852d407f843caac51bf9"}}, {0x102, &(0x7f0000000900)=@string={0x102, 0x3, "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"}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0x8f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x7f, 0x10, 0xfe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "40c5c869"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x80, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x40, 0x15}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x39}, @obex={0x5, 0x24, 0x15, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xbf, 0xce, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x17, 0x4}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x4b0, 0xbf, 0x0, 0xbf, 0x40, 0x2}, 0x159, &(0x7f0000000340)={0x5, 0xf, 0x159, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x50, 0xe, 0x6}, @generic={0xaa, 0x10, 0x2, "e3251bd067b9d9ca16c5758002916b0141418fe4c9cdb810fefe1c47d4335899af73ccaf8f09de16a6c4ab1d832af1cae17083da5c8fcd85148d2d09aed7684f6891c2eb6570631b7ec20d9923d06ecb355a48d68f4e23a972d5c2f8f9f20637e633a7af3c7e6456b3e2502823db7fd29124b6eb45540c941bc67b90d827d638892437bc32a2ba634279c6f36bf0f67f48a539ef85d5b8cf6a1cab08e281e4a3f4a2928f1ae762"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x4, 0x2}, @generic={0x81, 0x10, 0x2, "a9cb852809ec5fbb8bea939b4ea89f3006c96acc45e951619eb2a55b4526f9b4e982aed9635fc981b444042cefab3415d048a0bae24a3afdf4e09b92ade5ee2a22ba5f4076f46865d813326f2938707cc1554064b659333f261d4c6955f186a2d5c65b0d7d2a53146a1fa8364d1df82c106f6e7eec3deae2afe7eeb4d12f"}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "e9d0a81531fb3236c6d182c001bd8cb9"}]}, 0x8, [{0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "d97f9d05e104474a2d4c463fe48b36f0942dc576b0f9b611e93f704aa015719389d1553d498126f1dbcf7928ecb927452f107a14c4185e8f77d3e7b32552bfc9bed4bd8f04d52b30089e335b53c4ae55a6a5427bc14b86083812c7fbb8d168b5eb1ad6a9d9a3cb116cc44d3f6c705adb40cb1f7ee5dbfef00d63bae1931cfe2be3e43bf87804e3ff5ee5d355fdbec3"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x807}}, {0xd9, &(0x7f0000000600)=@string={0xd9, 0x3, "d4ed20192118b7fb536865b757554946636238cb7507968c16e76dcb11007a616ee18dc1ed86900ffa8809064e85fad3982b923df96c4402d0e93c52949076b04bb033369c1ecb40856d1344f8fc1067ce5c0e41b208fb1852c1cc0bb4cd300162ec1091e7473582bf1e24bcf8933e1f20a637ae04df218f1e61a4dfee5857e6809e0bdb1d75a5d39514313a2b11994cef199eda52d7af309fb238c8907e7b13ab9f7396928625f8b24842b2e97f9a96580df76702da982329fba46b42876b5d912409992ea49baf2b13919a8cdd8853fb3f266bc5a01f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1849}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x100c}}, {0x64, &(0x7f0000000780)=@string={0x64, 0x3, "b89d0b6394b0ebe1e0c9764a9f505302af3e6863ddd18ea6cc703412f16e13106a132232bcd5afe0f8f201eaf94383aa0c2ebdf37ff3f648a2d1006660a9199175aaf88e326fe270983aae6293acf38882ad41175ccb0d83852d407f843caac51bf9"}}, {0x102, &(0x7f0000000900)=@string={0x102, 0x3, "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"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 399.888708ms ago: executing program 1 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 311.020065ms ago: executing program 1 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) (async) r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000300)={0x1, 0x3, [{0xffffffffffffffff, 0x0, 0x10000, 0x8000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}]}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000380)=0x1c4) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000400)={'geneve0\x00'}) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000840)={r10, 0x9, 0x400}) r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000c40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000c80)=0x10, 0x0) listen(r11, 0x6) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r12, &(0x7f0000001180)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000d00)={0x428, 0x3f3, 0x4, 0x70bd26, 0x25dfdbfe, {0x3, 0x1, 0x37, [0x81, 0x40, 0x7f, 0x2, 0xe, 0x1, 0x9, 0x2, 0xfffffff7, 0xfffffffa, 0x1, 0x4, 0x7, 0x3, 0x7, 0x0, 0xffff0001, 0x7, 0x4, 0x5, 0x0, 0x80000000, 0x6, 0x9, 0x68, 0x100, 0x1, 0x40, 0x0, 0x7, 0x1ff, 0x2, 0xb8, 0x5, 0x19, 0x0, 0x0, 0x5, 0xf, 0x7fff, 0x0, 0x7ff, 0x2, 0x81, 0xffffff24, 0x6996, 0xbec1, 0x5, 0x0, 0x2, 0xace6, 0xa, 0x8, 0x4, 0x3, 0x1, 0x6000, 0x2, 0x0, 0xfffffffe, 0xffff, 0x9, 0x10001, 0x1], [0x34, 0x3, 0x3, 0x7ff, 0x3, 0x4, 0xf, 0x3, 0x8, 0x1, 0xa, 0xd, 0xc55, 0x9, 0x9, 0x2, 0x9, 0x5976, 0x4d0, 0x0, 0x0, 0xfffff09d, 0x55, 0x9, 0x4, 0x1, 0xfff, 0x5c7, 0x0, 0x5, 0xc32, 0xa430, 0x9, 0x76, 0x1, 0x7, 0x5, 0x0, 0x79, 0x10000, 0x7, 0x6, 0x6b, 0x3, 0x1a87, 0x5714, 0x7, 0x100, 0x0, 0x67, 0x2, 0x2, 0x40, 0x714e, 0x2, 0x3, 0x81, 0x5, 0xfffffff7, 0x40, 0x612, 0x0, 0x7, 0x9], [0x1, 0x0, 0x7, 0x7, 0x81, 0x1, 0x8, 0x7, 0x8, 0xffff4195, 0x1, 0x5, 0x80000001, 0x3, 0x9, 0x4, 0x2, 0x5, 0x4, 0x7, 0x8, 0x9, 0x2, 0x10001, 0x3, 0x5, 0x0, 0x5, 0x4, 0x8, 0x1, 0x40, 0x9, 0x7, 0xb9, 0x3ff, 0xc0000000, 0x9, 0x7, 0x9, 0x0, 0x2, 0x9, 0x836a, 0x401, 0x8, 0x0, 0x3, 0x10001, 0x63d, 0x635, 0x6, 0x7, 0x198, 0x7f, 0x0, 0x3, 0x5, 0x8, 0x8000, 0x12, 0x8, 0x1, 0x1], [0xa, 0x9, 0xd, 0x9, 0x100, 0x8, 0xf, 0x4, 0x6, 0x0, 0x1, 0x7ff, 0xffff, 0x8, 0x7, 0x282d, 0xb4c, 0x4d, 0x4, 0x9, 0x15d71568, 0x5f, 0x40, 0x2, 0x6, 0x20, 0x4, 0xfffffffb, 0x5, 0x8, 0xfff, 0x9, 0x6, 0x7, 0x0, 0x1, 0xf7, 0xff, 0x10001, 0x2, 0x200, 0x1, 0x1, 0x8, 0x9, 0x2, 0xfffeffff, 0xc, 0x1d, 0xf9a3, 0x200, 0x8000, 0x7, 0x3, 0xffffc3c5, 0x7, 0xfffffff8, 0x5, 0xfff, 0x73, 0x0, 0x7a, 0x6, 0x4], 0x7, ['%*{\x00', '/\\\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x800) r13 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r13, &(0x7f00000011c0)={0x27, r5, 0x0, 0x1}, 0x10) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$AUDIT_USER(r12, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x80, 0x3ed, 0x4, 0x70bd27, 0x25dfdbfe, "74e17344862c8bbc0db196a0b38b2e4b7d6011d6cdc9f4c46ded40210334612122afb516d54dd101cbfb039a89c27c8c1cad648a20590fae131fac4057b72fe850dc4d71e01a7330acb8a3d0b82ec92f9a3fdc6cafee979984b881032873df01e8ad57234543b8c1c5cfa49f1642", [""]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r15, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x74, r16, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5e}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r15) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x11110000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, r17, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa68}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x28}}, 0x4040080) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000001640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r14, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 296.776075ms ago: executing program 0 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x16, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7de, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x48, &(0x7f0000000440)=""/72, 0x0, 0x16, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x2, 0x4, 0x9, 0x1}, {0x2, 0x1, 0x0, 0x9}, {0x1, 0x3, 0x1, 0x7}, {0x5, 0x5, 0x10, 0x9aea73bc490db5c6}], 0x10, 0x81}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r1, 0x2, 0x1, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r9, 0x25, 0x6, @val=@tcx={@void, @value=r0, @void, @void, r10}}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) write$P9_RSTATu(r1, &(0x7f0000000a40)={0x283, 0x7d, 0x1c, {{0x0, 0x267, 0x3, 0x5, {0x0, 0x1, 0x8}, 0x40000000, 0xd, 0x7, 0x20000000000007, 0x1, '\x99', 0x8f, '\x004\xbe\xa3\x98\xbbV\"T\xfd-\xa7\xfes\x1b\xae`\x94q\xad\xfd\xb9+\x9f\xd2T\xd2\xfc\xa29\xf3\xae8p<\xde6YK~\xf5H\xe1\xe9\xf5v\'\xd7i\xf2x\xbe\xed\x145vC3m:\x98\xc6G\x81\xde\r\xb2\xc9I\xf3\x19\xc0\x12H\x9b\x9a*\xe8\xd4L\xa6\xc1\x1b\xdeTp\xcdB\xbc\xba\x00M,\aZ\xd1\xbf\f\xcb\x19\x18\xad)\xb5/\x93\xf8\xe5\x04\x00\x00\x00\xc9\xac\x02h\xce\xd4k\x13t\x03\xdf\x9c\x86\xbb\xf6\xf4\xaf\xa2\xf3\x82\xba\xc5\x97y\x17\x00\xd8\x11\xbb\xf0\xfa', 0x139, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[\a\xcd_\x12\xd4zZ\xb6E\xa2\xae?\xbc=\x82O\xc7\x9b\xee\x17\xe9\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)\x00\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00j\x98\x149\x1aSlM\xb1;\x03\x80Y\xa9\x1a#/!\ns\x92C\x1d\xbf?\xef@\xb2Kq\xceD\x8djx.\xa8A@u\xdc\x1d\x0f\xdc\xee\xe8LzW}\xb8gB\x7f^\t\xe5>v?<\xe6\xe9\r\x1e\xcc\x80\xa3\xe3\x1f#\xfd\xa2|\xa7r\xcf2\x12t\x82\xdb\xe8\x83\\)\x96\xf3\x9fU=\x01\xebt|t\xac \xb9\xc4\x9e\xf1\xb1\xd0P\x12)\x96\xb9\xf7!\x00\xe9\xfci%J\xf8\x82n \xee>\xc35\xca\x80v\xbbi\x84\x91\xb3\xa7iS\xe2\x97\x98\xccetF\xba\xb6\xa6y`g\xb9\x9f\xbe\x86R\x8eR\xe1:\x8a\xf9H\x93\x17T/\x18\xe2\x9aT-\xa4\x97\xd9\xb0\r\x84\x8e\x0f/\x804\"\x80\xad\x04\x95dC\xd0\x9b\x9a::\xccne\x142', 0x6b, '\xfc\xedg\x98a\v::\x97q\x02\xfe\x1a\xf7\xef\xf5\xaa\xf8@\x1b\xb5\x10[]\xac\"\x89&\xc1\xbb\x00c\xfaH\x90\x03\t\xa4@\xdd\xe3+\\\xc0\x83\xc0\xf6(4\xfa\xcf\\j;\xfaj\xfeJ\xf8\xca\x8ap\xb8.\xd2\xe26\xcb~\xe8\x18&\xbcX\a&\x9a\x85\x14\xbe\xdf\x9d\x13\x8a\nE\xa8\xbf\xd7\xecX\x16\xc7Klu\xa5U\xc3\xbe%\xd5r\x0f\x98\xb50'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0x283) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 244.0515ms ago: executing program 1 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0xf}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000002, 0x6}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x1dc) 243.799258ms ago: executing program 0 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x124) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000818, &(0x7f0000000140)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e641e58bde4e1e202b2616e792c6336e3da46a90a4423616368653c76657273696f6e3d3970323030302e75ded78c63ddfa2f82570180000000cc800dc4aadd702d9dd46576311f"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 2', 0x1b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x40c, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2a0, 0x2c0, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x468) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) 140.949559ms ago: executing program 0 (id=460): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0xa010102, 0x0, 0x0, 0x80, 0x0, [{@empty}, {@broadcast}, {@loopback}, {@initdev}, {@remote}, {@private}, {@broadcast}, {@multicast1}]}}) read$nci(r0, &(0x7f0000000140)=""/225, 0xe1) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x12) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4010, r0, 0x60000) ioctl$FICLONE(r0, 0x40049409, r0) mknodat(r0, &(0x7f0000000240)='./file0\x00', 0x8, 0x7) fcntl$setflags(r0, 0x2, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) mount_setattr(r0, &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={0x18007a, 0xc, 0x20000, {r1}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000004c0)={0x29, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x24, 0x4, 0x68}, 0x2c) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000500)) setrlimit(0x8, &(0x7f0000000540)={0x8, 0x5}) execve(&(0x7f0000000580)='./file0\x00', &(0x7f00000006c0)={[&(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='sit0\x00', &(0x7f0000000680)='/dev/nmem0\x00']}, &(0x7f0000000800)={[&(0x7f0000000700)='\'&!\'\x00', &(0x7f0000000740)='-#)-*&*{\x00', &(0x7f0000000780)='/$\x00', &(0x7f00000007c0)='/dev/nmem0\x00']}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000840)='./file0\x00', r4, r5, 0x1000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a00)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0xb}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000a80)={0x0, 0xfffffffa}, 0x8) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ac0), 0x4000, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000b00)) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000b40)={0x73, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'none\x00', 0x1a, 0xd08e, 0x1c}, 0x2c) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000c80)={0x48, 0x8, r6, 0x0, 0x2, 0xa1, &(0x7f0000000bc0)="1f135ff936439a0a83c65619c2cc6537b1df71649eeaed688924a33377391e6ec9c317ce5e8e8a7e431b618fc43352e824d41d8ec187f7fe0d9d8d5ff77003c7c55e2a36f73345fc44aa4eaad263fe65fba67289cf4a1ee7b872a00ed789b7aebac90545663fd24d96e68bcd34b1cf6b6c9f2f0483ae2949c11eb920faa519dae0ce24f0598045ce536d8e32f1962d2cd2b24b7c921257e81138661935506d38f4", 0x4}) ioctl$DVB_DEMUX_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f0000000d40)={0x5, 0x2, 0x80000, 0xff, 0x1d, 0xfffffffb}) 140.61053ms ago: executing program 3 (id=461): ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000000)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000400)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000440)=0xeeee0000) r1 = syz_open_dev$vcsn(&(0x7f0000000480), 0x4, 0xb0080) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f0000002500)={0x18, 0x0, r2, {0x9}}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000002540), 0x2, 0x10000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000002580)=0x5) getsockname$qrtr(r3, &(0x7f00000025c0), &(0x7f0000002600)=0xc) write$binfmt_elf64(r1, &(0x7f0000002640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x8, 0x2a, 0xee5, 0x2, 0x3, 0x5, 0x2af, 0x40, 0x133, 0xfff, 0x9, 0x38, 0x2, 0x2, 0xf5b4, 0x8000}, [{0x1, 0x7, 0x3, 0x3, 0x4, 0x2, 0x0, 0x6735}, {0x6474e551, 0x27, 0x596, 0xed0, 0x8000, 0x0, 0x5, 0x80000001}], "8d9d67e083a180e7eebbff7f6000aaf19cdc35edf5a6301c3e703f79d75ea12f5a32506140b74073bc0d4d0b6e4f4f02f3db5cb066ab3d43c14a9b6c048ef6a823266c4a468c5bb9c247a21138858d79d2e57afb7c189999861b875e43b796c4b079902e4f3c56244af0a297e3ab7f10efd0075f2325b31c469b4c4908806a7c7278942e7ef9ac2f5bda82d49c2bad996daed386ca651b673090c052a9138bbb92ec75fe9c04506e2e6f06b5d78cca5f3574c9432f825223202bdcc75b684f23", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x870) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003580)={0x0, &(0x7f0000002ec0)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0xb3, 0x0, 0x2, 0x2}}, @out_dx={0x6a, 0x28, {0x1ea6}}, @nested_load_syzos={0x136, 0x128, {0x3, 0x7ff, [@set_irq_handler={0xc8, 0x20, {0xe9}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x60, {0x1, "c4e17a2d8700300000b9f0090000b87e480000ba000000000f300fc7ab0b0000000f32410f01c54d0fae6efbb9b30b0000b855450000ba000000000f300f07b9fd0a00000f320f35"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600e, 0x50, 0x9, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0xcefe}}, @nested_create_vm={0x12d, 0x18, 0x3}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4818, 0x4, 0xb01, 0x8000000000000000}}, @nested_load_syzos={0x136, 0x9b, {0x0, 0x810000000, [@nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_code={0x12e, 0x63, {0x2, "c744240053000000c744240206000000ff2c240f01ca26420fd7c2750c360f07400f01c9b9c9010000b8ae050000ba000000000f30660fc7b10900000066b850000f00d866b812000f00d0"}}]}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18}, @nested_load_code={0x12e, 0x50, {0x1, "67450f01c20f01c2b98e0900000f32c4a29d9a07b805000000b9580000000f01c136470fc7192e460f017a550f201f410f01c366ba6100ec"}}, @nested_load_code={0x12e, 0x6a, {0x2, "360f31f30f1ec8c44268f34e0267652e0fc75e00b9800000c00f3235000400000f302e2e0fc75f84440f20c0350e000000440f22c066baf80cb88cb63f86ef66bafc0c66ed66420f688f00000000f30faeee"}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0x401}}, @nested_create_vm={0x12d, 0x18, 0x1}, @code={0xa, 0x3a, {"66430f005a6c0f22d8b99e0300000f32ae660f30f347a64466900fc75dcef20f07f2470f706cf4004b"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x24, 0x4, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x5264}}, @set_irq_handler={0xc8, 0x20, {0x6c}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_load_syzos={0x136, 0x7d, {0x1, 0x101, [@wrmsr={0x65, 0x20, {0x649, 0x8}}, @code={0xa, 0x3d, {"660fc772fa0f7979040fc76a0b40f4440fc737b805000000b9906300000f01d9470fc73e410f3043f4420f06"}}]}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_code={0x12e, 0x6a, {0x2, "400f07db1366ba2000ec430f013cb30f998de087000048b803000000000000000f23c00f21f83500000d000f23f8b9800000c00f3235000100000f30420f01baf0ffffffc4a18dfe84ebaa9f00000f794f05"}}, @out_dx={0x6a, 0x28, {0x57df, 0x4, 0x8000}}, @nested_load_syzos={0x136, 0xa0, {0x1, 0x800, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16=0x2, 0xc6ad, 0xbc3, 0x6}}, @nested_amd_vmload={0x182, 0x18}, @cpuid={0x64, 0x18, {0x6}}, @rdmsr={0x66, 0x18, {0x991}}]}}, @uexit={0x0, 0x18, 0x80000001}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x98, 0xa, 0x2, 0xb}}], 0x6b6}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000035c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000003640)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) write$FUSE_WRITE(r5, &(0x7f0000003680)={0x18, 0x0, r2, {0x3f3}}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000036c0)={0x10000, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000003700)={0xed, 0x0, 0x6}) read$FUSE(r5, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000005800)={&(0x7f00000057c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9f94c2c2de34df5c, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000005840)) close_range(r1, r0, 0x2) r7 = openat$cgroup_int(r6, &(0x7f0000005880)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f00000058c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000005a00)={&(0x7f0000005900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000005940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000059c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x6, 0x4}) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000005a40)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000005a80)={0x0, 0x6, 0x63, "98e85117639a2dfb33cec15b63f74ff04c6064817a0d083bb1c1744685d678be6ca748de2344821b40faa83fc1cc171ed98591eb52641e0b2b347e845c88d95b1b8df92356a0c011d173bb3250f4ba7cd82ad8a9865a567acbd0ed5c4fa33e1e8a8314"}, 0x6b) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000005b00)={0xaa, 0x22}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000006280)={&(0x7f0000005b40)=0x3, 0x1, &(0x7f0000005b80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000006240)}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000006400)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4004091) 89.762451ms ago: executing program 3 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) openat$cdrom(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$inet(0x2, 0x801, 0x100) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 89.410654ms ago: executing program 1 (id=463): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0xc2, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x7, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0060000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "0000000000000000a9cd1f90000000"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 88.952766ms ago: executing program 1 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000080)={{@any, 0xe0ec}, 0x92, 0x0, 0x0, 0x3}) r4 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x700}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 685.513µs ago: executing program 3 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000380)="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", 0x150) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) (async, rerun: 32) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xe, 0xf4, 0x2b, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x0, 0x7, 0xea}}) connect$packet(r3, &(0x7f00000001c0)={0x11, 0x7, r4, 0x1, 0x5, 0x6, @multicast}, 0x14) 378.934µs ago: executing program 1 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000001"], 0x5c}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x3d, 0x8382) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) setresuid(0xffffffffffffffff, 0x0, 0xee01) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x25, 0x0, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=467): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) fcntl$notify(r0, 0x402, 0x34) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000005c80)=ANY=[@ANYBLOB="040e0c050110"], 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@delchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) fanotify_mark(r2, 0x1, 0x8000026, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) kernel console output (not intermixed with test programs): [ 37.846417][ T42] audit: type=1400 audit(1784730988.082:115): avc: denied { siginh } for pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:31303' (ED25519) to the list of known hosts. [ 40.300009][ T42] audit: type=1400 audit(1784730990.572:116): avc: denied { name_bind } for pid=5644 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.235980][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 41.235997][ T42] audit: type=1400 audit(1784730991.502:123): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.274251][ T42] audit: type=1400 audit(1784730991.542:124): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.591236][ T42] audit: type=1400 audit(1784730991.862:125): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.644775][ T42] audit: type=1400 audit(1784730991.912:126): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.998299][ T42] audit: type=1400 audit(1784730992.262:127): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.042612][ T42] audit: type=1400 audit(1784730992.312:128): avc: denied { write } for pid=5675 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.128838][ T42] audit: type=1400 audit(1784730992.392:129): avc: denied { write } for pid=5678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.174956][ T42] audit: type=1400 audit(1784730992.442:130): avc: denied { write } for pid=5681 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.349586][ T42] audit: type=1400 audit(1784730992.622:131): avc: denied { write } for pid=5684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.393817][ T42] audit: type=1400 audit(1784730992.662:132): avc: denied { write } for pid=5687 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.998667][ T5645] cgroup: Unknown subsys name 'net' [ 43.121781][ T5645] cgroup: Unknown subsys name 'cpuset' [ 43.125919][ T5645] cgroup: Unknown subsys name 'rlimit' [ 43.358573][ T5712] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.071304][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.652770][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 47.652783][ T42] audit: type=1400 audit(1784730997.912:161): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.867023][ T42] audit: type=1400 audit(1784730998.132:162): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.884002][ T42] audit: type=1400 audit(1784730998.132:163): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.891876][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.896758][ T42] audit: type=1400 audit(1784730998.132:164): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.898156][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.904533][ T42] audit: type=1400 audit(1784730998.142:165): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[2876]" dev="sockfs" ino=2876 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.912016][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.915260][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.917072][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.921957][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.926157][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.926244][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.926627][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.927109][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.927372][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.929550][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.931705][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.934763][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.937207][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.938158][ T42] audit: type=1400 audit(1784730998.202:166): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.939337][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.940642][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.944658][ T42] audit: type=1400 audit(1784730998.212:167): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.944802][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.947239][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.950800][ T42] audit: type=1400 audit(1784730998.212:168): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.958383][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.974532][ T42] audit: type=1400 audit(1784730998.222:169): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.994003][ T42] audit: type=1400 audit(1784730998.222:170): avc: denied { module_request } for pid=5742 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.618239][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.621498][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.623799][ T5736] bridge_slave_0: entered allmulticast mode [ 48.626673][ T5736] bridge_slave_0: entered promiscuous mode [ 48.631266][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.633939][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.636155][ T5736] bridge_slave_1: entered allmulticast mode [ 48.638811][ T5736] bridge_slave_1: entered promiscuous mode [ 48.670612][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.673068][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.675908][ T5742] bridge_slave_0: entered allmulticast mode [ 48.678493][ T5742] bridge_slave_0: entered promiscuous mode [ 48.705134][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.708269][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711501][ T5734] bridge_slave_0: entered allmulticast mode [ 48.715388][ T5734] bridge_slave_0: entered promiscuous mode [ 48.720195][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.722438][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.724809][ T5742] bridge_slave_1: entered allmulticast mode [ 48.727427][ T5742] bridge_slave_1: entered promiscuous mode [ 48.737890][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.755040][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.758238][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.761488][ T5734] bridge_slave_1: entered allmulticast mode [ 48.765232][ T5734] bridge_slave_1: entered promiscuous mode [ 48.781118][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.795714][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.799013][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.802377][ T5731] bridge_slave_0: entered allmulticast mode [ 48.806325][ T5731] bridge_slave_0: entered promiscuous mode [ 48.831494][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.845549][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.849259][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.852354][ T5731] bridge_slave_1: entered allmulticast mode [ 48.855569][ T5731] bridge_slave_1: entered promiscuous mode [ 48.870344][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.876027][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.880139][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.891150][ T5736] team0: Port device team_slave_0 added [ 48.895988][ T5736] team0: Port device team_slave_1 added [ 48.926132][ T5734] team0: Port device team_slave_0 added [ 48.936778][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.940923][ T5742] team0: Port device team_slave_0 added [ 48.943996][ T5734] team0: Port device team_slave_1 added [ 48.965862][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.969812][ T5742] team0: Port device team_slave_1 added [ 48.985241][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.987948][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.998099][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.009835][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.012131][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.022691][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.027845][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.030782][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.039439][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.061811][ T5731] team0: Port device team_slave_0 added [ 49.064107][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.066413][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.074443][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.078511][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.080768][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.088642][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.093155][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.095327][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.103385][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.113373][ T5731] team0: Port device team_slave_1 added [ 49.187922][ T5736] hsr_slave_0: entered promiscuous mode [ 49.191411][ T5736] hsr_slave_1: entered promiscuous mode [ 49.195019][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.197279][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.205254][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.215136][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.217387][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.225771][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.235490][ T5734] hsr_slave_0: entered promiscuous mode [ 49.238900][ T5734] hsr_slave_1: entered promiscuous mode [ 49.242657][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.245621][ T5734] Cannot create hsr debugfs directory [ 49.272074][ T5742] hsr_slave_0: entered promiscuous mode [ 49.274330][ T5742] hsr_slave_1: entered promiscuous mode [ 49.276781][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.278721][ T5742] Cannot create hsr debugfs directory [ 49.341746][ T5731] hsr_slave_0: entered promiscuous mode [ 49.344836][ T5731] hsr_slave_1: entered promiscuous mode [ 49.347685][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 49.350185][ T5731] Cannot create hsr debugfs directory [ 49.673135][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.679922][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.688472][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.693173][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.695934][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.700367][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.713787][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.718173][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.761623][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.767203][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.771328][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.776702][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.781474][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.786739][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.793702][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.799846][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.855063][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.862008][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.865702][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.873554][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.883147][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.887253][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.892404][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.896397][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.939964][ T64] Bluetooth: hci0: command tx timeout [ 49.976434][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.982196][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.985885][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.991083][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.995547][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.001275][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.004934][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.010736][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.016613][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.019179][ T64] Bluetooth: hci3: command tx timeout [ 50.019635][ T5738] Bluetooth: hci1: command tx timeout [ 50.021147][ T5746] Bluetooth: hci2: command tx timeout [ 50.086028][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.100268][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.128227][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.131691][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.145609][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.153630][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.164071][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.166397][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.169860][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.171971][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.193950][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.196289][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.200467][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.223346][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.227003][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.229865][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.245617][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.248529][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.284397][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.297596][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.300416][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.307607][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.310687][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.324506][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.528447][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.537458][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.575039][ T5734] veth0_vlan: entered promiscuous mode [ 50.578402][ T5736] veth0_vlan: entered promiscuous mode [ 50.592528][ T5734] veth1_vlan: entered promiscuous mode [ 50.601065][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.604769][ T5736] veth1_vlan: entered promiscuous mode [ 50.612731][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.653757][ T5734] veth0_macvtap: entered promiscuous mode [ 50.660534][ T5742] veth0_vlan: entered promiscuous mode [ 50.664792][ T5736] veth0_macvtap: entered promiscuous mode [ 50.670351][ T5734] veth1_macvtap: entered promiscuous mode [ 50.675000][ T5736] veth1_macvtap: entered promiscuous mode [ 50.687002][ T5742] veth1_vlan: entered promiscuous mode [ 50.704381][ T5731] veth0_vlan: entered promiscuous mode [ 50.711643][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.716401][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.719985][ T5731] veth1_vlan: entered promiscuous mode [ 50.726468][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.730993][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.751826][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.761533][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764099][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.773036][ T5742] veth0_macvtap: entered promiscuous mode [ 50.777483][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.780582][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.792361][ T5583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.795586][ T5583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.800265][ T5742] veth1_macvtap: entered promiscuous mode [ 50.804806][ T5583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.831809][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.834679][ T5731] veth0_macvtap: entered promiscuous mode [ 50.858300][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.864210][ T5731] veth1_macvtap: entered promiscuous mode [ 50.870195][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.873367][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.886600][ T5583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.889503][ T5583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.902278][ T5583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.902331][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.908194][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.914915][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.921624][ T5583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.939646][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.946045][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.949139][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.950144][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.952856][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.957564][ T5583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.961963][ T5583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.977471][ T5583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.981455][ T5583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.032935][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.036478][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.040246][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.067946][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.072731][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.096452][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.100149][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.116799][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.120272][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.209588][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.212389][ T5888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.222071][ T5885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.222192][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.227922][ T5885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.227979][ T5888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.233635][ T5885] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.233671][ T5885] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.241165][ T5888] Zero length message leads to an empty skb [ 51.269682][ T5902] syz.3.5 uses obsolete (PF_INET,SOCK_PACKET) [ 51.674045][ T5934] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 51.852355][ T5949] Invalid ELF header magic: != ELF [ 51.861504][ T5949] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 52.020093][ T5738] Bluetooth: hci0: command tx timeout [ 52.100134][ T5738] Bluetooth: hci3: command tx timeout [ 52.101614][ T64] Bluetooth: hci2: command tx timeout [ 52.101661][ T5746] Bluetooth: hci1: command tx timeout [ 52.196771][ T5960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.371186][ T5997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43537 sclass=netlink_route_socket pid=5997 comm=syz.3.32 [ 52.516611][ T6008] geneve1: entered promiscuous mode [ 52.519502][ T6008] batadv0: entered promiscuous mode [ 52.523858][ T6008] geneve1: left promiscuous mode [ 52.528147][ T6008] batadv0: left promiscuous mode [ 52.941285][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 52.941304][ T42] audit: type=1400 audit(1784731003.212:294): avc: denied { create } for pid=6026 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.953380][ T42] audit: type=1400 audit(1784731003.212:295): avc: denied { setopt } for pid=6026 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.303264][ T42] audit: type=1400 audit(1784731003.572:296): avc: denied { ioctl } for pid=6036 comm="syz.0.41" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.341353][ T42] audit: type=1400 audit(1784731003.612:297): avc: denied { read write } for pid=6039 comm="syz.3.42" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.350518][ T42] audit: type=1400 audit(1784731003.612:298): avc: denied { open } for pid=6039 comm="syz.3.42" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.362705][ T42] audit: type=1400 audit(1784731003.632:299): avc: denied { nlmsg_write } for pid=6036 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.364061][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.375398][ T5841] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 53.504062][ T42] audit: type=1400 audit(1784731003.772:300): avc: denied { create } for pid=6039 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 53.512822][ T42] audit: type=1400 audit(1784731003.782:301): avc: denied { ioctl } for pid=6039 comm="syz.3.42" path="socket:[8953]" dev="sockfs" ino=8953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 53.546514][ T5960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.632069][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 53.635179][ T6047] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 53.637923][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 53.645336][ T6047] geneve2: entered promiscuous mode [ 53.647180][ T6047] geneve2: entered allmulticast mode [ 53.737337][ T42] audit: type=1400 audit(1784731004.002:302): avc: denied { create } for pid=6048 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.745973][ T42] audit: type=1400 audit(1784731004.002:303): avc: denied { write } for pid=6048 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.099425][ T64] Bluetooth: hci0: command tx timeout [ 54.179662][ T64] Bluetooth: hci2: command tx timeout [ 54.179715][ T5738] Bluetooth: hci3: command tx timeout [ 54.181773][ T64] Bluetooth: hci1: command tx timeout [ 56.189189][ T64] Bluetooth: hci0: command tx timeout [ 56.260071][ T64] Bluetooth: hci1: command tx timeout [ 56.260119][ T5746] Bluetooth: hci2: command tx timeout [ 56.262190][ T5738] Bluetooth: hci3: command tx timeout [ 57.182850][ T6075] ======================================================= [ 57.182850][ T6075] WARNING: The mand mount option has been deprecated and [ 57.182850][ T6075] and is ignored by this kernel. Remove the mand [ 57.182850][ T6075] option from the mount to silence this warning. [ 57.182850][ T6075] ======================================================= [ 57.318257][ T5960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.362818][ T6087] max out of range [ 57.424679][ T5960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.578689][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581634][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.592077][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.601308][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.619498][ T6093] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 57.787874][ T6099] Bluetooth: MGMT ver 1.23 [ 58.026008][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 58.026024][ T42] audit: type=1400 audit(1784731008.292:329): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.051909][ T42] audit: type=1400 audit(1784731008.322:330): avc: denied { create } for pid=6100 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.059972][ T42] audit: type=1400 audit(1784731008.322:331): avc: denied { listen } for pid=6100 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.068100][ T42] audit: type=1400 audit(1784731008.322:332): avc: denied { accept } for pid=6100 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.086470][ T42] audit: type=1400 audit(1784731008.352:333): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 58.142707][ T6108] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.198443][ T42] audit: type=1400 audit(1784731008.462:334): avc: denied { write } for pid=6111 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.203771][ T6112] program syz.1.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.206211][ T42] audit: type=1400 audit(1784731008.462:335): avc: denied { read } for pid=6111 comm="syz.1.62" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.218996][ T42] audit: type=1400 audit(1784731008.462:336): avc: denied { open } for pid=6111 comm="syz.1.62" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.369779][ T6122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 58.372469][ T6122] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.376236][ T6122] vhci_hcd vhci_hcd.0: Device attached [ 58.380652][ T6122] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 58.440262][ T6130] ptrace attach of "/syz-executor exec"[5736] was attempted by " 0 $ \x0d-=p` \x22 \x0c \x0b  clsact"[6130] [ 58.609124][ T42] audit: type=1400 audit(1784731008.872:337): avc: denied { write } for pid=6133 comm="syz.3.68" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.663671][ T42] audit: type=1400 audit(1784731008.932:338): avc: denied { mmap_zero } for pid=6133 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 58.670992][ T1367] usb 38-1: SetAddress Request (2) to port 0 [ 58.674182][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.677415][ T1367] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 58.699663][ T6125] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 58.702940][ T12] vhci_hcd vhci_hcd.0: stop threads [ 58.705169][ T12] vhci_hcd vhci_hcd.0: release socket [ 58.708737][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.939262][ T1358] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.089176][ T1358] usb 5-1: Using ep0 maxpacket: 8 [ 60.095363][ T1358] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 60.099271][ T1358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.117723][ T1358] pvrusb2: Hardware description: Terratec Grabster AV400 [ 60.120820][ T1358] pvrusb2: ********** [ 60.122559][ T1358] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 60.127104][ T1358] pvrusb2: Important functionality might not be entirely working. [ 60.130739][ T1358] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 60.135330][ T1358] pvrusb2: ********** [ 60.316877][ T2518] pvrusb2: Invalid write control endpoint [ 60.360043][ T2518] pvrusb2: Invalid write control endpoint [ 60.363134][ T2518] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 60.366582][ T2518] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 60.369722][ T2518] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 60.372912][ T2518] pvrusb2: Device being rendered inoperable [ 60.377502][ T2518] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 60.381274][ T2518] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 60.389151][ T2518] pvrusb2: Attached sub-driver cx25840 [ 60.392078][ T2518] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 60.396352][ T2518] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 60.517569][ T6150] pvrusb2: Attempted to execute control transfer when device not ok [ 60.614398][ T24] usb 5-1: USB disconnect, device number 2 [ 60.740056][ T5738] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 60.741066][ T5746] Bluetooth: hci4: command 0xfc11 tx timeout [ 61.258070][ T6115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.367898][ T6177] Trying to write to read-only block-device nullb0 [ 61.427935][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.433998][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.438031][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.443494][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.450060][ T6186] 9p: Could not find request transport: v@݄girtio [ 61.450477][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.457950][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.463574][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.468451][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.474565][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.482095][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6188 comm=syz.0.80 [ 61.547501][ T6200] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 61.563077][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 61.569812][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 61.628396][ T6203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.84'. [ 61.633372][ T6207] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 62.097766][ T5738] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 62.613260][ T6242] program syz.2.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.619830][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.884704][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 63.007175][ T6260] f2fs: Unknown parameter 'ba' [ 63.039520][ T42] kauditd_printk_skb: 17054 callbacks suppressed [ 63.039565][ T42] audit: type=1326 audit(1784731013.292:17393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.047134][ T6262] netlink: 'syz.3.103': attribute type 8 has an invalid length. [ 63.055310][ T42] audit: type=1326 audit(1784731013.312:17394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.063663][ T42] audit: type=1326 audit(1784731013.312:17395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.071923][ T42] audit: type=1326 audit(1784731013.312:17396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.079855][ T42] audit: type=1326 audit(1784731013.312:17397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.088013][ T42] audit: type=1326 audit(1784731013.312:17398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.097303][ T42] audit: type=1326 audit(1784731013.312:17399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.106583][ T42] audit: type=1326 audit(1784731013.312:17400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.115091][ T42] audit: type=1326 audit(1784731013.312:17401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.124074][ T42] audit: type=1326 audit(1784731013.312:17402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.85" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faabc39de99 code=0x50000 [ 63.137950][ T6266] ALSA: seq fatal error: cannot create timer (-16) [ 63.261835][ T6268] kvm: pic: non byte write [ 63.330433][ T6276] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 63.425553][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 63.456949][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 63.465605][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 63.520356][ T6289] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.621572][ T6297] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 63.784085][ T1367] usb 38-1: device descriptor read/8, error -110 [ 63.809143][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.959108][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 63.962815][ T5884] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.966081][ T5884] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 63.974295][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 63.978356][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.985516][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.990873][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.997254][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.004904][ T5884] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.008734][ T5884] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.011912][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 64.011908][ T5884] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 64.011938][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.027002][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.031533][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.035461][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.040387][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.045261][ T5884] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.048708][ T5884] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.052492][ T5884] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 64.056652][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.061359][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.065907][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.070327][ T5884] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.074590][ T5884] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 64.079809][ T5884] usb 8-1: config 168 interface 0 has no altsetting 0 [ 64.085304][ T5884] usb 8-1: string descriptor 0 read error: -22 [ 64.088057][ T5884] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.091856][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.114282][ T5884] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.179938][ T1367] usb usb38-port1: attempt power cycle [ 64.317683][ T6292] netlink: 'syz.3.117': attribute type 5 has an invalid length. [ 64.317683][ T6291] netlink: 'syz.3.117': attribute type 5 has an invalid length. [ 64.396825][ T6335] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 64.426480][ T6335] romfs: unable to set blocksize [ 64.426480][ T6335] [ 64.565621][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'. [ 64.681905][ T6342] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 64.763453][ T1367] usb usb38-port1: unable to enumerate USB device [ 64.846314][ T6345] overlayfs: missing 'lowerdir' [ 64.931478][ T6352] xt_hashlimit: size too large, truncated to 1048576 [ 64.989266][ T6358] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 65.006953][ T6358] bond1: option mode: invalid value (8) [ 65.010914][ T6358] bond1 (unregistering): Released all slaves [ 65.038844][ T6362] devpts: Unknown parameter 'max@' [ 65.050439][ T6352] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 65.152253][ T6370] fuse: Unknown parameter '' [ 65.155255][ T6370] binder: 6369:6370 ioctl c0306201 0 returned -14 [ 65.157588][ T6370] binder: 6369:6370 ioctl c0306201 200000000540 returned -22 [ 65.199790][ T6372] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 65.213000][ T6372] bond1: option mode: invalid value (7) [ 65.219846][ T6372] bond1 (unregistering): Released all slaves [ 65.318486][ T6372] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 65.321144][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.141'. [ 65.324704][ T6372] dummy0: entered promiscuous mode [ 65.414920][ T1358] usb 8-1: USB disconnect, device number 2 [ 65.471687][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'. [ 65.476336][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'. [ 65.482272][ T6385] netlink: 'syz.1.144': attribute type 30 has an invalid length. [ 65.486445][ T6385] netlink: 'syz.1.144': attribute type 30 has an invalid length. [ 66.167141][ T6432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.514768][ T6469] warning: `syz.3.171' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.587099][ T6472] bond1: entered promiscuous mode [ 66.588936][ T6472] bond1: entered allmulticast mode [ 66.886358][ T6499] openvswitch: netlink: Flow key attr not present in new flow. [ 66.989173][ T1358] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.149397][ T1358] usb 5-1: Using ep0 maxpacket: 8 [ 67.152761][ T1358] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 67.155543][ T1358] usb 5-1: config 0 has no interface number 0 [ 67.157797][ T1358] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.162489][ T1358] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 67.166761][ T1358] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.171046][ T1358] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.176203][ T1358] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 67.179142][ T1358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.188842][ T1358] usb 5-1: config 0 descriptor?? [ 67.197515][ T1358] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 67.329012][ T6530] kAFS: unable to lookup cell '(,c' [ 67.440570][ T6535] mmap: syz.3.191 (6535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.490573][ T6542] __nla_validate_parse: 5 callbacks suppressed [ 67.490591][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.193'. [ 67.503964][ T6544] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.512908][ T6544] CIFS mount error: No usable UNC path provided in device string! [ 67.512908][ T6544] [ 67.516287][ T6544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.754760][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 67.769196][ T1367] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.793442][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.177'. [ 67.804100][ T55] usb 5-1: USB disconnect, device number 3 [ 67.819981][ T55] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 67.941584][ T1367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.945327][ T1367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.948881][ T1367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.953360][ T1367] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.956633][ T1367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.965737][ T1367] usb 6-1: config 0 descriptor?? [ 68.109125][ T5738] Bluetooth: hci1: command tx timeout [ 68.202191][ T6570] ipt_REJECT: ECHOREPLY no longer supported. [ 68.330564][ T42] kauditd_printk_skb: 8302 callbacks suppressed [ 68.330577][ T42] audit: type=1400 audit(1784731018.602:25705): avc: denied { connect } for pid=6578 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.377366][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.380465][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.383209][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.385280][ T42] audit: type=1400 audit(1784731018.652:25706): avc: denied { read append } for pid=6578 comm="syz.0.204" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.385488][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.393606][ T42] audit: type=1400 audit(1784731018.652:25707): avc: denied { open } for pid=6578 comm="syz.0.204" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.393653][ T42] audit: type=1400 audit(1784731018.652:25708): avc: denied { prog_run } for pid=6580 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.393688][ T42] audit: type=1400 audit(1784731018.652:25709): avc: denied { prog_load } for pid=6580 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.397123][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.420909][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.423291][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.425587][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.427865][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.431085][ T1367] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.443039][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 68.443592][ T6586] SQUASHFS error: Failed to read block 0x0: -5 [ 68.450374][ T6586] unable to read squashfs_super_block [ 68.471252][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.471843][ T1367] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 68.591284][ T6588] xt_hashlimit: size too large, truncated to 1048576 [ 68.645632][ T42] audit: type=1400 audit(1784731018.912:25710): avc: denied { load_policy } for pid=6543 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.655312][ T6544] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 68.660183][ T6544] SELinux: failed to load policy [ 68.665266][ T1358] usb 6-1: USB disconnect, device number 2 [ 69.014959][ T6585] syz.3.206 (6585): drop_caches: 2 [ 69.055848][ T6596] fuse: Bad value for 'fd' [ 69.086988][ T42] audit: type=1400 audit(1784731019.352:25711): avc: denied { read } for pid=6597 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.138091][ T42] audit: type=1400 audit(1784731019.402:25712): avc: denied { write } for pid=6597 comm="syz.3.209" path="socket:[14206]" dev="sockfs" ino=14206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.147870][ T6598] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.209'. [ 69.152290][ T6598] openvswitch: netlink: Message has 512 unknown bytes. [ 69.181589][ T6583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.187770][ T6583] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.205848][ T6583] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.237247][ T6583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.246755][ T6583] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.254533][ T6583] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.265871][ T6583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.271203][ T6583] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.275302][ T42] audit: type=1400 audit(1784731019.542:25713): avc: denied { map_create } for pid=6608 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.275764][ T6583] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.289134][ T42] audit: type=1400 audit(1784731019.552:25714): avc: denied { map_read map_write } for pid=6608 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.290540][ T6609] bpf: Bad value for 'uid' [ 69.300076][ T6583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.304730][ T6583] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.309331][ T6583] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.885906][ T5738] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 69.888003][ T6660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.019277][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 70.048211][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 70.104370][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 70.108061][ T6673] hsr_slave_0: left promiscuous mode [ 70.110764][ T6673] hsr_slave_1: left promiscuous mode [ 70.276303][ T6683] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 70.410198][ T6690] (syz.0.235,6690,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 70.413680][ T6690] (syz.0.235,6690,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 70.422772][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 70.499162][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.543441][ T6697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.237'. [ 70.678709][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 70.812839][ T6719] xfrm1: entered promiscuous mode [ 70.814589][ T6719] xfrm1: entered allmulticast mode [ 70.866408][ T5738] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 70.908707][ T6724] syzkaller1: entered promiscuous mode [ 70.912577][ T6724] syzkaller1: entered allmulticast mode [ 71.016932][ T6732] capability: warning: `syz.0.249' uses deprecated v2 capabilities in a way that may be insecure [ 71.132053][ T6744] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 71.140963][ T6742] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 71.187824][ T6750] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 71.191692][ T6750] SELinux: failed to load policy [ 71.309282][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.309328][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.372240][ T6769] PM: Enabling pm_trace changes system date and time during resume. [ 71.372240][ T6769] PM: Correct system time has to be restored manually after resume. [ 71.379228][ T5746] Bluetooth: hci3: command 0x0405 tx timeout [ 71.430682][ T5746] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 71.463047][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.466229][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.753106][ T6793] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 71.754181][ T6794] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 71.772532][ T6793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.775478][ T6794] bond0: (slave sit0): refused to change device type [ 71.914389][ T6804] bond2: option xmit_hash_policy: invalid value (6) [ 71.919505][ T6804] bond2 (unregistering): Released all slaves [ 71.945928][ T6812] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 72.001377][ T6813] selinux_netlink_send: 54 callbacks suppressed [ 72.001392][ T6813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6813 comm=syz.3.275 [ 72.007747][ T6813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6813 comm=syz.3.275 [ 72.141302][ T6817] overlay: ./file0 is not a directory [ 72.144183][ T6817] 9pnet_fd: Insufficient options for proto=fd [ 72.655549][ T6833] __nla_validate_parse: 15 callbacks suppressed [ 72.655561][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.284'. [ 72.666476][ T6834] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 72.706621][ T6836] Set syz0 is full, maxelem 0 reached [ 72.859297][ T6852] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 72.868273][ T6850] bond0: entered promiscuous mode [ 72.872120][ T6850] bond_slave_0: entered promiscuous mode [ 72.874570][ T6850] bond_slave_1: entered promiscuous mode [ 72.882241][ T6850] batadv0: entered promiscuous mode [ 72.888697][ T6850] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 72.894337][ T6850] syz_tun: entered promiscuous mode [ 72.908568][ T6850] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 72.930972][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 73.186067][ T6870] program syz.2.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.313433][ T6879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.318018][ T6879] block device autoloading is deprecated and will be removed. [ 73.379893][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.426533][ T6880] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 73.459229][ T5738] Bluetooth: hci3: command 0x0405 tx timeout [ 74.943143][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 74.946112][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 74.947566][ T6898] block nbd0: Unsupported socket: should be TCP or UNIX. [ 74.977461][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 74.977476][ T42] audit: type=1400 audit(1784731025.242:25743): avc: denied { connect } for pid=6902 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.983499][ T5885] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.993659][ T5885] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.997289][ T5885] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.004218][ T5885] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.007471][ T42] audit: type=1400 audit(1784731025.272:25744): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 75.101643][ T6912] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 75.123036][ T6916] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 75.127804][ T6916] cramfs: wrong magic [ 75.133532][ T6916] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 75.136307][ T6912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.139499][ T6916] cramfs: wrong magic [ 75.161395][ T6913] bond4 (unregistering): Released all slaves [ 75.178268][ T42] audit: type=1326 audit(1784731025.442:25745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.2.315" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fb9c359de99 code=0x0 [ 75.345139][ T6936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6936 comm=syz.3.320 [ 75.438618][ T42] audit: type=1400 audit(1784731025.702:25746): avc: denied { shutdown } for pid=6941 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.459537][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.001751][ T42] audit: type=1400 audit(1784731026.272:25747): avc: denied { bind } for pid=6952 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.080374][ T6958] kvm: kvm [6957]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 76.084026][ T6958] kvm: kvm [6957]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 76.576085][ T42] audit: type=1400 audit(1784731026.842:25748): avc: denied { ioctl } for pid=6988 comm="syz.2.330" path="socket:[14870]" dev="sockfs" ino=14870 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.654627][ T5753] udevd[5753]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 76.758749][ T42] audit: type=1400 audit(1784731027.022:25749): avc: denied { bind } for pid=7015 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.769467][ T42] audit: type=1400 audit(1784731027.032:25750): avc: denied { write } for pid=7015 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.853547][ T7021] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.879130][ T7021] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.040206][ T7035] /dev/nbd3: Can't lookup blockdev [ 77.180291][ T42] audit: type=1400 audit(1784731027.452:25751): avc: denied { create } for pid=7037 comm="syz.3.341" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.188754][ T42] audit: type=1400 audit(1784731027.452:25752): avc: denied { link } for pid=7037 comm="syz.3.341" name="#a" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.247705][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 77.252508][ T7041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7041 comm=syz.3.342 [ 77.283934][ T7041] netlink: 'syz.3.342': attribute type 13 has an invalid length. [ 77.363338][ T7041] gretap0: refused to change device tx_queue_len [ 77.366239][ T7041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.540263][ T7052] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 77.540263][ T7052] The task syz.0.344 (7052) triggered the difference, watch for misbehavior. [ 77.667386][ T7059] 9pnet_fd: p9_fd_create_unix (7059): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.678318][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 77.757116][ T7066] gfs2: Unknown parameter 'norecoveryd' [ 78.064548][ T7076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.354'. [ 78.530789][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 78.533925][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 79.611453][ T7132] trusted_key: encrypted_key: insufficient parameters specified [ 79.751290][ T7136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.761155][ T7136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.763243][ T7136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.765193][ T7136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.899320][ T5735] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.905552][ T55] libceph: connect (1)[c::]:6789 error -101 [ 79.912107][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 79.964477][ T1367] libceph: connect (1)[c::]:6789 error -101 [ 79.966603][ T1367] libceph: mon0 (1)[c::]:6789 connect error [ 80.006031][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 80.011132][ T7157] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 80.013381][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.016915][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 80.019849][ T7158] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 80.025018][ T5583] vhci_hcd vhci_hcd.3: stop threads [ 80.026709][ T5583] vhci_hcd vhci_hcd.3: release socket [ 80.028333][ T5583] vhci_hcd vhci_hcd.3: disconnect device [ 80.049206][ T5735] usb 7-1: Using ep0 maxpacket: 32 [ 80.053670][ T5735] usb 7-1: unable to get BOS descriptor or descriptor too short [ 80.062125][ T5735] usb 7-1: string descriptor 0 read error: -22 [ 80.064258][ T5735] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 80.067229][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 80.084529][ T5735] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 80.087254][ T5735] dw2102: su3000_power_ctrl: 1, initialized 0 [ 80.089811][ T5735] dvb-usb: bulk message failed: -22 (2/0) [ 80.099373][ T5735] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.106023][ T5735] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 80.109654][ T5735] usb 7-1: media controller created [ 80.111510][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.113460][ T5735] dw2102: i2c transfer failed. [ 80.115731][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.118178][ T5735] dw2102: i2c transfer failed. [ 80.120413][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.122907][ T5735] dw2102: i2c transfer failed. [ 80.124957][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.127954][ T5735] dw2102: i2c transfer failed. [ 80.130483][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.132911][ T5735] dw2102: i2c transfer failed. [ 80.134938][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 80.137345][ T5735] dw2102: i2c transfer failed. [ 80.139559][ T5735] dvb-usb: MAC address: 02:02:02:02:02:02 [ 80.155047][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.177428][ T5735] dvb-usb: bulk message failed: -22 (3/0) [ 80.180282][ T5735] dw2102: command 0x0e transfer failed. [ 80.182042][ T55] libceph: connect (1)[c::]:6789 error -101 [ 80.183723][ T5735] dvb-usb: bulk message failed: -22 (3/0) [ 80.186633][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 80.188072][ T5735] dw2102: command 0x0e transfer failed. [ 80.229573][ T1367] libceph: connect (1)[c::]:6789 error -101 [ 80.232243][ T1367] libceph: mon0 (1)[c::]:6789 connect error [ 80.280379][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 80.280420][ T42] audit: type=1400 audit(1784731030.552:25764): avc: denied { execute } for pid=7133 comm="syz.2.373" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 80.289950][ T42] audit: type=1400 audit(1784731030.552:25765): avc: denied { write } for pid=7133 comm="syz.2.373" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.461026][ T42] audit: type=1400 audit(1784731030.732:25766): avc: denied { mount } for pid=7166 comm="syz.0.379" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.461477][ T7167] devtmpfs: Unknown parameter 'usrquota_ino$V*e_hardl' [ 80.469320][ T42] audit: type=1400 audit(1784731030.732:25767): avc: denied { remount } for pid=7166 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.481556][ T42] audit: type=1400 audit(1784731030.742:25768): avc: denied { ioctl } for pid=7166 comm="syz.0.379" path="socket:[15187]" dev="sockfs" ino=15187 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.501269][ T5735] dvb-usb: bulk message failed: -22 (3/0) [ 80.503868][ T5735] dw2102: command 0x0e transfer failed. [ 80.506730][ T5735] dvb-usb: bulk message failed: -22 (3/0) [ 80.509577][ T5735] dw2102: command 0x0e transfer failed. [ 80.511892][ T5735] dvb-usb: bulk message failed: -22 (1/0) [ 80.514386][ T5735] dw2102: command 0x51 transfer failed. [ 80.520119][ T7134] dvb-usb: bulk message failed: -22 (4/0) [ 80.523513][ T7134] dw2102: i2c transfer failed. [ 80.531125][ T42] audit: type=1400 audit(1784731030.802:25769): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.567675][ T5735] DVB: Unable to find symbol ds3000_attach() [ 80.570762][ T5735] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 80.638489][ T42] audit: type=1400 audit(1784731030.902:25770): avc: denied { read } for pid=7177 comm="syz.0.381" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.649618][ T7178] input: syz0 as /devices/virtual/input/input6 [ 80.652290][ T5735] rc_core: IR keymap rc-su3000 not found [ 80.652334][ T5735] Registered IR keymap rc-empty [ 80.654287][ T5735] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 80.671754][ T42] audit: type=1400 audit(1784731030.902:25771): avc: denied { open } for pid=7177 comm="syz.0.381" path="/dev/input/event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.683745][ T42] audit: type=1400 audit(1784731030.912:25772): avc: denied { ioctl } for pid=7177 comm="syz.0.381" path="/dev/input/event0" dev="devtmpfs" ino=942 ioctlcmd=0x4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.694409][ T42] audit: type=1400 audit(1784731030.912:25773): avc: denied { append } for pid=7177 comm="syz.0.381" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.700704][ T55] libceph: connect (1)[c::]:6789 error -101 [ 80.706713][ T5735] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input5 [ 80.713132][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 80.718619][ T7143] ceph: No mds server is up or the cluster is laggy [ 80.723013][ T7147] ceph: No mds server is up or the cluster is laggy [ 80.725812][ T5735] dvb-usb: schedule remote query interval to 150 msecs. [ 80.725830][ T5735] dw2102: su3000_power_ctrl: 0, initialized 1 [ 80.725843][ T5735] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 80.733724][ T5735] usb 7-1: USB disconnect, device number 2 [ 80.741639][ T1367] libceph: connect (1)[c::]:6789 error -101 [ 80.744386][ T1367] libceph: mon0 (1)[c::]:6789 connect error [ 80.867166][ T7182] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 80.875008][ T7182] bond2 (unregistering): Released all slaves [ 80.929549][ T5735] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 81.140092][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 81.162415][ T7207] dlm: non-version read from control device 4096 [ 81.240110][ T7214] netlink: 'syz.3.394': attribute type 2 has an invalid length. [ 81.271640][ T7205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7205 comm=syz.2.391 [ 81.291759][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 81.325571][ T7218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.384977][ T7227] netlink: 656 bytes leftover after parsing attributes in process `syz.2.396'. [ 81.390148][ T7227] netlink: 656 bytes leftover after parsing attributes in process `syz.2.396'. [ 81.393225][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 81.726270][ T41] cfg80211: failed to load regulatory.db [ 81.789241][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.790423][ T5738] Bluetooth: hci3: command 0x0405 tx timeout [ 81.791458][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.791804][ T5747] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.843218][ T7242] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 81.847835][ T7242] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 81.852978][ T7242] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 82.108081][ T7251] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 82.229565][ T1358] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 82.519712][ T1367] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 82.673417][ T1367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.680021][ T1367] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 82.683855][ T1367] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 82.688292][ T1367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.696260][ T1367] usb 5-1: config 0 descriptor?? [ 82.704704][ T1367] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 82.707425][ T1367] dvb-usb: bulk message failed: -22 (3/0) [ 82.717726][ T1367] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 82.721765][ T1367] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 82.724386][ T1367] usb 5-1: media controller created [ 82.727474][ T1367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.735011][ T1367] dvb-usb: bulk message failed: -22 (6/0) [ 82.738626][ T1367] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 82.743619][ T1367] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7 [ 82.750344][ T1367] dvb-usb: schedule remote query interval to 150 msecs. [ 82.752595][ T1367] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 82.902832][ T1358] usb 5-1: USB disconnect, device number 4 [ 82.920738][ T1358] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.235083][ T7311] __nla_validate_parse: 3 callbacks suppressed [ 83.235099][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.247492][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.254496][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.260029][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.267468][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 83.396581][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 83.396581][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 83.396770][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 83.401589][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 83.404615][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 83.460489][ T7327] process 'syz.0.419' launched './file2' with NULL argv: empty string added [ 83.509251][ T7327] Invalid ELF header len 18 [ 83.519519][ T7327] Invalid ELF header len 18 [ 83.532586][ T7329] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.595098][ T7335] tipc: Enabling not permitted [ 83.598846][ T7335] tipc: Enabling of bearer rejected, failed to enable media [ 83.661397][ T7329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.665475][ T7329] block device autoloading is deprecated and will be removed. [ 83.839243][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 83.859314][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 83.861653][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.864160][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.195476][ T7377] ipt_ECN: cannot use operation on non-tcp rule [ 84.839163][ T5841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.999567][ T5841] usb 7-1: Using ep0 maxpacket: 16 [ 85.006106][ T5841] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 85.011780][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.015420][ T5841] usb 7-1: Product: syz [ 85.017421][ T5841] usb 7-1: Manufacturer: syz [ 85.019743][ T5841] usb 7-1: SerialNumber: syz [ 85.028802][ T5841] usb 7-1: config 0 descriptor?? [ 85.109770][ T7458] sg_write: data in/out 514227755/130 bytes for SCSI command 0x6c-- guessing data in; [ 85.109770][ T7458] program syz.1.449 not setting count and/or reply_len properly [ 85.299958][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 85.299996][ T42] audit: type=1400 audit(1784731035.572:25802): avc: denied { bind } for pid=7464 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.440000][ T5841] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 85.450196][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.454125][ T5841] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 85.457649][ T5841] usb 7-1: media controller created [ 85.481965][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.644780][ T42] audit: type=1400 audit(1784731035.912:25803): avc: denied { append } for pid=7423 comm="syz.2.442" name="i2c-2" dev="devtmpfs" ino=2913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.692852][ T42] audit: type=1400 audit(1784731035.962:25804): avc: denied { nlmsg_write } for pid=7473 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 85.704734][ T42] audit: type=1400 audit(1784731035.962:25805): avc: denied { connect } for pid=7473 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.736676][ T7480] netlink: 'syz.0.457': attribute type 3 has an invalid length. [ 85.767129][ T42] audit: type=1400 audit(1784731036.032:25806): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60738 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.775948][ T42] audit: type=1400 audit(1784731036.032:25807): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=60738 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 85.798863][ T42] audit: type=1400 audit(1784731036.062:25808): avc: denied { write } for pid=7486 comm="syz.0.459" name="/" dev="9p" ino=72876219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.806711][ T42] audit: type=1400 audit(1784731036.062:25809): avc: denied { add_name } for pid=7486 comm="syz.0.459" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.814263][ T42] audit: type=1400 audit(1784731036.062:25810): avc: denied { create } for pid=7486 comm="syz.0.459" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.822418][ T42] audit: type=1400 audit(1784731036.062:25811): avc: denied { associate } for pid=7486 comm="syz.0.459" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.901500][ T7493] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 85.939264][ T5746] Bluetooth: hci3: command 0x0405 tx timeout [ 85.942901][ T7493] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 86.024826][ T5841] zl10353_read_register: readreg error (reg=127, ret==0) [ 86.026198][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 86.027693][ T5841] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 86.035030][ T5841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 86.040758][ T7425] ------------[ cut here ]------------ [ 86.043761][ T7425] usb 7-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 86.046882][ T7425] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.2.442/7425 [ 86.051381][ T7425] Modules linked in: [ 86.054992][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.2.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.059862][ T7425] Tainted: [L]=SOFTLOCKUP [ 86.061478][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.065442][ T7425] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 86.067787][ T7425] Code: 48 89 54 24 40 e8 63 b5 89 fa 4c 89 e7 e8 9b f9 db fe 48 89 c6 48 8d 3d 71 7c af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 34 b5 89 fa 89 ee bf ff 00 00 00 [ 86.075468][ T7425] RSP: 0018:ffffc9000cc2f680 EFLAGS: 00010287 [ 86.078138][ T7425] RAX: ffffffff8ca5eca0 RBX: ffff88802b03ec00 RCX: 0000000080000380 [ 86.081368][ T7425] RDX: ffff88805a455000 RSI: ffffffff8ca5eca0 RDI: ffffffff912fa3c0 [ 86.084669][ T7425] RBP: ffff88802d108058 R08: 00000000000000c0 R09: 0000000000000000 [ 86.087682][ T7425] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d1080b0 [ 86.090653][ T7425] R13: ffff88802e416f20 R14: ffff88802e416f26 R15: ffff88802e416f27 [ 86.093520][ T7425] FS: 00007fb9c45536c0(0000) GS:ffff8880d5ee6000(0000) knlGS:0000000000000000 [ 86.097086][ T7425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.101134][ T7425] CR2: 00007f334c989000 CR3: 000000005c8ad000 CR4: 0000000000352ef0 [ 86.104090][ T7425] Call Trace: [ 86.105259][ T7425] [ 86.106310][ T7425] ? __init_swait_queue_head+0xca/0x150 [ 86.108834][ T7425] usb_start_wait_urb+0x10e/0x580 [ 86.111044][ T7425] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 86.113371][ T7425] ? trace_kmalloc+0xeb/0x110 [ 86.115472][ T7425] ? __asan_memset+0x23/0x50 [ 86.117479][ T7425] usb_control_msg+0x328/0x4b0 [ 86.119473][ T7425] ? __pfx_usb_control_msg+0x10/0x10 [ 86.121515][ T7425] dtv5100_i2c_msg+0x1be/0x340 [ 86.123476][ T7425] dtv5100_i2c_xfer+0x131/0x3d0 [ 86.125685][ T7425] ? do_raw_spin_lock+0x128/0x260 [ 86.127318][ T7425] ? find_held_lock+0x2b/0x80 [ 86.128952][ T7425] __i2c_transfer+0x5d9/0x1740 [ 86.131460][ T7425] ? try_to_take_rt_mutex+0x59a/0xf80 [ 86.133922][ T7425] ? __pfx___i2c_transfer+0x10/0x10 [ 86.135898][ T7425] ? _raw_spin_lock_irq+0x45/0x50 [ 86.137956][ T7425] i2c_smbus_xfer_emulated+0x235/0x1110 [ 86.140235][ T7425] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 86.142616][ T7425] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 86.145498][ T7425] __i2c_smbus_xfer+0x619/0x1100 [ 86.147630][ T7425] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 86.149989][ T7425] i2c_smbus_xfer+0x185/0x3c0 [ 86.151838][ T7425] i2cdev_ioctl_smbus+0x389/0xac0 [ 86.153843][ T7425] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 86.156162][ T7425] ? __might_fault+0xc5/0x140 [ 86.158162][ T7425] ? __might_fault+0xc5/0x140 [ 86.159911][ T7425] i2cdev_ioctl+0x3cf/0x830 [ 86.161578][ T7425] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 86.163277][ T7425] ? selinux_file_ioctl+0x13b/0x290 [ 86.165282][ T7425] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 86.167227][ T7425] __x64_sys_ioctl+0x18e/0x210 [ 86.169404][ T7425] do_syscall_64+0x115/0x870 [ 86.171334][ T7425] ? clear_bhb_loop+0x40/0x90 [ 86.173403][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.175892][ T7425] RIP: 0033:0x7fb9c359de99 [ 86.177682][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.186656][ T7425] RSP: 002b:00007fb9c4553028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.190140][ T7425] RAX: ffffffffffffffda RBX: 00007fb9c3825fa0 RCX: 00007fb9c359de99 [ 86.193341][ T7425] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000008 [ 86.196536][ T7425] RBP: 00007fb9c3633eaf R08: 0000000000000000 R09: 0000000000000000 [ 86.199740][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.202966][ T7425] R13: 00007fb9c3826038 R14: 00007fb9c3825fa0 R15: 00007fffaede78e8 [ 86.206089][ T7425] [ 86.207307][ T7425] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.210165][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.2.442 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.214440][ T7425] Tainted: [L]=SOFTLOCKUP [ 86.216180][ T7425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.219749][ T7425] Call Trace: [ 86.220824][ T7425] [ 86.221758][ T7425] dump_stack_lvl+0x100/0x190 [ 86.223715][ T7425] vpanic+0x552/0x970 [ 86.225296][ T7425] ? __pfx_vpanic+0x10/0x10 [ 86.227084][ T7425] panic+0xd1/0xe0 [ 86.228567][ T7425] ? __pfx_panic+0x10/0x10 [ 86.230319][ T7425] check_panic_on_warn.cold+0x19/0x34 [ 86.232319][ T7425] ? usb_submit_urb+0x15ff/0x19b0 [ 86.234180][ T7425] __warn.cold+0x191/0x318 [ 86.235837][ T7425] __report_bug+0x30f/0x440 [ 86.237636][ T7425] ? usb_submit_urb+0x15ff/0x19b0 [ 86.239532][ T7425] ? __pfx___report_bug+0x10/0x10 [ 86.241411][ T7425] ? lockdep_hardirqs_on+0x78/0x100 [ 86.243449][ T7425] ? kasan_save_stack+0x3f/0x50 [ 86.245258][ T7425] ? kasan_save_stack+0x30/0x50 [ 86.247101][ T7425] report_bug_entry+0xe1/0x290 [ 86.248641][ T7425] ? usb_submit_urb+0x160d/0x19b0 [ 86.250151][ T7425] handle_bug+0x1cd/0x2a0 [ 86.251456][ T7425] exc_invalid_op+0x17/0x50 [ 86.252981][ T7425] asm_exc_invalid_op+0x1a/0x20 [ 86.254766][ T7425] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 86.256704][ T7425] Code: 48 89 54 24 40 e8 63 b5 89 fa 4c 89 e7 e8 9b f9 db fe 48 89 c6 48 8d 3d 71 7c af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 34 b5 89 fa 89 ee bf ff 00 00 00 [ 86.262380][ T7425] RSP: 0018:ffffc9000cc2f680 EFLAGS: 00010287 [ 86.264234][ T7425] RAX: ffffffff8ca5eca0 RBX: ffff88802b03ec00 RCX: 0000000080000380 [ 86.267040][ T7425] RDX: ffff88805a455000 RSI: ffffffff8ca5eca0 RDI: ffffffff912fa3c0 [ 86.269975][ T7425] RBP: ffff88802d108058 R08: 00000000000000c0 R09: 0000000000000000 [ 86.272753][ T7425] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802d1080b0 [ 86.275192][ T7425] R13: ffff88802e416f20 R14: ffff88802e416f26 R15: ffff88802e416f27 [ 86.277674][ T7425] ? __init_swait_queue_head+0xca/0x150 [ 86.279406][ T7425] usb_start_wait_urb+0x10e/0x580 [ 86.281125][ T7425] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 86.282974][ T7425] ? trace_kmalloc+0xeb/0x110 [ 86.284492][ T7425] ? __asan_memset+0x23/0x50 [ 86.285986][ T7425] usb_control_msg+0x328/0x4b0 [ 86.287509][ T7425] ? __pfx_usb_control_msg+0x10/0x10 [ 86.289337][ T7425] dtv5100_i2c_msg+0x1be/0x340 [ 86.290915][ T7425] dtv5100_i2c_xfer+0x131/0x3d0 [ 86.292514][ T7425] ? do_raw_spin_lock+0x128/0x260 [ 86.294100][ T7425] ? find_held_lock+0x2b/0x80 [ 86.295592][ T7425] __i2c_transfer+0x5d9/0x1740 [ 86.297132][ T7425] ? try_to_take_rt_mutex+0x59a/0xf80 [ 86.298834][ T7425] ? __pfx___i2c_transfer+0x10/0x10 [ 86.300486][ T7425] ? _raw_spin_lock_irq+0x45/0x50 [ 86.302088][ T7425] i2c_smbus_xfer_emulated+0x235/0x1110 [ 86.303830][ T7425] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 86.305721][ T7425] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 86.307873][ T7425] __i2c_smbus_xfer+0x619/0x1100 [ 86.309458][ T7425] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 86.311229][ T7425] i2c_smbus_xfer+0x185/0x3c0 [ 86.312765][ T7425] i2cdev_ioctl_smbus+0x389/0xac0 [ 86.314346][ T7425] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 86.316169][ T7425] ? __might_fault+0xc5/0x140 [ 86.317682][ T7425] ? __might_fault+0xc5/0x140 [ 86.319147][ T7425] i2cdev_ioctl+0x3cf/0x830 [ 86.320571][ T7425] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 86.322127][ T7425] ? selinux_file_ioctl+0x13b/0x290 [ 86.323780][ T7425] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 86.325330][ T7425] __x64_sys_ioctl+0x18e/0x210 [ 86.326794][ T7425] do_syscall_64+0x115/0x870 [ 86.328231][ T7425] ? clear_bhb_loop+0x40/0x90 [ 86.329722][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.331710][ T7425] RIP: 0033:0x7fb9c359de99 [ 86.333222][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.339132][ T7425] RSP: 002b:00007fb9c4553028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.342420][ T7425] RAX: ffffffffffffffda RBX: 00007fb9c3825fa0 RCX: 00007fb9c359de99 [ 86.345550][ T7425] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000008 [ 86.348799][ T7425] RBP: 00007fb9c3633eaf R08: 0000000000000000 R09: 0000000000000000 [ 86.351995][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.355278][ T7425] R13: 00007fb9c3826038 R14: 00007fb9c3825fa0 R15: 00007fffaede78e8 [ 86.358582][ T7425] [ 86.360857][ T7425] Kernel Offset: disabled [ 86.362752][ T7425] Rebooting in 86400 seconds..