last executing test programs: 4.773231752s ago: executing program 0 (id=1077): quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x400, 0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffff8001, 0x6, 0x8) ioprio_set$pid(0x3, 0x0, 0x2007) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f56584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0x100, 0x0, 0x4, 0x10000000, 0xa02}) 4.232553579s ago: executing program 1 (id=1083): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = gettid() syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x0, 0xc, 0x55, {0x55, 0x24, "9306f6eebab3a43ba4e2c67022a28e68cf39a4f2a2581234f288e4863b5b45ee86c2d4b52bdf9f48bd3cb5e0ac6a47b8738c1c3cb7f59e56572124b3644bf84e5d8fed652f247d495059f0e6e9b7d03eb74f08"}}, &(0x7f0000000180)={0x0, 0x3, 0x15, @string={0x15, 0x3, "f9638ccb5e3cb8e5ce242e6a7766b4b8917981"}}, &(0x7f00000001c0)={0x0, 0x22, 0x27, {[@global=@item_4={0x3, 0x1, 0x1, "b33a624a"}, @local=@item_4={0x3, 0x2, 0x4, "a08d996a"}, @global=@item_4={0x3, 0x1, 0x5, "32b6a335"}, @main=@item_4={0x3, 0x0, 0x8, "29590fc8"}, @global, @local=@item_4={0x3, 0x2, 0x0, "075efd41"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xa, "97"}, @global=@item_4={0x3, 0x1, 0xb, "05ce3719"}, @local=@item_4={0x3, 0x2, 0xa, ')d\rl'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x79f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xf, 0x44, "6208c682f301c1ac89f82dc740f05c7613c19438e708caa59d1739bc3c13f0786f2f12331e86787aec67c6354f4063065fc0f6dbb7ee2149fc3d864f5f827414e52703a4"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xae}, &(0x7f00000004c0)={0x20, 0x1, 0x71, "878c1a2d9d2f32ff7f5cd341a306a918c6c060fc3e1e93afe8c782cd0783b439e887ba6c5606a69bc0d3bb645e8ae8d10b4039f39be33d7e45dd826dbafcfeee4452d861a61ba8c8967fb6572fcab07dbb8181a7683a655c10bb55ba321b191b715571ae263de891f626cd4d3f4885ce74"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x7}}) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fstat(r4, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 2.090002678s ago: executing program 0 (id=1101): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000002000)=""/4096) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r2, &(0x7f0000002c80)={&(0x7f00000005c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c, 0x0}, 0x20000010) 1.963107434s ago: executing program 0 (id=1103): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x4}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000b0d2fa24d83c4c70218a5b6720b64a000011140100000000000000000008"], 0x20}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x2, 0x3}, 0x6) listen(r4, 0x3) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x30000009}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xa, 0x148, 0x368, 0x60, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x12, 0x0, [{0x5, 0x1, 0x9, 0x800}, {0x6, 0x3, 0x0, 0x7}, {0x0, 0x7, 0x6, 0x40}, {0x3ffd, 0x10, 0x0, 0xf98}, {0xab, 0x0, 0x8a, 0x6}, {0x7, 0x6, 0x5, 0x3}, {0x8e1, 0x1, 0x6}, {0x0, 0x6, 0xfe, 0xb0}, {0x9, 0x81, 0x9, 0xfffffff9}, {0x9, 0xb, 0xb2, 0x4}, {0x3, 0x2, 0x10, 0x1e56}, {0x38a, 0x1, 0x92, 0x1}, {0x80, 0x7f, 0xc6, 0x1200000}, {0x4, 0x3, 0x3, 0xff}, {0x100, 0x6, 0x9, 0x8b}, {0x4, 0x5, 0x8b, 0x16}, {0x4, 0x3e, 0x1, 0x9}, {0x4, 0x8, 0x0, 0x6}, {0x3, 0x10, 0xfa, 0x4}, {0x8000, 0x0, 0xa, 0x2}, {0xfff, 0x4, 0x3, 0x9}, {0x438, 0x4, 0xc, 0x800}, {0xffff, 0x0, 0x5, 0x401}, {0xf0, 0x7, 0x2, 0x2}, {0xfff, 0x1, 0x2, 0x5}, {0x7ff, 0x2, 0x1, 0x7}, {0x9, 0x5, 0x8, 0xdf4c}, {0x6, 0x3, 0x81, 0x8}, {0x9, 0x3, 0x95, 0x6307}, {0x1, 0x5, 0x8, 0x9}, {0x1, 0x10, 0x8, 0xac7b7f12}, {0xd969, 0x3, 0x89, 0x1000}, {0x3, 0xec, 0x7}, {0x8, 0xec, 0x6, 0x7f}, {0x1ff, 0x7, 0x2f, 0x1000}, {0x238, 0x3d, 0x4, 0x4}, {0x1, 0x20, 0x7, 0xfffffff9}, {0x100, 0x5, 0x3, 0xe00}, {0xfff, 0x95, 0x4, 0x81}, {0x4, 0x9, 0x2, 0x8}, {0x34, 0xa, 0x6d, 0x2}, {0x7, 0x2, 0x4, 0xa6}, {0x307, 0x0, 0xa, 0x800}, {0x1ff, 0x3, 0x2, 0x7}, {0x2, 0xdb, 0xb, 0x5}, {0x328, 0x9, 0x9, 0x4}, {0x362e, 0xcc, 0xb6, 0x6}, {0x7, 0x1, 0x3, 0xfffffff9}, {0xa, 0x7f, 0xb, 0x2}, {0x1d57, 0x2, 0x3, 0xfffffff7}, {0x2ea, 0x1, 0x4, 0x2}, {0x0, 0x7f, 0x31, 0x7}, {0x4, 0x4, 0x10, 0xffff}, {0x80, 0x0, 0xd9, 0x9}, {0x6, 0x6, 0x8}, {0x800, 0x7, 0xe, 0xfffffffe}, {0x8, 0x7, 0xe0, 0x1}, {0x8001, 0x4, 0xd, 0x5}, {0x0, 0x4, 0x1c, 0x5}, {0x7, 0xe, 0x9}, {0x7, 0x0, 0xc, 0x80}, {0xccf4, 0xf7, 0xfe, 0x1}, {0xfff, 0x5, 0x5, 0x7fffffff}, {0x7, 0xf0, 0x91, 0x2}], {0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x548) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x0, 0x101}}) sendmmsg$inet(r7, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090) ppoll(&(0x7f0000001400)=[{r6, 0x2420}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0xffffffffffffffff, 0x2004cb, 0x1, 0xa1d, 0x68ff, 0x4, 0x0, 0x19, 0x401], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.466692544s ago: executing program 3 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000140003040000000000000000b13f00007ad88ba94c77ec5e107b43597b94ba1b9dfa82a9a82a14f06809d854cd38d0148c5fd7d614f2feaa2b21d4efd627ecd196402f95059b73c7c6beeab12617f7058bd65647f61bcca5937b251567cea6f92a91274ed254817f2d658ae1c29e1e46bdadd99efdb7ec6f50b8044721c780ca76cb5137f42585f55e36c53046ff895a", @ANYRES32=r3, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0d0028bd7000ffdbdf25ca070000000000004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x28008080}, 0x48000) 1.402731429s ago: executing program 3 (id=1109): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) unshare(0x72040000) 1.342122364s ago: executing program 3 (id=1110): r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x80085610, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000006c0)={0x7b, "5d5089748723ea6b0d699f6ee5cff42c29df3f08a0f68a31019075a6a8eafed2", 0x5, 0x4, 0x7, 0x6, 0x4, 0x4, 0x4, 0x400}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f00000001c0)) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x10003, 0x414000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000340)=[r7, r8, r8], 0x3, 0x80000}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) close(0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="0016cf9153b37e58b8bb87edbe9e97000000", @ANYRES16=r11, @ANYBLOB="010000000000fedbdf2503000000400001802c0004001400010002000000ac14142400000000000000001400020002004e240a01010000000000000000000d0001007564703a73797a3100000000"], 0x54}}, 0x40000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r13, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r14, 0x0, 0x0, r15], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000240)=r16) 1.153970112s ago: executing program 2 (id=1112): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x33, 0x0, &(0x7f0000000540)) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) (async) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) 1.153581537s ago: executing program 1 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x1, "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", 0x47, 0x1, 0x0, 0xc, 0x8, 0x40, 0x9}, r3}}, 0x128) bind$802154_raw(r1, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000041) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.101793716s ago: executing program 2 (id=1114): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x74, 0x1, 0xa, 0xb, 0x1, 0x81}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfffffffffffff001, r0, 0x80000}) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000100)={"943ee4e41dbe64b2bcb1e640f80749416a2dd768d666d406333015cde382", 0x9, 0x2, 0x1, 0x8, 0x6, 0xe80, 0x9, 0x4, [0x1, 0x2, 0x8, 0x269, 0x10, 0x80, 0x8, 0x1e32, 0x7fffffff, 0x2c0, 0x380000, 0x3, 0x10, 0x3, 0x3000000, 0x6, 0x8, 0x2, 0x6]}) sendmsg$qrtr(r1, &(0x7f0000001540)={&(0x7f00000001c0)={0x2a, 0xffffffff, 0x3fff}, 0xc, &(0x7f0000001300)=[{&(0x7f0000000200)="ea12ec6d0041d523e4ebc2578b723e00d51a4c6ccd68784947b3858a9f32b0cf8bb2387485239cfa7f9881218683b37bbaab9f20d56c9844b9b7985d7b3da0abae073c9ccff912b042a7e1e0096a928f004645f711a03bc91eb0a964fdba15eccb499c45580354f4ac569eb01920a57fea77ca239494a95ae0675230de665459c0f75ea22ea853b4d63d44d7738d88d46902e5113e0c58ddcfbadbc3d0e672e8bb778b6991abeb8e7dc71c1be1284fd0a6362ba2c9984f8889ce42e973d31f997bf2d21e209ca0ab0427b4f8750373a19973e0db8cc0e0e1d2a06d39128fce4d460532e4c296e60f936f6e024f36a920346b4cf801fa02e6fb4c17784798afce273cbf757f0ee44af785dee12ba668a06137d8934c98ecccce9381db5880deee8a522f0d473acb0ae23b44933565248b466c307a65bacc9614a8938a5227a9de1ba5a08598ce3079820815bdf29d9ddd5ac1afe885de2d1423db373efdbc1a4c72a03577eb516b88e55780678233291085b6d2ffbcdef8546b3eb6538607e953fa2e6cef3f8663c6088b92e4c41c4b38767f5c105fe08e93adde868642a064f1aacfd7eb446f2225c052a0dea0b04e84a5634cf699ab27be6dc6d794767d9163482ee1cdb2999982d8a8b87c458d2ac09884ee9ec27fc178fca99b08dc2eb62c55eb5ade245066b85a0bfc46f88e62138bf2a99255a86e269acfcf2fccd7a9c7e53397f0c5350ca47ea1ba1831cc3bac0a4d1f288cc2f133ad5827ef3522164604604fedd934217adf5708dbdacaf040eec3098e887fe71b9a70558c73084f0822d7ef69ccc93ed783576da76aaee7d2312adc1d383cebbefc1da832aae12487ef462fb02a5b021100e532c3b03cbcf067be0c03df639bb23b6ae21f993303b4c2bd2a582259d977edec5f3dd63983a4ff994e415bd8ca1c7da0e80d2264c8fa40b31b2b0a7190d13b8ebe90f1d52f6537efc7e88c803841d56ab79e99b69c19ce42a8a4f9ed9fd3140b76f0b41cfd7cdb125175625cf37ae92bd896e299e7eab8f6271c46153498b540810e966502202f3bfc98eb7c2d367235cecc2d6b761d8a175c3a3e4136ecedb6eab1571ca850fd10d6618914be9672c18b2deb5165b69fdd6c40c52d6ef55b62519df3a8c4afb9e53cdcaeba15f31a4d911a6aa818364521a8cc256f8f7b8a0872a5c21c2983736ecff163ceb039239ad0b53f197c0f0ef1a05b2c1c86e343daffd3d8128185bfc8da7c481628d0a581c18b438f2a474296cc533dab6e7dee80fe1785bebf4921f3389012eeefed208176b16480179e4aa01ee6108c514d25935edbabbf4222bcef9ca10a3785b4ac73cdbc4d0b21a2056d66b339f7081d9856d239d1c2c621d0a1426582f1420a12cb5ffcf89e6ff7ab470191fcc522fc057c109cb32dd25e69140786fdd5a9e1773cc6c3affb56acf0062741070da1ee8812146f7c7cf01c81d70df5e565ffa4b2c54b612ee980f07fdfde88fa2296963e2b3dd0bb1511fd3b8d7c2ebf87a56a9ff76a2dcbaad5199b14c3602c14726ffe17948aa9cdbca329eeb4fd749495294b5a383f7d6ce30eb70b5f942770732edbddb202817bc6875d2d192c1d1d50343b6bca34f6ef5885e60fb5b3b069910828ad5c9b5634cf190a4c2555d325c608ed430c721fd5c6e120105c045951c672458e29e15f4c5249c926bd5623fc4a4d6acdc509bcd0473169eba0c6fd0c48859adf367ef809fc886112704616d5a943887a766c6dd47789dffbf965be5b692ff7710836367b426e91f9895d69c6e2a09dee8a32017c271211854011f88da6e47036cdb798df608d9cb7efb3c2404e77583fb1ad261996bf5f2a7c07e3853913af28b6007d2b665b03d05440e4ee9d80c217c11f6aa200caf463aac343f4205baa20050192ceca045598acaedd5a4be4a5cde3c1f51feb46bb8529f23eab8083e0350b905c25bde11f8d6ce8a8e506e6ef660b9e53e7316565c96ddf598c12ab968d08bdddba9f126a22eb636ec65dab55b9c8c7436e6b143bb3184ac462a0511160e9cf8f48593a50ef02bfd3098be90d164469fadc5c613a6982e973aadf8e2769a19e1b3e5606f94367e8dc25dcee075b6a7a0d23513f1f2e66aef1855297c38692fb2a2c1d987c188b0c53ad498ab16d236db64e198d0eafe09ae9ba130733fcc935f1439ee302ad274a497d4253573df21ac3b98165fb036a29aaca5ee7cd2a798270ec3b6660a18ffef826904bdf0f25ae9eed2311a30461510607eaa2fcd2b4754c3c006adefceaa898ecd6979771e3b5fce87bba0b7cdab4bc7f48d4f7ba3d603de53c6c1ec87b0f573e4f32492c973a79dc163cc0fd16670b3f7c45112c37c6b365e56df3e1f72d66fff6b2a201bad467b2d43a262e831878e0365cc3e943719400129403efb08cdf5a8cebab4a9f663c73571046b0842930463867c7c018c6e4c164b98e54959f06c3de1bf9f29d988d74c43c15aff718526d2d049c64f6c1aedd3d5c8b448339d3b88e3fdbd0f9b2d1f10e3ea9d81ce55d19208f18da4e83b90997e2b3cc06049634087dd4f9058605397508cfa27324569103dc328ebbeb24c042e3776c4981fe540ee6624496e756e7761b6159064d5a625587bce7455c29e15cb40b2c62cb17e8a887908705b5f1744f12f01f0de2353fd146cd65297c945c761772fa2f9cf40af6a113a868637ad3a49b969acf5f959052ff5bff2c1565e037190c153efa55a8c03e5cd34ca269b42fd9d19ea43b21865aa1d2a8024da232b729d3d3dc6073c4c5dc2aa7aa39918046cd1a2de1ef385fde6c21b7dafc8cf954769eb3982d0f372d28cdd25e6bad1626c983fc33ef2c196f74a802af7a522c872f5f011365deb01982be642b3a2f19f2780fa38f489c7409a09fc4a088fa2a2c5e2eac98f0efe8032ea55c434960156ad24c35b57aae75c230e7769720c45c3f6f4b378b504933800b389d08c90f75006111dd1a3b0750ebd26df43fc1137480f233ed665afba4ec06f5df55fbaa436e6b64ecc74c862aefdc835abcf7f9905751bf1769566078922883bf7fed3616c2711bdc23da6752f2c4cb8d2ad84fb63a053d2599c88526db310f81adca0288f2da1e6e664402404bbd11104898df6a1e0ed6bb463d28f71ef213b65dff351decc2a6ae8898dfbb98bc966708e81ecdec6596953d392d88922798b8f154d8a2361474b41ba46d8b7c3e55059912d1938419ab7b299aee23cc117662d6172d2767ad5de31a8b46150cdc6c01d5c03a41aef668bf306ea3285fb5ea3f2bddfb513b720eb2d6c937274fcbeebe23280ac4cff926e2d5bc3d8c90bb22850e24958898551e434fdebd77381c6f2f5eb7a74cd18ba59517eef49590c7a366a611b222b229cb50d2c4741c3304e144630e05422622376bf05e808ea8c4d589e0c2306e9826f4333cc0e86455c4b73faba4ad78f93add645e222e76395408627481bfc6d19b5f4473f42adbae981854ddd7ab5e3cfe07813a7d2caac8dc4416c63a0c2e7c0f2de49e7c7cf93eeb573c32f25cac355ebdd54b7ca3d65cac65feca82bbc36982ff65f4d3c97f88ed26c4cd56340fbc4329b2af714d2dcad811a1a802c7016d55b74fb64b2149c59fba79af794ae4513a8139438d500bf13683163a6740810fc82449ae69cd8295806cc43bb8d74fc8d926a7dfe50064501d9d4d2ad13e318e52f559d102d6ac0139bed20061501cb7f85631a82e8ed7faf6819b6a8dd099c5e12f34deb362fd35308c43efa13bdf80e1d56440c1ac784ad961258ec3246f147258ede59ed343be8f3b6da9a51e6fdde45d7f8386f4696f8d62bf09ba19adda0a18f8a065721a48a649482488f640b80488c59e6e9817e1a3776d50871b19caa1eacfcdc0a71c874c36010dbfcb64803c26973bfef40e22c1abd72968081e1e503be0afb2cf959b283a90d71a38f5c9a7a8992e7afaa5b0976ed48fd0df26eadab28ff6b1b198ebdbe95a3a876ce60f4311fd8dde423f3bd8551878e59736a7f7e809d22348e8c8879e8bfe59342de7a55e6282dcf15fa92d395d18145b0d633c8d414c4c717ca2a523375ffb64c24a39cd1ef3c025a2be779b94ea2d88b8ca14db71bdef439bb366f8565ca5cf7f902da060a381dbc2b21f70b720eaf376528f93ac2d77e9fc433897854d9987f4683b542da9222b64ffe01549923f2db7c4fb27ad5e41fd2c85dfbdc076b007eb3980a02fe794fb03e1eb0def59d7aaa96983545b89138acc1cc3e8da7c55ca413b010cdb2d4d4e50e05dd517c33d2d648b756f6358236249d3d901567bd7e10158fcb59a03dd2908eaa38bae1297e0099128eb1b8d5955a83dc9eb4bac3a2f1c24f25bec0c235c7a742ff1af9447b6e9f53d27af7909d8812a9315880ad492cc9564cd348675faa5942e86680eba1d9eafe60b53354c5b7a4dd0f207b44d2417508cee3db2997a3b55b446cb3927fcd1180289846a1409eb4178f14b0e3412daf24b4e1ffe0dfa34d2377d33be9d26de48b4774fc9700370431fe3ac70f83abb50783773912ddb391ae085c1568cca16465d94263080ce2c9dbdb215abe35be5af1b2dd0dcec18f722077a274e474acccc69b57ee34a9230336d2ffc9095b62b8a3fe7941c368bd5a67ee8769ea1c5deb493eff17a01900ce01bca7fbce2ad0a48e8f4f3e94c8dd2d736990a119584bb0c70f4560076f771af33ecaf3708d7980e1aee8a8a2670374cb5373cd3c754f9bd0fc129acb43fe4c6ab30fe6f60ab37251cd562ad6e18fa42d66a3ff112f3b01dd0447ce7550b95cdcebe5d8246b0e645578039cd2ff10c11bca481d893730ef2031ce5ee643265163f0e8052a60d0b1429001663ad5445c397906931a56bb9d1db54204346f6c3bc70c37c8cf2ca0d84a616fa2cbbd0ad9e7d7cfcc0cb059df7deba83c002aa7ede3e17e5bcba4f154f147c88e656228da439519d43349b26fa8b8cebbf1f88cb5e1a5ed7cc1dc7dafa6dc95800bf0c454fa32550e7840c08bb1eeb150c0633cf0d3d03361025952d1909c19913a5658fedf5655dbeea99720670965334e67813b195f610bb1980be3caca0dceafb79d95dbd224587e2b2401c6275779e15f38cfa3490b4919d0990fbc9eaee77fb0420419bc2f43c9cc436ac957f2d8610b8ecd4442de616d2144bacd36b485a105ef539597dd0f46350410f30730d9322d82fd5fd0750bc07b098004eef28084bdea79508efa3c7098f02493bd87a203b2e7ed9d91f9b3ec371001d9e0fdb963dec8bf143d8d236aa9179f48ffa4c4687361e7e91843049e4e2562ae61b6d1d3a3eff322509510cb98c6717d898e69df041630595855fd1550e8d7149ab8bf9ba545a03db4d1c74f3fc0f8f71bd93c904304f64334f9548213f5c81f2917d42e73f4eb093ff5ac2da3bdc8bae30f219e2d2034da00a10401acf498e3340723f4cde9b1a2bbc445705e54d27f12a83267d2bac478db9b3da3d0d3c8004f792ae29ea990ae3ab2e55567cbe24ebbb65ef0808e53b0c1b7ed7e9a60c1fa188697a13e290226d4e3e7b9b8e20bca1296bbe52820e282508b5d9cbfc5f5bfdbbfd34035924e40c39db1811016da7c1779cdd482fa452c5075e037340b51f1e9e86e838367054441810ad31738fd1621bf630a1d3b95ab0a05b19e790d6d175c9c77c389447da23135cc4bdf3d45946cc0ad24fa0553f40a65cf81ac5a09018effb93f13604fa96ffb6053c0edf69c669eed1ef7e11cac757da0e3e0180b6a66be94f9ab1cecce03010604ebe373a3b", 0x1000}, {&(0x7f0000001200)="ec661e8cc879bc1411ef8bf0083717483c6f773c9f3d4d44db40cad51a1eff92c7183cb6780289621fe0e0bbf1492a4232c27b506ddea037e645c95a6c190398e1f8f7d70e19bb54eb8496c7e684ce0a5497f6daa169d968715bac7db6f4bd4ff2269425187d0957fc5acacc5c7d1467372ce0cb4b6b8f978b0c19c1d1745912", 0x80}, {&(0x7f0000001280)="5975c0cb7921a1fc3792b0ee98e268704014ba43fac8a9ec4a9f4c2497a1240ab4812a2fe2c17d1f623caa76078f960c13d88195be69289f0744825cea54686944e273d0647455f423496fd455b0f6355d2ee46e", 0x54}], 0x3, &(0x7f0000001340)=[{0x10, 0x113, 0x3ff}, {0x40, 0xff, 0x9, "be7b6f54a2998e849fb8f510b0f3b27185b82f60511179f443a4e91d56a9938cbeec984395198675a1790764"}, {0xb8, 0x10a, 0x7b, "5369b21380a518bae7221c180394777c5e2e70527884132e738226afa00326c27743c7bbece95cebd72fa98bd668dc9690c71045f8d89eb1dd58e596e5b1a9f438baeae0bd2834092e8d41bfe25dd50f3d4981bbf7e0a39193e4736d85ff46cda5c88d1db9632383fcc19b3705a31622f6dfc6e7f2f79ff6a0c7a47d5b93912da1d5c98dd308c6387931477803c0a5cb71e139c18ba868c9899dbf311c8d5a61bac884"}, {0x90, 0x10e, 0x2, "bd8ce165e2fdb69ae64d1d855549fb648ce7e1a53d3c2d7bef7b486d32c553f62adf6fed050e8e996fd2a1ff78d520f5feb2751576896ad9786feb05cd935273aed636e818fe30ea607be22c142bd9eaf111a03a420920548582c63e8e9b0c0c78044bb232d2787d6f770738f8ece36fdea3b57ddfe517bd62d4ade0424f"}, {0x48, 0x10d, 0x1, "3e6a4951f6bc7104927dee861bb8197d0f20da20549584d433f68535029004ffbdbbfc226b44b9c26bbff4f01e0472052123"}], 0x1e0, 0x20040050}, 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001740)={{r2, &(0x7f0000001580)='$\x00', 0x2800, &(0x7f00000015c0)={@_ha_fsid={[0x800, 0xf82b]}, {0x8, 0x10, 0x6, 0x3}}, 0xb1, &(0x7f0000001600)={@_ha_fsid}, &(0x7f0000001640)=0x3b5a}, {[0x1, 0xa, 0x9, 0x1]}, 0x200, 0x9d, &(0x7f0000001680)=""/157}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000017c0)) fcntl$getown(r2, 0x9) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect(r4, &(0x7f0000001800)=@in={0x2, 0x4e21, @remote}, 0x80) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000001880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001a40), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b00)={'pim6reg\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x7, 0x3, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, {[@rr={0x7, 0x1b, 0x58, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @multicast2, @multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x34, 0x2f, 0x1, 0x3, [{@multicast2, 0x1}, {@empty, 0xe73e}, {@multicast2, 0x101}, {@multicast1, 0x101}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@local, 0x202}]}, @timestamp={0x44, 0xc, 0xd, 0x0, 0x1, [0x8001, 0x2]}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x0, [{@rand_addr=0x64010102, 0x80000001}, {@loopback, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x7, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x4}, {@private=0xa010100}, {@empty, 0xb}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001cc0)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001e40)={'ip6_vti0\x00', &(0x7f0000001dc0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x5, 0x2, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7800, 0x3, 0x83}}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001e80)={@private0, 0x0}, &(0x7f0000001ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f00)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002240)={r1, 0xe0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001f40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001f80)=[0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000002000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002080), &(0x7f00000020c0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000002100)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002300)={'gre0\x00', &(0x7f0000002280)={'erspan0\x00', 0x0, 0x80, 0x7, 0x400, 0xff, {{0xc, 0x4, 0x1, 0x18, 0x30, 0x67, 0x0, 0xff, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0xe, [{@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@multicast1, 0x200}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b80)={&(0x7f0000002500)={0x658, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4541}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x8, 0x2}, {0xfff7, 0x0, 0x80, 0x6380}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x1f0224ed8e7ea0d4}, 0x0) 1.032100863s ago: executing program 1 (id=1115): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r13, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'virt_wifi0\x00'}) 938.194676ms ago: executing program 0 (id=1116): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1000000, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xd, 0x4, 0xfffb, 0x2, 0x1a3, 0xe3}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="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") dup(r0) (async) r4 = dup(r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xffffffffffffffff}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) 915.853948ms ago: executing program 3 (id=1117): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000d"], 0x18}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}}, 0x0) socket$inet6(0xa, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/94, 0x5e, 0xc) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 850.912893ms ago: executing program 2 (id=1118): unshare(0x40020500) unshare(0x20040000) 731.96441ms ago: executing program 2 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) 727.928304ms ago: executing program 3 (id=1120): syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) chdir(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0xcd, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x9, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x1, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x18, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) 642.411948ms ago: executing program 0 (id=1121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0xa, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401, 0x0, 0x7}]}]}, 0xfc}}, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd83, &(0x7f0000000740)={@multicast, @random="9366f942d32d", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0x4, 0x6, "d2383a", 0xd49, 0x21, 0x0, @local, @local, {[@routing={0x2c, 0x6, 0x2, 0x2, 0x0, [@empty, @empty, @loopback]}, @srh={0x33, 0x6, 0x4, 0x3, 0x7, 0x68, 0x9, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x6c, 0x174, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x7f, 0x6, [0x68cb]}}, @padn, @ra={0x5, 0x2, 0x9}, @generic={0xa0, 0xb80, "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"}, @enc_lim={0x4, 0x1, 0x95}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x4, 0x8, 0x6, [@private2, @mcast2]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x7, 0x0, "30e461", 0x5, "1b22d9"}, "38c7f87669e8f3f7edcd566482c6002c8c8668613f3a690ebf21bbcb38a4a51f64aa4aa3c77735446eb40be9de1a008b88138d55a5289116c7aaccbc67bbecdbf96781a421c477e72e38f321428f8a6699f6062282a27e33903dd969804c838acad02c515c78809ed13491f76fbdbfea0cc92d9487103db3e32c6d88e0019e1cadb33c252624b60b282c2e9dcd1127781c9718013e8368dd58423744814e8da0e3542640f5f064e02aee1c97f555ffbaf1e0389b1ca3caa05c66a809cd95696f126f1a4b572f0ae3e074fae56633d22ddcc8111c2dc1db72bb170eb5dcc105b40b"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000080)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) mprotect(&(0x7f0000468000/0x4000)=nil, 0x4000, 0x2000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) close_range(r8, 0xffffffffffffffff, 0x0) r12 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 642.065101ms ago: executing program 2 (id=1122): connect(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x0, "95377c3f880f0201a15060f13e15e4dc2d5d6586667770ce73969e3d994009147d1637dd69d7fe4c1465402f81fffd7a7a4ddfe3042cd2cd3bdfc0510696eea517ffbccfa6303966334aa4c0e36a8c2d9d4a875bfd68da0b8c588bcdf8cc9b4d4c8812d18cddc9a07aa7eec08d5247ee26a976f3099963696db39301df7d"}, 0x80) 641.056365ms ago: executing program 1 (id=1123): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0xbb}], 0x1, 0x0, 0x0) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 542.649948ms ago: executing program 2 (id=1124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0xfffffffc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) fsetxattr$security_ima(r5, &(0x7f00000007c0), &(0x7f0000000800)=@v1={0x2, 'Gq'}, 0x3, 0x2) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001e40)={{r3, &(0x7f00000000c0)='[^\x00', 0x101000, &(0x7f0000000180)={@_ha_fsid={[0x4, 0x9]}, {0x1000, 0x2, 0x9, 0x7}}, 0x6, &(0x7f00000002c0), &(0x7f0000000340)=0x80000000}, 0x5, &(0x7f0000001d80)=[{0x0, 0x800, &(0x7f00000003c0)='/dev/fb0\x00', &(0x7f0000000440)="9d11ce442118d68c1801612c14020e4aee654d4b516e4bbbffd3d92fc851e7f98741794e02eeda23e97faf15a3fa8cf2ca4da9a2eadab1c2c31eaab79968de3c8f5783817e055c897a683b0261e10094334b0ab326395dedc60aac33288a7537706bbff86f2f0ae39afc9dd35373abc5aad4ce1166d6441e9e1caa2aa6bbbfaf05e218c053929f6cf4ad3340b25c32246b8dadae07e8a594ac23bbf6e627ea36cf27487a56715e1fdec98af101d3168cb91768d750ab41", 0xb7}, {0x2, 0xfbc, &(0x7f0000000500)='/dev/fb0\x00', &(0x7f0000000540)="aeeb072986fbf839497221b0905b23262770c7ca113811e27a0a94d5d73003bb39cf6355ea9855d26a419027bc9fd0c48a10fc4d76db1412dc4d8004d43c28adabd1a4b2cf8b3e3eb62defb0c831b2beeebc4b41d73176f654f58551aab24a5113c389f64d62ebe9933e3c11341e0d84b08892a0d7be6ee5295e4b4bdecf95c0b85b401a3cc2", 0x86, 0x20}, {0x6ca18299c7390d7c, 0x1, &(0x7f0000000600)='/dev/fb0\x00', &(0x7f0000000640)="8ae1b3b5b047da9a65e4518750680f577a10073256bba7e8e92baac02fdcb6cc28fe4ac32c98c127688107878ef892f429b737ace5af8903b87bcd5f569139d4300f0e0e3bb4940c8f98344c03599f6089f7a4ef0de038bf951f90e15ab5f39fbc4d1a9ca8ae291d41c0c166b4a121a6ce64526bac94f2e5b26d967999644be69cf69c6a702d3e0c4031225ff680b3edca324a0b40d937b84095fb24ecd346d665cacb1a4f21d831e49fbaab31de86f51ec7f73b28726e7c6e2b3f21c413", 0xbe}, {0x2, 0x2, &(0x7f0000000700)='(:)\x00', &(0x7f0000000740)="780bba785d8286c2f8ec68fb1305fc240e0f5607c31377", 0x17, 0x32}, {0x3, 0xfffffffd, &(0x7f0000000780)='&\\*\x00', &(0x7f0000000d80)="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", 0x1000}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r11, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x19}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r11, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc12, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 482.556572ms ago: executing program 3 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x3, 0x97, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x6, 0x80, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "15ad"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x5, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0xff00, 0x1}, [@country_functional={0x8, 0x24, 0x7, 0x0, 0x3, [0x9]}, @mbim={0xc, 0x24, 0x1b, 0x91c, 0x2, 0x55, 0x80, 0x4e7, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0xffff}, @mbim={0xc, 0x24, 0x1b, 0x738, 0x7ff, 0xfd, 0x4, 0x8, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9a, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x81, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x8, 0x4, 0x8, 0x7f}, 0x79, &(0x7f0000000440)={0x5, 0xf, 0x79, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7, 0xf0f, 0x2, [0xff3fc0, 0xffc0f7]}, @generic={0x32, 0x10, 0x2, "bd0ae984d6cdc2fd003702a0450449471c321e36af2ef2aba12a055aa4f0607dddbcb3fd55220d6d112c34ca85209d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x3, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0xa, 0xf00, 0x3adf, [0xf0, 0xc0f0, 0x3fc0, 0x3f00, 0x3f30, 0xff0000]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x20, 0x11, 0xc0, {0xc0, 0x30, "b8cf58d4b9917016ba55527174fd0095ba953edfdfe8886c234967b27e555c743ec421cf2f08315ee85443ae39447136bada75b6c29642f84fdbe1ac4cac0d27ce90e9545a12551078fd8cebddd4b7dbaa5a581e92904e8cce000d0acf1bdc0858dd3739a93f62e2ba1367a0f7ae4a87916af6d1a477e2e6c57f0fa76cac568d8a5a659571d15f9e59e90fe714914e2fc679841970f01c4ec50ae511fcdb58aa53e8ffda7884ee7d82dbb4d179359da1af5ef9d84471c9bb60b766b3c161"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x5, 0x75, "e8b46b59c8f122863de715fb0f091819ef7ff8c071fb540cfee570fe0e5239c2adaa5d8afb122e64191f65ea4871df80a5df6f092403a956c4cba7020b789206f2d60385bd4243984d80dc3db17ea9fc7c903d101dd6ecb2bd18c06b330ce041365d8f945ffe8229a303c1e6359287ee0429ba910e"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0xa8bd, 0xb, 0x4, 0x6, 0x6, 0x40, 0xa9d6, 0xa6, 0x1, 0xc, 0xd, 0x1ff}}, &(0x7f0000000800)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0xff}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x5}}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x403, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x26000, 0x3000}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xad}]}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00\x00\x00\b\x00', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x5, [@multicast1, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 481.695456ms ago: executing program 1 (id=1126): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x74, 0x1, 0xa, 0xb, 0x1, 0x81}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfffffffffffff001, r0, 0x80000}) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000100)={"943ee4e41dbe64b2bcb1e640f80749416a2dd768d666d406333015cde382", 0x9, 0x2, 0x1, 0x8, 0x6, 0xe80, 0x9, 0x4, [0x1, 0x2, 0x8, 0x269, 0x10, 0x80, 0x8, 0x1e32, 0x7fffffff, 0x2c0, 0x380000, 0x3, 0x10, 0x3, 0x3000000, 0x6, 0x8, 0x2, 0x6]}) sendmsg$qrtr(r1, &(0x7f0000001540)={&(0x7f00000001c0)={0x2a, 0xffffffff, 0x3fff}, 0xc, &(0x7f0000001300)=[{&(0x7f0000000200)="ea12ec6d0041d523e4ebc2578b723e00d51a4c6ccd68784947b3858a9f32b0cf8bb2387485239cfa7f9881218683b37bbaab9f20d56c9844b9b7985d7b3da0abae073c9ccff912b042a7e1e0096a928f004645f711a03bc91eb0a964fdba15eccb499c45580354f4ac569eb01920a57fea77ca239494a95ae0675230de665459c0f75ea22ea853b4d63d44d7738d88d46902e5113e0c58ddcfbadbc3d0e672e8bb778b6991abeb8e7dc71c1be1284fd0a6362ba2c9984f8889ce42e973d31f997bf2d21e209ca0ab0427b4f8750373a19973e0db8cc0e0e1d2a06d39128fce4d460532e4c296e60f936f6e024f36a920346b4cf801fa02e6fb4c17784798afce273cbf757f0ee44af785dee12ba668a06137d8934c98ecccce9381db5880deee8a522f0d473acb0ae23b44933565248b466c307a65bacc9614a8938a5227a9de1ba5a08598ce3079820815bdf29d9ddd5ac1afe885de2d1423db373efdbc1a4c72a03577eb516b88e55780678233291085b6d2ffbcdef8546b3eb6538607e953fa2e6cef3f8663c6088b92e4c41c4b38767f5c105fe08e93adde868642a064f1aacfd7eb446f2225c052a0dea0b04e84a5634cf699ab27be6dc6d794767d9163482ee1cdb2999982d8a8b87c458d2ac09884ee9ec27fc178fca99b08dc2eb62c55eb5ade245066b85a0bfc46f88e62138bf2a99255a86e269acfcf2fccd7a9c7e53397f0c5350ca47ea1ba1831cc3bac0a4d1f288cc2f133ad5827ef3522164604604fedd934217adf5708dbdacaf040eec3098e887fe71b9a70558c73084f0822d7ef69ccc93ed783576da76aaee7d2312adc1d383cebbefc1da832aae12487ef462fb02a5b021100e532c3b03cbcf067be0c03df639bb23b6ae21f993303b4c2bd2a582259d977edec5f3dd63983a4ff994e415bd8ca1c7da0e80d2264c8fa40b31b2b0a7190d13b8ebe90f1d52f6537efc7e88c803841d56ab79e99b69c19ce42a8a4f9ed9fd3140b76f0b41cfd7cdb125175625cf37ae92bd896e299e7eab8f6271c46153498b540810e966502202f3bfc98eb7c2d367235cecc2d6b761d8a175c3a3e4136ecedb6eab1571ca850fd10d6618914be9672c18b2deb5165b69fdd6c40c52d6ef55b62519df3a8c4afb9e53cdcaeba15f31a4d911a6aa818364521a8cc256f8f7b8a0872a5c21c2983736ecff163ceb039239ad0b53f197c0f0ef1a05b2c1c86e343daffd3d8128185bfc8da7c481628d0a581c18b438f2a474296cc533dab6e7dee80fe1785bebf4921f3389012eeefed208176b16480179e4aa01ee6108c514d25935edbabbf4222bcef9ca10a3785b4ac73cdbc4d0b21a2056d66b339f7081d9856d239d1c2c621d0a1426582f1420a12cb5ffcf89e6ff7ab470191fcc522fc057c109cb32dd25e69140786fdd5a9e1773cc6c3affb56acf0062741070da1ee8812146f7c7cf01c81d70df5e565ffa4b2c54b612ee980f07fdfde88fa2296963e2b3dd0bb1511fd3b8d7c2ebf87a56a9ff76a2dcbaad5199b14c3602c14726ffe17948aa9cdbca329eeb4fd749495294b5a383f7d6ce30eb70b5f942770732edbddb202817bc6875d2d192c1d1d50343b6bca34f6ef5885e60fb5b3b069910828ad5c9b5634cf190a4c2555d325c608ed430c721fd5c6e120105c045951c672458e29e15f4c5249c926bd5623fc4a4d6acdc509bcd0473169eba0c6fd0c48859adf367ef809fc886112704616d5a943887a766c6dd47789dffbf965be5b692ff7710836367b426e91f9895d69c6e2a09dee8a32017c271211854011f88da6e47036cdb798df608d9cb7efb3c2404e77583fb1ad261996bf5f2a7c07e3853913af28b6007d2b665b03d05440e4ee9d80c217c11f6aa200caf463aac343f4205baa20050192ceca045598acaedd5a4be4a5cde3c1f51feb46bb8529f23eab8083e0350b905c25bde11f8d6ce8a8e506e6ef660b9e53e7316565c96ddf598c12ab968d08bdddba9f126a22eb636ec65dab55b9c8c7436e6b143bb3184ac462a0511160e9cf8f48593a50ef02bfd3098be90d164469fadc5c613a6982e973aadf8e2769a19e1b3e5606f94367e8dc25dcee075b6a7a0d23513f1f2e66aef1855297c38692fb2a2c1d987c188b0c53ad498ab16d236db64e198d0eafe09ae9ba130733fcc935f1439ee302ad274a497d4253573df21ac3b98165fb036a29aaca5ee7cd2a798270ec3b6660a18ffef826904bdf0f25ae9eed2311a30461510607eaa2fcd2b4754c3c006adefceaa898ecd6979771e3b5fce87bba0b7cdab4bc7f48d4f7ba3d603de53c6c1ec87b0f573e4f32492c973a79dc163cc0fd16670b3f7c45112c37c6b365e56df3e1f72d66fff6b2a201bad467b2d43a262e831878e0365cc3e943719400129403efb08cdf5a8cebab4a9f663c73571046b0842930463867c7c018c6e4c164b98e54959f06c3de1bf9f29d988d74c43c15aff718526d2d049c64f6c1aedd3d5c8b448339d3b88e3fdbd0f9b2d1f10e3ea9d81ce55d19208f18da4e83b90997e2b3cc06049634087dd4f9058605397508cfa27324569103dc328ebbeb24c042e3776c4981fe540ee6624496e756e7761b6159064d5a625587bce7455c29e15cb40b2c62cb17e8a887908705b5f1744f12f01f0de2353fd146cd65297c945c761772fa2f9cf40af6a113a868637ad3a49b969acf5f959052ff5bff2c1565e037190c153efa55a8c03e5cd34ca269b42fd9d19ea43b21865aa1d2a8024da232b729d3d3dc6073c4c5dc2aa7aa39918046cd1a2de1ef385fde6c21b7dafc8cf954769eb3982d0f372d28cdd25e6bad1626c983fc33ef2c196f74a802af7a522c872f5f011365deb01982be642b3a2f19f2780fa38f489c7409a09fc4a088fa2a2c5e2eac98f0efe8032ea55c434960156ad24c35b57aae75c230e7769720c45c3f6f4b378b504933800b389d08c90f75006111dd1a3b0750ebd26df43fc1137480f233ed665afba4ec06f5df55fbaa436e6b64ecc74c862aefdc835abcf7f9905751bf1769566078922883bf7fed3616c2711bdc23da6752f2c4cb8d2ad84fb63a053d2599c88526db310f81adca0288f2da1e6e664402404bbd11104898df6a1e0ed6bb463d28f71ef213b65dff351decc2a6ae8898dfbb98bc966708e81ecdec6596953d392d88922798b8f154d8a2361474b41ba46d8b7c3e55059912d1938419ab7b299aee23cc117662d6172d2767ad5de31a8b46150cdc6c01d5c03a41aef668bf306ea3285fb5ea3f2bddfb513b720eb2d6c937274fcbeebe23280ac4cff926e2d5bc3d8c90bb22850e24958898551e434fdebd77381c6f2f5eb7a74cd18ba59517eef49590c7a366a611b222b229cb50d2c4741c3304e144630e05422622376bf05e808ea8c4d589e0c2306e9826f4333cc0e86455c4b73faba4ad78f93add645e222e76395408627481bfc6d19b5f4473f42adbae981854ddd7ab5e3cfe07813a7d2caac8dc4416c63a0c2e7c0f2de49e7c7cf93eeb573c32f25cac355ebdd54b7ca3d65cac65feca82bbc36982ff65f4d3c97f88ed26c4cd56340fbc4329b2af714d2dcad811a1a802c7016d55b74fb64b2149c59fba79af794ae4513a8139438d500bf13683163a6740810fc82449ae69cd8295806cc43bb8d74fc8d926a7dfe50064501d9d4d2ad13e318e52f559d102d6ac0139bed20061501cb7f85631a82e8ed7faf6819b6a8dd099c5e12f34deb362fd35308c43efa13bdf80e1d56440c1ac784ad961258ec3246f147258ede59ed343be8f3b6da9a51e6fdde45d7f8386f4696f8d62bf09ba19adda0a18f8a065721a48a649482488f640b80488c59e6e9817e1a3776d50871b19caa1eacfcdc0a71c874c36010dbfcb64803c26973bfef40e22c1abd72968081e1e503be0afb2cf959b283a90d71a38f5c9a7a8992e7afaa5b0976ed48fd0df26eadab28ff6b1b198ebdbe95a3a876ce60f4311fd8dde423f3bd8551878e59736a7f7e809d22348e8c8879e8bfe59342de7a55e6282dcf15fa92d395d18145b0d633c8d414c4c717ca2a523375ffb64c24a39cd1ef3c025a2be779b94ea2d88b8ca14db71bdef439bb366f8565ca5cf7f902da060a381dbc2b21f70b720eaf376528f93ac2d77e9fc433897854d9987f4683b542da9222b64ffe01549923f2db7c4fb27ad5e41fd2c85dfbdc076b007eb3980a02fe794fb03e1eb0def59d7aaa96983545b89138acc1cc3e8da7c55ca413b010cdb2d4d4e50e05dd517c33d2d648b756f6358236249d3d901567bd7e10158fcb59a03dd2908eaa38bae1297e0099128eb1b8d5955a83dc9eb4bac3a2f1c24f25bec0c235c7a742ff1af9447b6e9f53d27af7909d8812a9315880ad492cc9564cd348675faa5942e86680eba1d9eafe60b53354c5b7a4dd0f207b44d2417508cee3db2997a3b55b446cb3927fcd1180289846a1409eb4178f14b0e3412daf24b4e1ffe0dfa34d2377d33be9d26de48b4774fc9700370431fe3ac70f83abb50783773912ddb391ae085c1568cca16465d94263080ce2c9dbdb215abe35be5af1b2dd0dcec18f722077a274e474acccc69b57ee34a9230336d2ffc9095b62b8a3fe7941c368bd5a67ee8769ea1c5deb493eff17a01900ce01bca7fbce2ad0a48e8f4f3e94c8dd2d736990a119584bb0c70f4560076f771af33ecaf3708d7980e1aee8a8a2670374cb5373cd3c754f9bd0fc129acb43fe4c6ab30fe6f60ab37251cd562ad6e18fa42d66a3ff112f3b01dd0447ce7550b95cdcebe5d8246b0e645578039cd2ff10c11bca481d893730ef2031ce5ee643265163f0e8052a60d0b1429001663ad5445c397906931a56bb9d1db54204346f6c3bc70c37c8cf2ca0d84a616fa2cbbd0ad9e7d7cfcc0cb059df7deba83c002aa7ede3e17e5bcba4f154f147c88e656228da439519d43349b26fa8b8cebbf1f88cb5e1a5ed7cc1dc7dafa6dc95800bf0c454fa32550e7840c08bb1eeb150c0633cf0d3d03361025952d1909c19913a5658fedf5655dbeea99720670965334e67813b195f610bb1980be3caca0dceafb79d95dbd224587e2b2401c6275779e15f38cfa3490b4919d0990fbc9eaee77fb0420419bc2f43c9cc436ac957f2d8610b8ecd4442de616d2144bacd36b485a105ef539597dd0f46350410f30730d9322d82fd5fd0750bc07b098004eef28084bdea79508efa3c7098f02493bd87a203b2e7ed9d91f9b3ec371001d9e0fdb963dec8bf143d8d236aa9179f48ffa4c4687361e7e91843049e4e2562ae61b6d1d3a3eff322509510cb98c6717d898e69df041630595855fd1550e8d7149ab8bf9ba545a03db4d1c74f3fc0f8f71bd93c904304f64334f9548213f5c81f2917d42e73f4eb093ff5ac2da3bdc8bae30f219e2d2034da00a10401acf498e3340723f4cde9b1a2bbc445705e54d27f12a83267d2bac478db9b3da3d0d3c8004f792ae29ea990ae3ab2e55567cbe24ebbb65ef0808e53b0c1b7ed7e9a60c1fa188697a13e290226d4e3e7b9b8e20bca1296bbe52820e282508b5d9cbfc5f5bfdbbfd34035924e40c39db1811016da7c1779cdd482fa452c5075e037340b51f1e9e86e838367054441810ad31738fd1621bf630a1d3b95ab0a05b19e790d6d175c9c77c389447da23135cc4bdf3d45946cc0ad24fa0553f40a65cf81ac5a09018effb93f13604fa96ffb6053c0edf69c669eed1ef7e11cac757da0e3e0180b6a66be94f9ab1cecce03010604ebe373a3b", 0x1000}, {&(0x7f0000001200)="ec661e8cc879bc1411ef8bf0083717483c6f773c9f3d4d44db40cad51a1eff92c7183cb6780289621fe0e0bbf1492a4232c27b506ddea037e645c95a6c190398e1f8f7d70e19bb54eb8496c7e684ce0a5497f6daa169d968715bac7db6f4bd4ff2269425187d0957fc5acacc5c7d1467372ce0cb4b6b8f978b0c19c1d1745912", 0x80}, {&(0x7f0000001280)="5975c0cb7921a1fc3792b0ee98e268704014ba43fac8a9ec4a9f4c2497a1240ab4812a2fe2c17d1f623caa76078f960c13d88195be69289f0744825cea54686944e273d0647455f423496fd455b0f6355d2ee46e", 0x54}], 0x3, &(0x7f0000001340)=[{0x10, 0x113, 0x3ff}, {0x40, 0xff, 0x9, "be7b6f54a2998e849fb8f510b0f3b27185b82f60511179f443a4e91d56a9938cbeec984395198675a1790764"}, {0xb8, 0x10a, 0x7b, "5369b21380a518bae7221c180394777c5e2e70527884132e738226afa00326c27743c7bbece95cebd72fa98bd668dc9690c71045f8d89eb1dd58e596e5b1a9f438baeae0bd2834092e8d41bfe25dd50f3d4981bbf7e0a39193e4736d85ff46cda5c88d1db9632383fcc19b3705a31622f6dfc6e7f2f79ff6a0c7a47d5b93912da1d5c98dd308c6387931477803c0a5cb71e139c18ba868c9899dbf311c8d5a61bac884"}, {0x90, 0x10e, 0x2, "bd8ce165e2fdb69ae64d1d855549fb648ce7e1a53d3c2d7bef7b486d32c553f62adf6fed050e8e996fd2a1ff78d520f5feb2751576896ad9786feb05cd935273aed636e818fe30ea607be22c142bd9eaf111a03a420920548582c63e8e9b0c0c78044bb232d2787d6f770738f8ece36fdea3b57ddfe517bd62d4ade0424f"}, {0x48, 0x10d, 0x1, "3e6a4951f6bc7104927dee861bb8197d0f20da20549584d433f68535029004ffbdbbfc226b44b9c26bbff4f01e0472052123"}], 0x1e0, 0x20040050}, 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001740)={{r2, &(0x7f0000001580)='$\x00', 0x2800, &(0x7f00000015c0)={@_ha_fsid={[0x800, 0xf82b]}, {0x8, 0x10, 0x6, 0x3}}, 0xb1, &(0x7f0000001600)={@_ha_fsid}, &(0x7f0000001640)=0x3b5a}, {[0x1, 0xa, 0x9, 0x1]}, 0x200, 0x9d, &(0x7f0000001680)=""/157}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000017c0)) fcntl$getown(r2, 0x9) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect(r4, &(0x7f0000001800)=@in={0x2, 0x4e21, @remote}, 0x80) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000001880)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001a40), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b00)={'pim6reg\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x7, 0x3, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, {[@rr={0x7, 0x1b, 0x58, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @multicast2, @multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x34, 0x2f, 0x1, 0x3, [{@multicast2, 0x1}, {@empty, 0xe73e}, {@multicast2, 0x101}, {@multicast1, 0x101}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@local, 0x202}]}, @timestamp={0x44, 0xc, 0xd, 0x0, 0x1, [0x8001, 0x2]}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x0, [{@rand_addr=0x64010102, 0x80000001}, {@loopback, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x7, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x4}, {@private=0xa010100}, {@empty, 0xb}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001cc0)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001e40)={'ip6_vti0\x00', &(0x7f0000001dc0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x5, 0x2, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7800, 0x3, 0x83}}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001e80)={@private0, 0x0}, &(0x7f0000001ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f00)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002240)={r1, 0xe0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001f40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000001f80)=[0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000002000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002080), &(0x7f00000020c0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000002100)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002300)={'gre0\x00', &(0x7f0000002280)={'erspan0\x00', 0x0, 0x80, 0x7, 0x400, 0xff, {{0xc, 0x4, 0x1, 0x18, 0x30, 0x67, 0x0, 0xff, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0xe, [{@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@multicast1, 0x200}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b80)={&(0x7f0000002500)={0x658, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4541}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x7, 0x8, 0x2}, {0xfff7, 0x0, 0x80, 0x6380}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x1f0224ed8e7ea0d4}, 0x0) 80.784049ms ago: executing program 1 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5202) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000006b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x9}) unshare(0x60040000) 0s ago: executing program 0 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)="f8df31534c1df6e11849885f31fd99963d100e9894455fdf5cebea68f199e1418742b47f34160c4689277950bec44ae6", 0x30}, {&(0x7f0000000040)="33a5dedf2ca5a4cdb2962d52b94f8ae9", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f00000002c0)=""/230, 0xe6}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x3a, 0x0, "43764065ec228be52d2e1ac0a8b31b7bcf41ee7c433a364fa87c0aa3b5f449d426995823a689b0523c1a7dc10fbffacd6b88533e84dc43742d6d9def5cca9f79db7e1598676d65c8f94d5e016a7fa503"}, 0xd8) sendto$inet(r5, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x4, 0x7, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 165.192924][ T7279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 165.230863][ T7285] bond2: (slave gretap1): making interface the new active one [ 165.237677][ T7285] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 165.257651][ T7285] macvlan2: entered promiscuous mode [ 165.260703][ T7285] macvlan2: entered allmulticast mode [ 165.264690][ T7285] bond2: entered promiscuous mode [ 165.267866][ T7285] gretap1: entered promiscuous mode [ 165.271656][ T7285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.279665][ T7285] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 165.291864][ T7285] bond2: left promiscuous mode [ 165.294983][ T7285] gretap1: left promiscuous mode [ 165.389967][ T7288] netlink: 'syz.0.357': attribute type 12 has an invalid length. [ 165.419031][ T7290] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 165.423200][ T7290] netlink: 760 bytes leftover after parsing attributes in process `syz.2.358'. [ 166.040805][ T7303] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 166.041440][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 166.125848][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 166.146398][ T40] audit: type=1400 audit(2000000010.339:453): avc: denied { setopt } for pid=7295 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.166659][ T40] audit: type=1400 audit(2000000010.359:454): avc: denied { write } for pid=7295 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.272098][ T7307] kAFS: No cell specified [ 166.396197][ T40] audit: type=1400 audit(2000000010.589:455): avc: denied { mount } for pid=7313 comm="syz.0.366" name="/" dev="ramfs" ino=17813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 166.544599][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.367'. [ 166.557260][ T7316] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.365'. [ 166.714269][ T7321] netlink: 44 bytes leftover after parsing attributes in process `syz.0.368'. [ 166.742173][ T7321] netlink: 43 bytes leftover after parsing attributes in process `syz.0.368'. [ 166.754101][ T7321] netlink: 'syz.0.368': attribute type 6 has an invalid length. [ 166.761315][ T7321] netlink: 'syz.0.368': attribute type 5 has an invalid length. [ 166.766525][ T7321] netlink: 43 bytes leftover after parsing attributes in process `syz.0.368'. [ 166.771038][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 167.685226][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.709624][ T7342] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 167.747230][ T7342] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 168.075727][ T7349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7349 comm=syz.0.376 [ 168.097791][ T7349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7349 comm=syz.0.376 [ 168.162869][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 168.173393][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.950048][ T7370] nfs: Unknown parameter './file0' [ 168.998056][ T7370] syzkaller0: entered promiscuous mode [ 169.001239][ T7370] syzkaller0: entered allmulticast mode [ 169.014576][ T7372] netlink: 'syz.2.383': attribute type 3 has an invalid length. [ 169.251324][ T7379] binder: 7377:7379 ioctl 400c620e 200000000180 returned -22 [ 169.296315][ T7383] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 169.317833][ T7383] netlink: 'syz.0.386': attribute type 4 has an invalid length. [ 169.321976][ T7383] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.386'. [ 169.497312][ T7392] syzkaller0: entered promiscuous mode [ 169.513189][ T7392] syzkaller0: entered allmulticast mode [ 169.542023][ T7396] netlink: 60 bytes leftover after parsing attributes in process `syz.3.392'. [ 169.700305][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 169.718964][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 169.840760][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 169.840784][ T40] audit: type=1400 audit(2000000014.029:466): avc: denied { add_name } for pid=7408 comm="syz.0.395" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.856007][ T40] audit: type=1400 audit(2000000014.029:467): avc: denied { create } for pid=7408 comm="syz.0.395" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.872477][ T40] audit: type=1400 audit(2000000014.029:468): avc: denied { associate } for pid=7408 comm="syz.0.395" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 169.884958][ T7410] syzkaller1: entered promiscuous mode [ 169.888814][ T7410] syzkaller1: entered allmulticast mode [ 169.892844][ T40] audit: type=1400 audit(2000000014.039:469): avc: denied { read append open } for pid=7408 comm="syz.0.395" path="/112/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=72876301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.908267][ T40] audit: type=1400 audit(2000000014.049:470): avc: denied { write } for pid=7408 comm="syz.0.395" name="blkio.bfq.io_merged_recursive" dev="9p" ino=72876301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.932469][ T40] audit: type=1400 audit(2000000014.089:471): avc: denied { create } for pid=7413 comm="syz.3.397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 169.941757][ T40] audit: type=1400 audit(2000000014.089:472): avc: denied { setattr } for pid=7413 comm="syz.3.397" name="file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 170.038301][ T7416] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.157738][ T7427] futex_wake_op: syz.3.400 tries to shift op by -1; fix this program [ 170.189051][ T7427] netlink: 'syz.3.400': attribute type 7 has an invalid length. [ 170.193022][ T7427] netlink: 'syz.3.400': attribute type 8 has an invalid length. [ 170.197051][ T40] audit: type=1400 audit(2000000014.389:473): avc: denied { shutdown } for pid=7428 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.471893][ T40] audit: type=1400 audit(2000000014.659:474): avc: denied { ioctl } for pid=7438 comm="syz.2.405" path="socket:[16106]" dev="sockfs" ino=16106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.478517][ T1474] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 170.493412][ T7439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.528726][ T7439] tipc: Enabling not permitted [ 170.536546][ T7439] tipc: Enabling of bearer rejected, failed to enable media [ 170.546359][ T7439] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.622557][ T6017] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.640757][ T7446] netlink: 'syz.3.407': attribute type 12 has an invalid length. [ 170.645659][ T7446] netlink: 'syz.3.407': attribute type 29 has an invalid length. [ 170.661660][ T1474] usb 6-1: device descriptor read/64, error -71 [ 170.700446][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.778695][ T40] audit: type=1400 audit(2000000014.969:475): avc: denied { accept } for pid=7447 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.812868][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 170.819210][ T6017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.823969][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.828696][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.835068][ T6017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.842793][ T6017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.848215][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.878380][ T7449] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 170.917275][ T7449] bond3: entered promiscuous mode [ 170.919733][ T7449] bond3: entered allmulticast mode [ 170.922607][ T1474] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 170.928789][ T7449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.943890][ T7451] erspan1: entered allmulticast mode [ 170.951223][ T7451] bond3: (slave erspan1): making interface the new active one [ 170.954921][ T7451] erspan1: entered promiscuous mode [ 170.961213][ T7451] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 171.059200][ T6017] usb 5-1: GET_CAPABILITIES returned 0 [ 171.062168][ T6017] usbtmc 5-1:16.0: can't read capabilities [ 171.064961][ T1474] usb 6-1: device descriptor read/64, error -71 [ 171.183498][ T1474] usb usb6-port1: attempt power cycle [ 171.275903][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.294051][ T7435] bridge1: entered promiscuous mode [ 171.296686][ T7435] bridge1: entered allmulticast mode [ 171.307673][ T54] usb 5-1: USB disconnect, device number 4 [ 171.413489][ T7458] netlink: 'syz.2.410': attribute type 10 has an invalid length. [ 171.467248][ T7459] trusted_key: syz.2.410 sent an empty control message without MSG_MORE. [ 171.552550][ T1474] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 171.584374][ T1474] usb 6-1: device descriptor read/8, error -71 [ 171.772608][ T5969] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 171.833687][ T1474] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 171.853738][ T1474] usb 6-1: device descriptor read/8, error -71 [ 171.902646][ T5969] usb 7-1: device descriptor read/64, error -71 [ 171.963853][ T1474] usb usb6-port1: unable to enumerate USB device [ 171.997169][ T7476] syzkaller0: entered promiscuous mode [ 172.004637][ T7476] syzkaller0: entered allmulticast mode [ 172.142776][ T5969] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 172.190825][ T7478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7478 comm=syz.0.417 [ 172.282658][ T5969] usb 7-1: device descriptor read/64, error -71 [ 172.313375][ T7481] : renamed from vlan0 (while UP) [ 172.402917][ T5969] usb usb7-port1: attempt power cycle [ 172.720966][ T7493] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 172.752550][ T5969] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 172.798979][ T5969] usb 7-1: device descriptor read/8, error -71 [ 172.807559][ T7498] loop4: detected capacity change from 0 to 7 [ 172.831687][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.876849][ T6617] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.884597][ T6617] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.902098][ T6617] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.907185][ T6617] Buffer I/O error on dev loop4, logical block 0, async page read [ 172.913586][ T6617] Buffer I/O error on dev loop4, logical block 0, async page read [ 173.042479][ T5969] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 173.063501][ T5969] usb 7-1: device descriptor read/8, error -71 [ 173.174632][ T5969] usb usb7-port1: unable to enumerate USB device [ 173.294805][ T7510] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.298161][ T7510] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 173.322942][ T6017] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 173.492473][ T6017] usb 5-1: Using ep0 maxpacket: 32 [ 173.501273][ T6017] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 173.507377][ T6017] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 173.513092][ T6017] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.517956][ T6017] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 173.530452][ T6017] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 173.535477][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.540854][ T6017] usb 5-1: Product: syz [ 173.543891][ T6017] usb 5-1: Manufacturer: syz [ 173.546656][ T6017] usb 5-1: SerialNumber: syz [ 173.566353][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 173.579785][ T6017] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input7 [ 173.794051][ T6017] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 173.798707][ T6017] (id 0x00) [ 173.807915][ T7534] tipc: Can't bind to reserved service type 2 [ 173.872705][ T6017] rc_core: IR keymap rc-imon-pad not found [ 173.875390][ T6017] Registered IR keymap rc-empty [ 173.877827][ T6017] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 173.882161][ T6017] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 173.987288][ T6017] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 173.998435][ T6017] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 174.015310][ T6017] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:5> initialized [ 174.171568][ T6017] usb 5-1: USB disconnect, device number 5 [ 174.222678][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 174.392500][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 174.397601][ T54] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.400808][ T54] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.404392][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.408864][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.412483][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.415696][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.421987][ T54] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.426420][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.434045][ T54] usb 6-1: config 0 descriptor?? [ 174.639956][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.646160][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.656500][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.662727][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.662957][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.666521][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.703511][ T54] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.715823][ T54] usb 6-1: USB disconnect, device number 8 [ 174.755052][ T54] usblp0: removed [ 175.102708][ T7568] __nla_validate_parse: 15 callbacks suppressed [ 175.103004][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 175.581158][ T7582] netlink: 'syz.0.449': attribute type 12 has an invalid length. [ 175.587543][ T7582] netlink: 'syz.0.449': attribute type 29 has an invalid length. [ 175.591688][ T7582] netlink: 148 bytes leftover after parsing attributes in process `syz.0.449'. [ 175.601248][ T7582] netlink: 59 bytes leftover after parsing attributes in process `syz.0.449'. [ 175.673276][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 175.673298][ T40] audit: type=1400 audit(2000000019.854:493): avc: denied { write } for pid=7586 comm="syz.0.452" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.675067][ T7587] random: crng reseeded on system resumption [ 175.676787][ T40] audit: type=1400 audit(2000000019.864:494): avc: denied { open } for pid=7586 comm="syz.0.452" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.867682][ T40] audit: type=1400 audit(2000000020.054:495): avc: denied { accept } for pid=7603 comm="syz.0.455" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.359411][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 176.363754][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 176.368705][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 176.399576][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 176.412341][ T40] audit: type=1400 audit(2000000020.604:496): avc: denied { mounton } for pid=7609 comm="syz.3.458" path="/105/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 176.527145][ T40] audit: type=1804 audit(2000000020.714:497): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.459" name="/newroot/130/file1" dev="tmpfs" ino=712 res=1 errno=0 [ 176.619213][ T7621] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 176.619366][ T7621] CPU: 2 UID: 0 PID: 7621 Comm: syz.3.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.619392][ T7621] Tainted: [L]=SOFTLOCKUP [ 176.619399][ T7621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.619410][ T7621] Call Trace: [ 176.619541][ T7621] [ 176.620107][ T7626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.462'. [ 176.619548][ T7621] dump_stack_lvl+0x100/0x190 [ 176.620840][ T7621] sysfs_warn_dup.cold+0x1c/0x28 [ 176.621253][ T7621] sysfs_do_create_link_sd+0x113/0x140 [ 176.621689][ T7621] sysfs_create_link+0x61/0xc0 [ 176.621717][ T7621] device_add+0x675/0x1950 [ 176.622709][ T7621] ? __pfx_device_add+0x10/0x10 [ 176.622731][ T7621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.622982][ T7621] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 176.623135][ T7621] wiphy_register+0x1edd/0x2d90 [ 176.623161][ T7621] ? __rtnl_unlock+0xb9/0xf0 [ 176.623190][ T7621] ? __pfx_wiphy_register+0x10/0x10 [ 176.623215][ T7621] ? __asan_memset+0x23/0x50 [ 176.623403][ T7621] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 176.623446][ T7621] ieee80211_register_hw+0x3055/0x4570 [ 176.623493][ T7621] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 176.623523][ T7621] ? __pfx___debug_object_init+0x10/0x10 [ 176.624167][ T7621] ? find_held_lock+0x2b/0x80 [ 176.624192][ T7621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.624218][ T7621] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 176.624535][ T7621] ? __hrtimer_setup+0x208/0x330 [ 176.624562][ T7621] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 176.624595][ T7621] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 176.624615][ T7621] ? __asan_memcpy+0x3c/0x60 [ 176.624643][ T7621] hwsim_new_radio_nl+0xc5f/0x1370 [ 176.624660][ T7621] ? rcu_is_watching+0x12/0xc0 [ 176.624686][ T7621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 176.624711][ T7621] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 176.624735][ T7621] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 176.624762][ T7621] genl_family_rcv_msg_doit+0x214/0x300 [ 176.624789][ T7621] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.624820][ T7621] ? bpf_lsm_capable+0x9/0x10 [ 176.624839][ T7621] ? security_capable+0x80/0x260 [ 176.624957][ T7621] ? ns_capable+0xd2/0xf0 [ 176.624985][ T7621] genl_rcv_msg+0x560/0x800 [ 176.625010][ T7621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.625032][ T7621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 176.625058][ T7621] netlink_rcv_skb+0x159/0x420 [ 176.625078][ T7621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.625101][ T7621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.625131][ T7621] ? netlink_deliver_tap+0x1ae/0xcc0 [ 176.625154][ T7621] genl_rcv+0x28/0x40 [ 176.625173][ T7621] netlink_unicast+0x585/0x850 [ 176.625197][ T7621] ? __pfx_netlink_unicast+0x10/0x10 [ 176.625224][ T7621] netlink_sendmsg+0x8b0/0xda0 [ 176.625255][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.625273][ T7621] ? __might_fault+0x30/0x140 [ 176.625306][ T7621] ____sys_sendmsg+0x9e1/0xb70 [ 176.625325][ T7621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.625347][ T7621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.625371][ T7621] ? __pfx_futex_wake_mark+0x10/0x10 [ 176.625393][ T7621] ___sys_sendmsg+0x190/0x1e0 [ 176.625418][ T7621] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.625468][ T7621] __sys_sendmsg+0x170/0x220 [ 176.625494][ T7621] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.625518][ T7621] ? __x64_sys_futex+0x34f/0x4d0 [ 176.625552][ T7621] ? rcu_is_watching+0x12/0xc0 [ 176.625582][ T7621] do_syscall_64+0x10b/0xf80 [ 176.625605][ T7621] ? clear_bhb_loop+0x40/0x90 [ 176.625626][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.625644][ T7621] RIP: 0033:0x7f2f7d59c819 [ 176.625662][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.625679][ T7621] RSP: 002b:00007f2f7e410028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.625846][ T7621] RAX: ffffffffffffffda RBX: 00007f2f7d816090 RCX: 00007f2f7d59c819 [ 176.625857][ T7621] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 176.625867][ T7621] RBP: 00007f2f7d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 176.625878][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.625887][ T7621] R13: 00007f2f7d816128 R14: 00007f2f7d816090 R15: 00007fffb59978d8 [ 176.625912][ T7621] [ 176.657643][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 176.833948][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 177.094410][ T40] audit: type=1400 audit(2000000021.284:498): avc: denied { mounton } for pid=7635 comm="syz.0.465" path="/proc/414/cgroup" dev="proc" ino=17349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 177.181057][ T7648] tmpfs: Bad value for 'mpol' [ 177.261668][ T7655] batman_adv: batadv0: Adding interface: dummy0 [ 177.265099][ T7655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.286200][ T7655] batman_adv: batadv0: Interface activated: dummy0 [ 177.329998][ T7655] batadv0: mtu less than device minimum [ 177.333329][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.338054][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.347571][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.353999][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.359833][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.364868][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.370403][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.375175][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.380590][ T7655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 177.405335][ T7660] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 178.243010][ T844] libceph: connect (1)[c::]:6789 error -22 [ 178.254141][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 178.271685][ T844] libceph: connect (1)[c::]:6789 error -22 [ 178.274320][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 178.324749][ T7690] sp0: Synchronizing with TNC [ 178.329816][ T7693] ceph: No mds server is up or the cluster is laggy [ 178.665719][ T7704] could not allocate digest TFM handle cryptd(blake2b-160) [ 178.771520][ T40] audit: type=1400 audit(2000000022.954:499): avc: denied { ioctl } for pid=7722 comm="syz.1.486" path="socket:[20483]" dev="sockfs" ino=20483 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.989619][ T7689] [U] [ 179.325073][ T40] audit: type=1400 audit(2000000023.504:500): avc: denied { write } for pid=7740 comm="syz.3.491" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.403387][ T7746] policy can only be matched on NF_INET_PRE_ROUTING [ 179.403413][ T7746] unable to load match [ 179.445962][ T7749] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 180.573523][ T40] audit: type=1400 audit(2000000024.764:501): avc: denied { append } for pid=7775 comm="syz.2.501" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.475766][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.479129][ T40] audit: type=1400 audit(2000000026.664:502): avc: denied { block_suspend } for pid=7795 comm="syz.1.507" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.496253][ T7798] __nla_validate_parse: 8 callbacks suppressed [ 182.496271][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.503541][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.508512][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.512907][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.524859][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.535116][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.542576][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.562614][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.582455][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.587250][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.591035][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.597739][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.608328][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.614717][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.619310][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.638310][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.644453][ T7800] xt_hashlimit: size too large, truncated to 1048576 [ 182.645370][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.652439][ T7798] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 182.656151][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.1.507'. [ 182.823580][ T40] audit: type=1326 audit(2000000027.014:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.850128][ T40] audit: type=1326 audit(2000000027.014:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.879877][ T40] audit: type=1326 audit(2000000027.024:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.904911][ T40] audit: type=1326 audit(2000000027.024:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.922217][ T40] audit: type=1326 audit(2000000027.024:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.931602][ T40] audit: type=1326 audit(2000000027.024:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.943801][ T40] audit: type=1326 audit(2000000027.024:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.956767][ T40] audit: type=1326 audit(2000000027.034:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 182.968433][ T40] audit: type=1326 audit(2000000027.034:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.2.509" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc38659c819 code=0x7ffc0000 [ 183.175226][ T7838] IPv6: Can't replace route, no match found [ 183.360614][ T7844] vlan2: entered promiscuous mode [ 183.363141][ T7844] bridge0: entered promiscuous mode [ 184.142635][ T5969] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 184.277114][ T7876] net_ratelimit: 10 callbacks suppressed [ 184.277316][ T7876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.288027][ T7876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.292375][ T5969] usb 7-1: Using ep0 maxpacket: 8 [ 184.297508][ T5969] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 184.301982][ T5969] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.307255][ T5969] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.312229][ T5969] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.316848][ T5969] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.324390][ T5969] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.328523][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.559215][ T5969] usb 7-1: usb_control_msg returned -32 [ 184.562487][ T5969] usbtmc 7-1:16.0: can't read capabilities [ 184.602400][ T5969] usb 7-1: USB disconnect, device number 7 [ 184.923482][ T7891] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 185.047385][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 185.050025][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 185.320430][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 185.326050][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 185.490889][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.496571][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.526808][ T7924] fuse: Unknown parameter '0x000000000000000400000000000000000004' [ 185.571771][ T7930] openvswitch: netlink: Message has 8 unknown bytes. [ 185.852803][ T5969] libceph: connect (1)[c::]:6789 error -101 [ 185.856442][ T7901] ceph: No mds server is up or the cluster is laggy [ 185.862746][ T5969] libceph: mon0 (1)[c::]:6789 connect error [ 186.095185][ T5959] Bluetooth: hci3: command tx timeout [ 186.241516][ T7973] loop5: detected capacity change from 0 to 7 [ 186.468642][ T7973] Dev loop5: unable to read RDB block 7 [ 186.472054][ T7973] loop5: unable to read partition table [ 186.475717][ T7973] loop5: partition table beyond EOD, truncated [ 186.480163][ T7973] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 186.536497][ T7991] i2c i2c-1: Invalid block write size 34 [ 186.722602][ T844] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 186.884757][ T844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.890541][ T844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49711, setting to 1024 [ 186.896177][ T844] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 186.900848][ T844] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.905598][ T844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.913888][ T7989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.922945][ T844] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.172835][ T6004] usb 7-1: USB disconnect, device number 8 [ 187.375468][ T8030] random: crng reseeded on system resumption [ 187.503820][ T8040] comedi comedi0: Cannot bond this driver to itself! [ 187.660918][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 187.660932][ T40] audit: type=1400 audit(2000000031.844:589): avc: denied { map } for pid=8044 comm="syz.3.580" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.672443][ T40] audit: type=1400 audit(2000000031.844:590): avc: denied { execute } for pid=8044 comm="syz.3.580" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.740396][ T40] audit: type=1400 audit(2000000031.924:591): avc: denied { append } for pid=8046 comm="syz.1.579" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.741853][ T8047] overlayfs: conflicting options: userxattr,redirect_dir=on [ 187.751759][ T8049] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.763578][ T8047] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 187.785142][ T8047] exFAT-fs (nullb0): invalid boot record signature [ 187.788029][ T8047] exFAT-fs (nullb0): failed to read boot sector [ 187.790723][ T8047] exFAT-fs (nullb0): failed to recognize exfat type [ 187.813270][ T8047] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 187.816213][ T8047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.824113][ T8055] sit0: entered promiscuous mode [ 187.832097][ T8055] validate_nla: 55 callbacks suppressed [ 187.832117][ T8055] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 187.832797][ T8047] vhci_hcd vhci_hcd.0: Device attached [ 187.841540][ T8055] __nla_validate_parse: 63 callbacks suppressed [ 187.841557][ T8055] netlink: 1 bytes leftover after parsing attributes in process `syz.2.583'. [ 187.843263][ T8047] program syz.1.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.860963][ T8056] vhci_hcd: connection closed [ 187.871266][ T46] vhci_hcd vhci_hcd.1: stop threads [ 187.876107][ T46] vhci_hcd vhci_hcd.1: release socket [ 187.880382][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 187.900951][ T8061] overlayfs: upper fs does not support file handles, falling back to index=off. [ 187.909045][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 187.914179][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 187.921330][ T8061] evm: overlay not supported [ 188.085384][ T8078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8078 comm=syz.3.590 [ 188.125200][ T40] audit: type=1400 audit(2000000032.314:592): avc: denied { setopt } for pid=8073 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.134882][ T8081] usb usb8: usbfs: process 8081 (syz.2.591) did not claim interface 0 before use [ 188.266491][ T40] audit: type=1400 audit(2000000032.454:593): avc: denied { getopt } for pid=8097 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.407023][ T8096] binfmt_misc: register: failed to install interpreter file ./file1 [ 188.468755][ T40] audit: type=1400 audit(2000000032.654:594): avc: denied { ioctl } for pid=8102 comm="syz.3.596" path="socket:[22953]" dev="sockfs" ino=22953 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.510833][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 188.532409][ T6044] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 188.605002][ T40] audit: type=1400 audit(2000000032.794:595): avc: denied { mounton } for pid=8111 comm="syz.1.599" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.763159][ T6044] usb 5-1: Invalid ep0 maxpacket: 64 [ 188.922484][ T6044] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 188.976711][ T8126] can: request_module (can-proto-0) failed. [ 189.031698][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.036549][ T8132] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.039734][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.092607][ T6044] usb 5-1: Invalid ep0 maxpacket: 64 [ 189.095400][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.159895][ T8133] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.180011][ T6044] usb usb5-port1: attempt power cycle [ 189.225852][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.284934][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.291153][ T8133] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.300348][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 189.304808][ T8133] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.308696][ T8133] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.315087][ T8133] netlink: 'syz.1.605': attribute type 29 has an invalid length. [ 189.600252][ T8138] IPVS: persistence engine module ip_vs_pe_s not found [ 189.643025][ T6044] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 189.650566][ T8142] binder: 8141:8142 ioctl c0306201 0 returned -14 [ 189.663689][ T6044] usb 5-1: Invalid ep0 maxpacket: 64 [ 189.793512][ T6044] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 189.816903][ T6044] usb 5-1: Invalid ep0 maxpacket: 64 [ 189.819898][ T6044] usb usb5-port1: unable to enumerate USB device [ 189.876997][ T8151] tipc: Enabling of bearer rejected, failed to enable media [ 189.883166][ T8151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8151 comm=syz.2.611 [ 190.115122][ T40] audit: type=1400 audit(2000000034.294:596): avc: denied { firmware_load } for pid=8167 comm="syz.2.618" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 190.126472][ T40] audit: type=1326 audit(2000000034.304:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.1.620" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc8f9c819 code=0x0 [ 190.156323][ T8169] netlink: 'syz.2.618': attribute type 2 has an invalid length. [ 190.169194][ T8169] syz.2.618 (8169) used greatest stack depth: 18984 bytes left [ 190.228440][ T40] audit: type=1400 audit(2000000034.414:598): avc: denied { mount } for pid=8171 comm="syz.1.620" name="/" dev="hugetlbfs" ino=20249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 190.246537][ T8177] ip6gre1: entered promiscuous mode [ 190.249434][ T8177] ip6gre1: entered allmulticast mode [ 190.337301][ T8182] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 190.847594][ T8195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8195 comm=syz.1.626 [ 190.889285][ T8197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.912000][ T225] bond0: (slave bond_slave_0): interface is now down [ 190.919346][ T225] bond0: (slave bond_slave_1): interface is now down [ 190.934402][ T225] bond0: now running without any active interface! [ 191.049206][ T8209] sctp: [Deprecated]: syz.1.629 (pid 8209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.049206][ T8209] Use struct sctp_sack_info instead [ 191.073711][ T6044] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 191.106048][ T8211] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 191.203586][ T6044] usb 7-1: device descriptor read/64, error -71 [ 191.361638][ T8220] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 191.391411][ T8221] wireguard0: entered allmulticast mode [ 191.442557][ T6044] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 191.572415][ T6044] usb 7-1: device descriptor read/64, error -71 [ 191.693208][ T6044] usb usb7-port1: attempt power cycle [ 191.975760][ T8230] syzkaller0: entered promiscuous mode [ 191.978051][ T8230] syzkaller0: entered allmulticast mode [ 191.985373][ T8230] tc action pedit offset 128 out of bounds [ 191.992488][ T8230] Unknown options in mask b7f2 [ 192.044327][ T6044] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 192.065601][ T6044] usb 7-1: device descriptor read/8, error -71 [ 192.162583][ T50] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 192.302468][ T50] usb 6-1: device descriptor read/64, error -71 [ 192.312561][ T6044] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 192.335117][ T6044] usb 7-1: device descriptor read/8, error -71 [ 192.393130][ T8235] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 192.396589][ T8235] overlayfs: overlapping lowerdir path [ 192.456273][ T6044] usb usb7-port1: unable to enumerate USB device [ 192.535311][ T8238] virt_wifi0: entered promiscuous mode [ 192.538221][ T8238] virt_wifi0: entered allmulticast mode [ 192.601654][ T50] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 192.654071][ T8238] netlink: 'syz.3.638': attribute type 17 has an invalid length. [ 192.706625][ T8238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.772450][ T50] usb 6-1: device descriptor read/64, error -71 [ 192.883959][ T50] usb usb6-port1: attempt power cycle [ 192.976387][ T8243] __nla_validate_parse: 9 callbacks suppressed [ 192.976408][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 193.156201][ T8249] netlink: 112 bytes leftover after parsing attributes in process `syz.3.641'. [ 193.232463][ T50] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 193.255379][ T50] usb 6-1: device descriptor read/8, error -71 [ 193.344132][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 193.344154][ T40] audit: type=1400 audit(2000000037.534:603): avc: denied { read write } for pid=8256 comm="syz.3.644" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 193.358148][ T40] audit: type=1400 audit(2000000037.534:604): avc: denied { open } for pid=8256 comm="syz.3.644" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 193.492555][ T50] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 193.513308][ T50] usb 6-1: device descriptor read/8, error -71 [ 193.622931][ T50] usb usb6-port1: unable to enumerate USB device [ 193.904088][ T8271] misc userio: Invalid payload size [ 194.037028][ T8271] /dev/sr0: Can't open blockdev [ 194.112860][ T6017] psmouse serio2: Failed to reset mouse on : -5 [ 194.222571][ T5969] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 194.385044][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.389807][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.397245][ T5969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.402531][ T5969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 194.407378][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.416835][ T5969] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 194.421094][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.425420][ T5969] usb 7-1: Product: syz [ 194.428400][ T5969] usb 7-1: Manufacturer: syz [ 194.430588][ T5969] usb 7-1: SerialNumber: syz [ 194.445661][ T5969] usb 7-1: config 0 descriptor?? [ 194.449965][ T8273] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.464058][ T5969] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 194.664912][ T8273] binder: 8272:8273 ioctl c0306201 200000000640 returned -22 [ 194.670459][ T40] audit: type=1400 audit(2000000038.854:605): avc: denied { append } for pid=8272 comm="syz.2.650" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 194.716402][ T8282] netlink: 60 bytes leftover after parsing attributes in process `syz.0.652'. [ 194.738522][ T8273] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 194.762082][ T8273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.769941][ T40] audit: type=1400 audit(2000000038.954:606): avc: denied { ioctl } for pid=8288 comm="syz.0.653" path="socket:[20327]" dev="sockfs" ino=20327 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.772653][ T24] usb 7-1: USB disconnect, device number 13 [ 194.884569][ T40] audit: type=1400 audit(2000000039.074:607): avc: denied { write } for pid=8290 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 194.968563][ T8294] syz.1.655 (8294): /proc/8293/oom_adj is deprecated, please use /proc/8293/oom_score_adj instead. [ 195.152356][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 195.172517][ T40] audit: type=1400 audit(2000000039.364:608): avc: denied { bind } for pid=8298 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.346461][ T40] audit: type=1400 audit(2000000039.544:609): avc: denied { mount } for pid=8308 comm="syz.2.659" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 195.357446][ T8306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8306 comm=syz.1.658 [ 195.369134][ T8310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.403820][ T40] audit: type=1400 audit(2000000039.594:610): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 195.457070][ T40] audit: type=1400 audit(2000000039.644:611): avc: denied { connect } for pid=8312 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.770059][ T8345] netlink: 'syz.2.664': attribute type 10 has an invalid length. [ 195.779489][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 195.780443][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.664'. [ 195.789173][ T8343] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 195.795060][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 195.857505][ T8332] /dev/sr0: Can't open blockdev [ 196.037625][ T40] audit: type=1400 audit(2000000040.224:612): avc: denied { execute_no_trans } for pid=8363 comm="syz.0.668" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=23447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 196.265429][ T1474] IPVS: starting estimator thread 0... [ 196.346320][ T8376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.352575][ T8380] IPVS: using max 28 ests per chain, 67200 per kthread [ 196.353260][ T8376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.489712][ T8376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.496595][ T8376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.542945][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 196.596690][ T8376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.601233][ T8376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.724968][ T8376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.729728][ T8376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.838003][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 196.858457][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.862059][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.863209][ T8396] kvm: user requested TSC rate below hardware speed [ 196.884443][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.888449][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.906205][ T404] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.910000][ T404] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.910119][ T8396] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 196.920940][ T8396] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 196.925740][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.931911][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.083067][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 197.094361][ T8407] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 197.358958][ T8428] autofs4:pid:8428:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 197.922594][ T6017] misc userio: Buffer overflowed, userio client isn't keeping up [ 199.080571][ T6017] input: PS/2 Generic Mouse as /devices/serio2/input/input13 [ 199.363088][ T6017] psmouse serio2: Failed to enable mouse on [ 199.941990][ T8436] qnx6: unable to set blocksize [ 199.997279][ T8437] qnx6: unable to set blocksize [ 200.173492][ T8441] program syz.3.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.310740][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 200.310758][ T40] audit: type=1400 audit(2000000044.494:622): avc: denied { name_bind } for pid=8446 comm="syz.2.689" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 200.494342][ T8469] siw: device registration error -23 [ 200.501546][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.695'. [ 200.519953][ T8471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.536691][ T8471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.695'. [ 200.578231][ T8476] netlink: 196 bytes leftover after parsing attributes in process `syz.0.694'. [ 200.591847][ T8476] netlink: 68 bytes leftover after parsing attributes in process `syz.0.694'. [ 200.654668][ T40] audit: type=1400 audit(2000000044.844:623): avc: denied { map } for pid=8480 comm="syz.0.698" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.702528][ T40] audit: type=1400 audit(2000000044.884:624): avc: denied { set_context_mgr } for pid=8483 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 200.774533][ T8494] /dev/sg0: Can't lookup blockdev [ 200.775568][ T40] audit: type=1400 audit(2000000044.964:625): avc: denied { create } for pid=8492 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.777710][ T8494] netlink: 'syz.0.703': attribute type 4 has an invalid length. [ 200.792371][ T40] audit: type=1400 audit(2000000044.964:626): avc: denied { setopt } for pid=8492 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.893594][ T8507] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.908937][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 200.948597][ T8509] futex_wake_op: syz.1.707 tries to shift op by 32; fix this program [ 200.977349][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.980602][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.035692][ T8515] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.060073][ T1254] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.132085][ T40] audit: type=1800 audit(2000000045.314:627): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.711" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 201.153146][ T40] audit: type=1400 audit(2000000045.344:628): avc: denied { accept } for pid=8530 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.170202][ T8520] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 201.255306][ T8540] Bluetooth: MGMT ver 1.23 [ 201.326490][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.716'. [ 201.402510][ T40] audit: type=1326 audit(2000000045.584:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.2.718" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc38659c819 code=0x0 [ 201.441375][ T40] audit: type=1400 audit(2000000045.624:630): avc: denied { create } for pid=8562 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.686275][ T40] audit: type=1400 audit(2000000045.844:631): avc: denied { setopt } for pid=8562 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 201.761041][ T8576] binder: 8575:8576 unknown command 0 [ 201.764055][ T8576] binder: 8575:8576 ioctl c0306201 2000000001c0 returned -22 [ 201.777807][ T8576] binder: 8575:8576 ioctl c01864b1 2000000001c0 returned -22 [ 201.912585][ T8580] fuse: fd is not a fuse device [ 202.123451][ T8595] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 202.374784][ T5969] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 202.499133][ T8603] overlayfs: missing 'workdir' [ 202.512959][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 202.586910][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.602236][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.609758][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.622855][ T5969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.640613][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.665574][ T5969] usb 6-1: config 0 descriptor?? [ 202.938874][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 203.042956][ T5306] Bluetooth: hci1: command 0x0406 tx timeout [ 203.043142][ T5961] Bluetooth: hci2: command 0x0406 tx timeout [ 203.114510][ T5969] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 203.122905][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 203.130757][ T5956] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.517680][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 203.791677][ T8643] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 203.798481][ T8643] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 203.798595][ T8645] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 203.809464][ T8643] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 203.821411][ T8643] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.844440][ T8643] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.862553][ T8648] 8021q: VLANs not supported on ip_vti0 [ 204.319193][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 204.518963][ T8658] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 204.580886][ T8658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 204.751194][ T8667] trusted_key: encrypted_key: insufficient parameters specified [ 205.188947][ T6004] usb 6-1: USB disconnect, device number 13 [ 205.292465][ T8679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8679 comm=syz.0.754 [ 205.390557][ T8689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=8689 comm=syz.2.756 [ 205.460195][ T8691] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 205.467677][ T8691] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 205.474286][ T8691] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 205.514052][ T8691] __nla_validate_parse: 1 callbacks suppressed [ 205.514073][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 205.587582][ T8697] misc userio: Invalid payload size [ 205.802585][ T54] psmouse serio3: Failed to reset mouse on : -5 [ 205.829044][ T8711] netlink: 'syz.0.761': attribute type 21 has an invalid length. [ 206.089305][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.391025][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 206.403843][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 206.403860][ T40] audit: type=1400 audit(2000000050.594:640): avc: denied { getopt } for pid=8717 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 206.453580][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 206.459746][ T8725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8725 comm=syz.0.766 [ 207.018954][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 207.023211][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 207.314869][ T40] audit: type=1400 audit(2000000051.504:641): avc: denied { read } for pid=8734 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 207.444384][ T40] audit: type=1400 audit(2000000051.624:642): avc: denied { read } for pid=8743 comm="syz.1.771" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.465651][ T8744] netlink: 'syz.1.771': attribute type 4 has an invalid length. [ 207.524851][ T40] audit: type=1400 audit(2000000051.714:643): avc: denied { setattr } for pid=8745 comm="syz.3.772" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.643028][ T40] audit: type=1400 audit(2000000051.834:644): avc: denied { ioctl } for pid=8754 comm="syz.0.775" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 207.714673][ T40] audit: type=1804 audit(2000000051.894:645): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.775" name="/newroot/203/file0" dev="tmpfs" ino=1102 res=1 errno=0 [ 207.737784][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 207.992123][ T8768] netlink: 'syz.1.779': attribute type 13 has an invalid length. [ 208.180115][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 208.218455][ T8777] bridge2: port 1(erspan0) entered blocking state [ 208.222551][ T8777] bridge2: port 1(erspan0) entered disabled state [ 208.225944][ T8777] erspan0: entered allmulticast mode [ 208.230728][ T8777] erspan0: entered promiscuous mode [ 208.238536][ T8777] bridge2: port 1(erspan0) entered blocking state [ 208.243627][ T8777] bridge2: port 1(erspan0) entered forwarding state [ 208.284175][ T8777] bridge2: port 2(bond1) entered blocking state [ 208.287979][ T8777] bridge2: port 2(bond1) entered disabled state [ 208.291137][ T8777] bond1: entered allmulticast mode [ 208.296081][ T8777] bond1: entered promiscuous mode [ 208.309717][ T40] audit: type=1400 audit(2000000052.504:646): avc: denied { write } for pid=8776 comm="syz.0.781" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 208.515504][ T8784] kvm: kvm [8783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 208.522105][ T8784] kvm: kvm [8783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 208.602592][ T50] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 208.763339][ T50] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 208.777325][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.781894][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.787138][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.800021][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.804860][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.809942][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.819669][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.823971][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.829607][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.835369][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.839907][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.844911][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.848948][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.853805][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.858967][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.863378][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.867406][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.873988][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.878735][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.883229][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.888313][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.895231][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.899269][ T50] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 208.905057][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.911869][ T50] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.916887][ T50] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.920920][ T50] usb 6-1: Product: syz [ 208.923343][ T50] usb 6-1: Manufacturer: syz [ 208.925999][ T50] usb 6-1: SerialNumber: syz [ 208.933474][ T50] usb 6-1: config 0 descriptor?? [ 208.944850][ T50] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 209.146280][ T8798] Invalid argument reading file caps for ./file0 [ 209.632594][ T54] misc userio: Buffer overflowed, userio client isn't keeping up [ 209.641256][ T8810] efs: device does not support 512 byte blocks [ 209.648990][ T8810] device does not support 512 byte blocks [ 209.648990][ T8810] [ 209.661164][ T40] audit: type=1400 audit(2000000053.844:647): avc: denied { block_suspend } for pid=8809 comm="syz.0.790" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.684234][ T50] usb 6-1: USB disconnect, device number 14 [ 209.738580][ T50] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 209.825049][ T8818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.791'. [ 209.855208][ T8820] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 209.940897][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 210.055885][ T8818] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 210.227123][ T40] audit: type=1400 audit(2000000054.414:648): avc: denied { lock } for pid=8824 comm="syz.0.795" path="/215/file0/cpuset.effective_cpus" dev="9p" ino=72876367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.310660][ T8830] 9p: Bad value for 'rfdno' [ 210.497478][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 210.629523][ T8850] 9pnet_virtio: no channels available for device syz [ 210.639304][ T8850] comedi: valid board names for 8255 driver are: [ 210.642597][ T8850] 8255 [ 210.643854][ T8850] comedi: valid board names for vmk80xx driver are: [ 210.646771][ T8850] vmk80xx [ 210.650875][ T8850] comedi: valid board names for usbduxsigma driver are: [ 210.656380][ T8850] usbduxsigma [ 210.659910][ T8850] comedi: valid board names for usbduxfast driver are: [ 210.665993][ T8850] usbduxfast [ 210.669229][ T8850] comedi: valid board names for usbdux driver are: [ 210.673573][ T8850] usbdux [ 210.674952][ T8850] comedi: valid board names for ni6501 driver are: [ 210.679683][ T8850] ni6501 [ 210.681083][ T8850] comedi: valid board names for dt9812 driver are: [ 210.684201][ T8850] dt9812 [ 210.685905][ T8850] comedi: valid board names for ni_labpc_cs driver are: [ 210.690776][ T8850] ni_labpc_cs [ 210.694249][ T8850] comedi: valid board names for ni_daq_700 driver are: [ 210.698911][ T8850] ni_daq_700 [ 210.700887][ T8850] comedi: valid board names for labpc_pci driver are: [ 210.706746][ T8850] labpc_pci [ 210.708317][ T54] input: PS/2 Generic Mouse as /devices/serio3/input/input15 [ 210.709160][ T8850] comedi: valid board names for adl_pci9118 driver are: [ 210.716499][ T8850] pci9118dg [ 210.718152][ T8850] pci9118hg [ 210.719718][ T8850] pci9118hr [ 210.721182][ T8850] comedi: valid board names for 8255_pci driver are: [ 210.729004][ T8850] 8255_pci [ 210.730802][ T8850] comedi: valid board names for s526 driver are: [ 210.737998][ T8850] s526 [ 210.739715][ T8850] comedi: valid board names for multiq3 driver are: [ 210.744786][ T8850] multiq3 [ 210.746412][ T8850] comedi: valid board names for pcmuio driver are: [ 210.753843][ T8850] pcmuio48 [ 210.755781][ T8850] pcmuio96 [ 210.757698][ T8850] comedi: valid board names for pcmmio driver are: [ 210.762781][ T8850] pcmmio [ 210.764883][ T8850] comedi: valid board names for pcmda12 driver are: [ 210.769893][ T8850] pcmda12 [ 210.773687][ T8850] comedi: valid board names for pcmad driver are: [ 210.777319][ T8850] pcmad12 [ 210.779191][ T8850] pcmad16 [ 210.780944][ T8850] comedi: valid board names for ni_labpc driver are: [ 210.786236][ T8850] lab-pc-1200 [ 210.792317][ T8850] lab-pc-1200ai [ 210.794335][ T8850] lab-pc+ [ 210.795860][ T8850] comedi: valid board names for atmio16 driver are: [ 210.802503][ T8850] atmio16 [ 210.804990][ T8850] atmio16d [ 210.806737][ T8850] comedi: valid board names for ni_at_ao driver are: [ 210.809715][ T8850] at-ao-6 [ 210.813507][ T8850] at-ao-10 [ 210.815043][ T8850] comedi: valid board names for ni_at_a2150 driver are: [ 210.818465][ T8850] ni_at_a2150 [ 210.822425][ T8850] comedi: valid board names for adq12b driver are: [ 210.825754][ T8850] adq12b [ 210.827026][ T8850] comedi: valid board names for mpc624 driver are: [ 210.829966][ T8850] mpc624 [ 210.831328][ T8850] comedi: valid board names for c6xdigio driver are: [ 210.835703][ T8850] c6xdigio [ 210.837616][ T8850] comedi: valid board names for aio_iiro_16 driver are: [ 210.841851][ T8850] aio_iiro_16 [ 210.844587][ T8850] comedi: valid board names for aio_aio12_8 driver are: [ 210.849026][ T8850] aio_aio12_8 [ 210.851427][ T8850] aio_ai12_8 [ 210.853445][ T8850] aio_ao12_4 [ 210.856848][ T8850] comedi: valid board names for fl512 driver are: [ 210.860717][ T8850] fl512 [ 210.862025][ T8850] comedi: valid board names for dmm32at driver are: [ 210.866786][ T8850] dmm32at [ 210.868343][ T8850] comedi: valid board names for dt282x driver are: [ 210.873535][ T8850] dt2821 [ 210.875602][ T8850] dt2821-f [ 210.879459][ T8850] dt2821-g [ 210.882939][ T8850] dt2823 [ 210.884535][ T8850] dt2824-pgh [ 210.887093][ T8850] dt2824-pgl [ 210.889387][ T8850] dt2825 [ 210.891524][ T8850] dt2827 [ 210.893973][ T8850] dt2828 [ 210.895815][ T8850] dt2829 [ 210.897893][ T8850] dt21-ez [ 210.899850][ T8850] dt23-ez [ 210.901749][ T8850] dt24-ez [ 210.904729][ T8850] dt24-ez-pgl [ 210.906945][ T8850] comedi: valid board names for dt2817 driver are: [ 210.911613][ T8850] dt2817 [ 210.914416][ T8850] comedi: valid board names for dt2815 driver are: [ 210.919284][ T8850] dt2815 [ 210.920867][ T8850] comedi: valid board names for dt2814 driver are: [ 210.933482][ T8850] dt2814 [ 210.934938][ T8850] comedi: valid board names for dt2811 driver are: [ 210.938063][ T8850] dt2811-pgh [ 210.942050][ T8860] 9pnet_virtio: no channels available for device syz [ 210.946461][ T8850] dt2811-pgl [ 210.947994][ T8850] comedi: valid board names for dt2801 driver are: [ 210.950461][ T8850] dt2801 [ 210.951610][ T8850] comedi: valid board names for das6402 driver are: [ 210.955373][ T8850] das6402-12 [ 210.957633][ T8850] das6402-16 [ 210.959590][ T8850] comedi: valid board names for das1800 driver are: [ 210.963104][ T8850] das-1701st [ 210.965014][ T8850] das-1701st-da [ 210.966659][ T8850] das-1702st [ 210.970551][ T8850] das-1702st-da [ 210.973595][ T54] psmouse serio3: Failed to enable mouse on [ 210.977321][ T8850] das-1702hr [ 210.979392][ T8850] das-1702hr-da [ 210.982749][ T40] audit: type=1400 audit(2000000055.174:649): avc: denied { ioctl } for pid=8824 comm="syz.0.795" path="/215/file0/cpuset.effective_cpus" dev="9p" ino=72876367 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.988412][ T8850] das-1701ao [ 211.001703][ T8850] das-1702ao [ 211.005822][ T8850] das-1801st [ 211.009816][ T8850] das-1801st-da [ 211.011793][ T8850] das-1802st [ 211.016636][ T8850] das-1802st-da [ 211.018618][ T8850] das-1802hr [ 211.020514][ T8850] das-1802hr-da [ 211.023244][ T8850] das-1801hc [ 211.025337][ T8850] das-1802hc [ 211.027487][ T8850] das-1801ao [ 211.029591][ T8850] das-1802ao [ 211.031045][ T8850] comedi: valid board names for das800 driver are: [ 211.034599][ T8850] das-800 [ 211.035997][ T8850] cio-das800 [ 211.037493][ T8850] das-801 [ 211.038894][ T8850] cio-das801 [ 211.040389][ T8850] das-802 [ 211.041928][ T8850] cio-das802 [ 211.047108][ T8850] cio-das802/16 [ 211.049027][ T8850] comedi: valid board names for isa-das08 driver are: [ 211.052071][ T8850] isa-das08 [ 211.054104][ T8850] das08-pgm [ 211.055622][ T8850] das08-pgh [ 211.057197][ T8850] das08-pgl [ 211.058916][ T8850] das08-aoh [ 211.060575][ T8850] das08-aol [ 211.062171][ T8850] das08-aom [ 211.071882][ T8850] das08/jr-ao [ 211.074460][ T8850] das08jr-16-ao [ 211.076636][ T8850] pc104-das08 [ 211.081019][ T8850] das08jr/16 [ 211.083693][ T8850] comedi: valid board names for das16m1 driver are: [ 211.086924][ T8850] das16m1 [ 211.088347][ T8850] comedi: valid board names for dac02 driver are: [ 211.091212][ T8850] dac02 [ 211.093221][ T8850] comedi: valid board names for rti802 driver are: [ 211.097735][ T8850] rti802 [ 211.099240][ T8850] comedi: valid board names for rti800 driver are: [ 211.104183][ T8850] rti800 [ 211.105925][ T8850] rti815 [ 211.107855][ T8850] comedi: valid board names for pcm3724 driver are: [ 211.111313][ T8850] pcm3724 [ 211.113839][ T8850] comedi: valid board names for pcl818 driver are: [ 211.117220][ T8850] pcl818l [ 211.118965][ T8850] pcl818h [ 211.127654][ T8850] pcl818hd [ 211.129391][ T8850] pcl818hg [ 211.142523][ T8850] pcl818 [ 211.143901][ T8850] pcl718 [ 211.145439][ T8850] pcm3718 [ 211.147184][ T8850] comedi: valid board names for pcl816 driver are: [ 211.150682][ T8850] pcl816 [ 211.152019][ T8850] pcl814b [ 211.162767][ T8850] comedi: valid board names for pcl812 driver are: [ 211.179476][ T8850] pcl812 [ 211.181048][ T8850] pcl812pg [ 211.185848][ T8850] acl8112pg [ 211.187865][ T8850] acl8112dg [ 211.197324][ T8850] acl8112hg [ 211.198971][ T8850] a821pgl [ 211.207706][ T8850] a821pglnda [ 211.209423][ T8850] a821pgh [ 211.215822][ T8850] a822pgl [ 211.217101][ T8850] a822pgh [ 211.222840][ T8850] a823pgl [ 211.224815][ T8850] a823pgh [ 211.229728][ T8850] pcl813 [ 211.238032][ T8850] pcl813b [ 211.241276][ T8850] acl8113 [ 211.246132][ T8850] iso813 [ 211.247580][ T8850] acl8216 [ 211.250569][ T8850] a826pg [ 211.252034][ T8850] comedi: valid board names for pcl730 driver are: [ 211.257889][ T8850] pcl730 [ 211.259835][ T8850] iso730 [ 211.261667][ T8850] acl7130 [ 211.264602][ T8850] pcm3730 [ 211.266542][ T8850] pcl725 [ 211.268414][ T8850] p8r8dio [ 211.270214][ T8850] acl7225b [ 211.272007][ T8850] p16r16dio [ 211.275978][ T8850] pcl733 [ 211.277371][ T8850] pcl734 [ 211.279235][ T8850] opmm-1616-xt [ 211.285499][ T8850] pearl-mm-p [ 211.287475][ T8850] ir104-pbf [ 211.289372][ T8850] comedi: valid board names for pcl726 driver are: [ 211.293731][ T8850] pcl726 [ 211.295822][ T8850] pcl727 [ 211.298151][ T8850] pcl728 [ 211.300614][ T8850] acl6126 [ 211.303722][ T8850] acl6128 [ 211.305761][ T8850] comedi: valid board names for pcl724 driver are: [ 211.309435][ T8850] pcl724 [ 211.310594][ T8850] pcl722 [ 211.311814][ T8850] pcl731 [ 211.313881][ T8850] acl7122 [ 211.315421][ T8850] acl7124 [ 211.318151][ T8850] pet48dio [ 211.320409][ T8850] pcmio48 [ 211.322079][ T8850] onyx-mm-dio [ 211.324707][ T8850] comedi: valid board names for pcl711 driver are: [ 211.327671][ T8850] pcl711 [ 211.329139][ T8850] pcl711b [ 211.330515][ T8850] acl8112hg [ 211.332016][ T8850] acl8112dg [ 211.336450][ T8850] comedi: valid board names for amplc_pc263 driver are: [ 211.340931][ T8850] pc263 [ 211.342655][ T8850] comedi: valid board names for amplc_pc236 driver are: [ 211.346098][ T8850] pc36at [ 211.347450][ T8850] comedi: valid board names for amplc_dio200 driver are: [ 211.350642][ T8850] pc212e [ 211.352244][ T8850] pc214e [ 211.354314][ T8850] pc215e [ 211.357186][ T8850] pc218e [ 211.359105][ T8850] pc272e [ 211.360438][ T8850] comedi: valid board names for comedi_parport driver are: [ 211.364137][ T8850] comedi_parport [ 211.365812][ T8850] comedi: valid board names for comedi_test driver are: [ 211.368619][ T8850] comedi_test [ 211.369998][ T8850] comedi: valid board names for comedi_bond driver are: [ 211.373857][ T8850] comedi_bond [ 211.387624][ T8873] TCP: TCP_TX_DELAY enabled [ 211.472499][ T6004] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 211.473782][ T8879] IPVS: dh: FWM 3 0x00000003 - no destination available [ 211.484726][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 211.484742][ T40] audit: type=1400 audit(2000000055.674:652): avc: denied { associate } for pid=8874 comm="syz.3.808" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 211.607334][ T6004] usb 7-1: device descriptor read/64, error -71 [ 211.686754][ T40] audit: type=1400 audit(2000000055.874:653): avc: denied { ioctl } for pid=8887 comm="syz.0.811" path="socket:[25098]" dev="sockfs" ino=25098 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 211.710854][ T40] audit: type=1400 audit(2000000055.894:654): avc: denied { lock } for pid=8887 comm="syz.0.811" path="socket:[25098]" dev="sockfs" ino=25098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 211.733381][ T40] audit: type=1400 audit(2000000055.914:655): avc: denied { map } for pid=8890 comm="syz.3.812" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 211.745046][ T40] audit: type=1400 audit(2000000055.914:656): avc: denied { execute } for pid=8890 comm="syz.3.812" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 211.811226][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 211.873950][ T6004] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 211.892799][ T40] audit: type=1400 audit(2000000056.084:657): avc: denied { read } for pid=8903 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.902661][ T8905] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 211.909922][ T40] audit: type=1400 audit(2000000056.094:658): avc: denied { getopt } for pid=8903 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.918987][ T40] audit: type=1400 audit(2000000056.094:659): avc: denied { recv } for pid=8901 comm="syz.0.815" saddr=10.0.2.2 src=39930 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.931453][ T40] audit: type=1400 audit(2000000056.104:660): avc: denied { recv } for pid=5940 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=45260 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 211.965968][ T40] audit: type=1400 audit(2000000056.154:661): avc: denied { read } for pid=8907 comm="syz.0.817" dev="nsfs" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.002530][ T6004] usb 7-1: device descriptor read/64, error -71 [ 212.017335][ T8910] binder: 8909:8910 ioctl c0306201 200000000080 returned -14 [ 212.024413][ T8910] binder: 8909:8910 ioctl c0306201 2000000003c0 returned -14 [ 212.029834][ T8910] sit0: entered promiscuous mode [ 212.036589][ T8910] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 212.039872][ T8910] netlink: 1 bytes leftover after parsing attributes in process `syz.0.818'. [ 212.114071][ T6004] usb usb7-port1: attempt power cycle [ 212.223676][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 212.282212][ T8922] Mount JFS Failure: -22 [ 212.452437][ T6004] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 212.485206][ T6004] usb 7-1: device descriptor read/8, error -71 [ 212.743159][ T6004] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 212.773377][ T6004] usb 7-1: device descriptor read/8, error -71 [ 212.883082][ T6004] usb usb7-port1: unable to enumerate USB device [ 212.885739][ T8940] IPVS: stopping backup sync thread 8905 ... [ 214.219363][ T8960] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 214.565047][ T8976] ntfs3(loop2): try to read out of volume at offset 0x0 [ 214.633569][ T8985] ntfs3(loop2): try to read out of volume at offset 0x0 [ 214.915696][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 215.623074][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 215.651987][ T9027] input: syz0 as /devices/virtual/input/input16 [ 215.780759][ T9033] netlink: 'syz.1.855': attribute type 142 has an invalid length. [ 215.784056][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.784077][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.784089][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.784113][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.784125][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.800608][ T24] usb 7-1: config 0 descriptor?? [ 216.229142][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 216.232866][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 216.242678][ T24] usb 7-1: USB disconnect, device number 18 [ 216.722506][ T9031] comedi comedi2: reset error (fatal) [ 216.778874][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 216.778889][ T40] audit: type=1400 audit(2000000060.964:676): avc: denied { map } for pid=9051 comm="syz.1.861" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.124179][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 217.206874][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 217.228565][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 217.252356][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'. [ 217.273631][ T9065] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.867'. [ 217.278295][ T9065] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.867'. [ 217.308239][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 217.318201][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.332417][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.337869][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.350873][ T10] usb 7-1: config 0 descriptor?? [ 217.356980][ T40] audit: type=1400 audit(2000000061.544:677): avc: denied { create } for pid=9068 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.372197][ T40] audit: type=1400 audit(2000000061.554:678): avc: denied { bind } for pid=9068 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.415708][ T9074] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 217.418671][ T9074] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.424171][ T9074] vhci_hcd vhci_hcd.0: Device attached [ 217.430850][ T9075] vhci_hcd: connection closed [ 217.431271][ T13] vhci_hcd vhci_hcd.0: stop threads [ 217.442726][ T13] vhci_hcd vhci_hcd.0: release socket [ 217.445771][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 217.496151][ T9078] macsec0: entered promiscuous mode [ 217.498998][ T9078] macsec0: entered allmulticast mode [ 217.501405][ T9078] veth1_macvtap: entered allmulticast mode [ 217.584150][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 217.809925][ T54] usb 7-1: USB disconnect, device number 19 [ 218.297193][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 218.350820][ T9110] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.355850][ T9110] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.441903][ T9110] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.448227][ T9110] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.475037][ T40] audit: type=1400 audit(2000000062.664:679): avc: denied { create } for pid=9112 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.485410][ T40] audit: type=1400 audit(2000000062.674:680): avc: denied { bind } for pid=9112 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.536702][ T40] audit: type=1400 audit(2000000062.724:681): avc: denied { setopt } for pid=9112 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.579374][ T9110] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.584110][ T9110] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.644654][ T6025] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 218.687750][ T9122] Unsupported ieee802154 address type: 0 [ 218.701450][ T9110] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.708439][ T9110] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.795386][ T6025] usb 5-1: config 0 has no interfaces? [ 218.800784][ T6025] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.806312][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.810066][ T6025] usb 5-1: Product: syz [ 218.811166][ T9127] netlink: 'syz.2.887': attribute type 13 has an invalid length. [ 218.811890][ T6025] usb 5-1: Manufacturer: syz [ 218.820693][ T6025] usb 5-1: SerialNumber: syz [ 218.838131][ T6025] usb 5-1: config 0 descriptor?? [ 218.844323][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.851285][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.879503][ T404] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.884075][ T404] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.905810][ T90] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.911694][ T90] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.929430][ T404] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.934147][ T404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.056485][ T844] usb 5-1: USB disconnect, device number 10 [ 219.194541][ T9140] Invalid source name [ 219.196775][ T40] audit: type=1400 audit(2000000063.384:682): avc: denied { mounton } for pid=9139 comm="syz.3.891" path="/208/file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 219.210585][ T9140] UBIFS error (pid: 9140): cannot open "./file0", error -22 [ 219.210756][ T40] audit: type=1400 audit(2000000063.384:683): avc: denied { accept } for pid=9137 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.222728][ T40] audit: type=1400 audit(2000000063.384:684): avc: denied { write } for pid=9137 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.231587][ T40] audit: type=1400 audit(2000000063.384:685): avc: denied { read } for pid=9137 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.436116][ T9147] nbd0: detected capacity change from 0 to 63 [ 219.457970][ T5956] block nbd0: Receive control failed (result -32) [ 219.473669][ T6617] block nbd0: Dead connection, failed to find a fallback [ 219.477239][ T6617] block nbd0: shutting down sockets [ 219.480655][ T6617] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.491391][ T6617] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.494720][ T6617] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.506812][ T6617] Buffer I/O error on dev nbd0, logical block 1, async page read [ 219.512037][ T6617] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.517805][ T6617] Buffer I/O error on dev nbd0, logical block 2, async page read [ 219.522203][ T6617] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.523681][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 219.526429][ T6617] Buffer I/O error on dev nbd0, logical block 3, async page read [ 219.535471][ T6617] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.541715][ T6617] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.545418][ T6617] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.549980][ T6617] Buffer I/O error on dev nbd0, logical block 1, async page read [ 219.553752][ T6617] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.557546][ T6617] Buffer I/O error on dev nbd0, logical block 2, async page read [ 219.561803][ T6617] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.566077][ T6617] Buffer I/O error on dev nbd0, logical block 3, async page read [ 219.569882][ T6617] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.573825][ T6617] Buffer I/O error on dev nbd0, logical block 0, async page read [ 219.577809][ T6617] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.582397][ T6617] Buffer I/O error on dev nbd0, logical block 1, async page read [ 219.595741][ T6617] ldm_validate_partition_table(): Disk read failed. [ 219.606828][ T6617] Dev nbd0: unable to read RDB block 0 [ 219.614210][ T6617] nbd0: unable to read partition table [ 219.633921][ T6617] ldm_validate_partition_table(): Disk read failed. [ 219.638777][ T6617] Dev nbd0: unable to read RDB block 0 [ 219.644015][ T6617] nbd0: unable to read partition table [ 219.655264][ T9162] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 219.844598][ T9182] netlink: 68 bytes leftover after parsing attributes in process `syz.3.905'. [ 219.862037][ T9182] xt_cgroup: invalid path, errno=-2 [ 219.877467][ T9182] syzkaller0: entered promiscuous mode [ 219.879931][ T9182] syzkaller0: entered allmulticast mode [ 219.906865][ T9182] vxcan0: tx address claim with dest, not broadcast [ 219.991128][ T9184] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.004324][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 220.223248][ T9202] netlink: 'syz.0.910': attribute type 21 has an invalid length. [ 220.234006][ T9190] Cannot find del_set index 1 as target [ 220.243085][ T9189] Cannot find del_set index 1 as target [ 220.444988][ T9221] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 220.451128][ T9221] UDF-fs: Scanning with blocksize 2048 failed [ 220.455660][ T9221] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 220.458983][ T9221] UDF-fs: Scanning with blocksize 4096 failed [ 220.473539][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 220.482689][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.536164][ T9221] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 220.623377][ T5956] Bluetooth: hci3: link tx timeout [ 220.632483][ T5956] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.636036][ T9245] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 220.671894][ T9245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.686023][ T9245] ip6tnl0: Caught tx_queue_len zero misconfig [ 220.717785][ T9245] bond3: (slave veth3): Enslaving as an active interface with a down link [ 220.734826][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 220.738312][ T9245] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 220.909225][ T54] IPVS: starting estimator thread 0... [ 221.002431][ T9254] IPVS: using max 39 ests per chain, 93600 per kthread [ 221.312647][ T9259] overlayfs: missing 'lowerdir' [ 221.318709][ T9259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=9259 comm=syz.2.924 [ 221.376581][ T9261] overlay: Unknown parameter 'measure' [ 221.461576][ T9263] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 221.651363][ T9280] usb usb9: usbfs: process 9280 (syz.2.931) did not claim interface 48 before use [ 221.902523][ T6025] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.063537][ T54] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 222.070035][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.075486][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.080788][ T6025] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.087351][ T6025] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.091373][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.099628][ T6025] usb 5-1: config 0 descriptor?? [ 222.248202][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.253646][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.258279][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.265384][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.269990][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.280150][ T54] usb 7-1: config 0 descriptor?? [ 222.516553][ T6025] usbhid 5-1:0.0: can't add hid device: -71 [ 222.526484][ T6025] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 222.533232][ T9284] wireguard0: entered allmulticast mode [ 222.551037][ T6025] usb 5-1: USB disconnect, device number 11 [ 222.652428][ T5962] Bluetooth: hci3: command 0x0406 tx timeout [ 223.064704][ T54] usbhid 7-1:0.0: can't add hid device: -71 [ 223.071813][ T54] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 223.103940][ T54] usb 7-1: USB disconnect, device number 20 [ 223.157054][ T9300] veth1_macvtap: left promiscuous mode [ 223.439465][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 223.439483][ T40] audit: type=1400 audit(2000000067.624:699): avc: denied { read open } for pid=9315 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.472420][ T40] audit: type=1400 audit(2000000067.644:700): avc: denied { getattr } for pid=9315 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.492140][ T40] audit: type=1400 audit(2000000067.674:701): avc: denied { add_name } for pid=9311 comm="dhcpcd-run-hook" name="resolv.conf.macsec0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.504065][ T40] audit: type=1400 audit(2000000067.674:702): avc: denied { create } for pid=9311 comm="dhcpcd-run-hook" name="resolv.conf.macsec0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.513706][ T40] audit: type=1400 audit(2000000067.684:703): avc: denied { write } for pid=9311 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.macsec0.link" dev="tmpfs" ino=5263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.529697][ T40] audit: type=1400 audit(2000000067.684:704): avc: denied { append } for pid=9311 comm="dhcpcd-run-hook" name="resolv.conf.macsec0.link" dev="tmpfs" ino=5263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.577351][ T40] audit: type=1400 audit(2000000067.764:705): avc: denied { remove_name } for pid=9320 comm="rm" name="resolv.conf.macsec0.link" dev="tmpfs" ino=5263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.593979][ T40] audit: type=1400 audit(2000000067.774:706): avc: denied { unlink } for pid=9320 comm="rm" name="resolv.conf.macsec0.link" dev="tmpfs" ino=5263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.634338][ T40] audit: type=1400 audit(2000000067.814:707): avc: denied { setattr } for pid=9319 comm="syz.3.942" path="socket:[28325]" dev="sockfs" ino=28325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.685724][ T5659] veth1_macvtap: entered promiscuous mode [ 223.866305][ T9337] xt_hashlimit: size too large, truncated to 1048576 [ 224.103001][ T9353] netlink: 'syz.3.948': attribute type 12 has an invalid length. [ 224.168924][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.171680][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 224.362660][ T9360] __nla_validate_parse: 4 callbacks suppressed [ 224.362679][ T9360] netlink: 104 bytes leftover after parsing attributes in process `syz.3.950'. [ 224.519132][ T9360] MINIX-fs: blocksize too small for device [ 224.573832][ T9360] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 224.648521][ T9365] 9p: Bad value for 'rfdno' [ 224.653315][ T6025] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 224.791287][ T40] audit: type=1400 audit(2000000068.974:708): avc: denied { connect } for pid=9366 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 224.813792][ T6025] usb 6-1: not running at top speed; connect to a high speed hub [ 224.819154][ T6025] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 224.831376][ T6025] usb 6-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 224.835871][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.839582][ T6025] usb 6-1: Product: syz [ 224.841868][ T6025] usb 6-1: Manufacturer: syz [ 224.845191][ T6025] usb 6-1: SerialNumber: syz [ 225.245105][ T6025] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.247740][ T6025] usb 6-1: MIDIStreaming interface descriptor not found [ 225.521091][ T6025] usb 6-1: USB disconnect, device number 15 [ 226.045802][ T6025] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 226.230348][ T6025] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 226.235443][ T6025] usb 6-1: config 1 interface 0 has no altsetting 0 [ 226.241165][ T6025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.245268][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.249134][ T6025] usb 6-1: Product: ࠄ [ 226.251214][ T6025] usb 6-1: Manufacturer: ࠓ [ 226.254960][ T6025] usb 6-1: SerialNumber:   [ 226.288267][ T9369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.345383][ T6025] usb 6-1: USB disconnect, device number 16 [ 227.421127][ T9380] debugfs: '1^!' already exists in 'ieee80211' [ 227.469668][ T9379] 9p: Bad value for 'rfdno' [ 227.694401][ T9395] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.848887][ T9400] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 227.855381][ T9401] xt_hashlimit: size too large, truncated to 1048576 [ 227.861207][ T9400] xt_nat: multiple ranges no longer supported [ 227.930428][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.945832][ T9406] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 227.949590][ T9403] bridge_slave_0 (unregistering): left allmulticast mode [ 227.949616][ T9403] bridge_slave_0 (unregistering): left promiscuous mode [ 227.949716][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.043344][ T9406] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 228.422774][ T9419] fuse: root generation should be zero [ 228.694235][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 228.694394][ T40] audit: type=1400 audit(2000000072.884:710): avc: denied { create } for pid=9433 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.717512][ T40] audit: type=1400 audit(2000000072.894:711): avc: denied { setopt } for pid=9433 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.735604][ T40] audit: type=1400 audit(2000000072.894:712): avc: denied { accept } for pid=9427 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 228.788430][ T40] audit: type=1400 audit(2000000072.974:713): avc: denied { bind } for pid=9433 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.830424][ T9434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.972'. [ 228.918043][ T9443] xt_hashlimit: size too large, truncated to 1048576 [ 228.984069][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.042064][ T9446] bridge_slave_0 (unregistering): left allmulticast mode [ 229.046216][ T9446] bridge_slave_0 (unregistering): left promiscuous mode [ 229.051460][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.472129][ T40] audit: type=1400 audit(2000000073.654:714): avc: denied { unmount } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.649227][ T9459] fuse: Bad value for 'fd' [ 229.649296][ T9460] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 229.659896][ T9460] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 229.719954][ T9463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.773186][ T40] audit: type=1400 audit(2000000073.964:715): avc: denied { name_bind } for pid=9468 comm="syz.1.984" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 230.875151][ T9496] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 230.924345][ T9496] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 230.935194][ T9500] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 231.483830][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 231.739421][ T40] audit: type=1400 audit(2000000075.924:716): avc: denied { read } for pid=9524 comm="syz.1.999" lport=36838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.767119][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 233.763598][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 234.815150][ T40] audit: type=1400 audit(2000000079.004:717): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 245.152979][ T9591] futex_wake_op: syz.2.1005 tries to shift op by 32; fix this program [ 245.582668][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 245.666353][ T40] audit: type=1400 audit(2000000089.854:718): avc: denied { write } for pid=9619 comm="syz.3.1014" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 245.742494][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 245.751830][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 245.774719][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.779663][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.784019][ T24] usb 7-1: Product: syz [ 245.785864][ T24] usb 7-1: Manufacturer: syz [ 245.785881][ T24] usb 7-1: SerialNumber: syz [ 245.798700][ T24] usb 7-1: config 0 descriptor?? [ 245.803277][ T9608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.813626][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 245.819447][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 245.926585][ T9628] raw_sendmsg: syz.0.1016 forgot to set AF_INET. Fix it! [ 246.133624][ T50] usb 7-1: USB disconnect, device number 21 [ 246.236992][ T9645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9645 comm=syz.1.1020 [ 246.262522][ T6028] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 246.388809][ T9652] 9pnet_fd: p9_fd_create_unix (9652): problem connecting socket: ./file0: -111 [ 246.412535][ T6028] usb 5-1: Using ep0 maxpacket: 32 [ 246.417345][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 246.424026][ T6028] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 246.429636][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 246.437572][ T6028] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 246.442470][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.445926][ T6028] usb 5-1: Product: syz [ 246.447728][ T6028] usb 5-1: Manufacturer: syz [ 246.449659][ T6028] usb 5-1: SerialNumber: syz [ 246.460553][ T6028] usb 5-1: config 0 descriptor?? [ 246.471989][ T6028] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input17 [ 246.581728][ C3] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 246.608735][ C3] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 246.803455][ T9664] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1027'. [ 246.963082][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.968438][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.997219][ T6028] usb 5-1: USB disconnect, device number 12 [ 246.997302][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.021668][ T40] audit: type=1400 audit(2000000091.214:719): avc: denied { ioctl } for pid=9680 comm="syz.1.1031" path="socket:[32895]" dev="sockfs" ino=32895 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.109692][ T9687] pim6reg: entered allmulticast mode [ 247.117030][ T40] audit: type=1400 audit(2000000091.304:720): avc: denied { create } for pid=9685 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 247.739196][ T9699] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1036'. [ 247.803915][ T40] audit: type=1326 audit(2000000091.984:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.2.1041" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc38659c819 code=0x0 [ 248.122454][ T50] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 248.275566][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.280520][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.284831][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.289730][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.294251][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.301202][ T50] usb 6-1: config 0 descriptor?? [ 248.683576][ T9725] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.691158][ T9727] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 248.746104][ T50] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 248.746384][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1048'. [ 248.857615][ T40] audit: type=1400 audit(2000000093.044:722): avc: denied { create } for pid=9732 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 249.054599][ T9740] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 249.217688][ T9754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=877 sclass=netlink_route_socket pid=9754 comm=syz.0.1054 [ 249.460007][ T40] audit: type=1800 audit(2000000093.644:723): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1058" name="blkio.bfq.io_merged_recursive" dev="9p" ino=72876301 res=0 errno=0 [ 249.768060][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 249.816484][ T40] audit: type=1400 audit(2000000094.004:724): avc: denied { connect } for pid=9780 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.868739][ T40] audit: type=1400 audit(2000000094.054:725): avc: denied { listen } for pid=9780 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 249.976904][ T9786] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.096635][ T9788] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.149602][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1064'. [ 250.162918][ T40] audit: type=1400 audit(2000000094.344:726): avc: denied { read write } for pid=9787 comm="syz.2.1063" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.177112][ T40] audit: type=1400 audit(2000000094.344:727): avc: denied { open } for pid=9787 comm="syz.2.1063" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 250.263231][ T9795] netlink: 'syz.2.1065': attribute type 7 has an invalid length. [ 250.266630][ T9795] netlink: 'syz.2.1065': attribute type 8 has an invalid length. [ 250.269907][ T9795] netlink: 'syz.2.1065': attribute type 7 has an invalid length. [ 250.277881][ T9795] netlink: 208784 bytes leftover after parsing attributes in process `syz.2.1065'. [ 250.285697][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 250.339746][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 250.414295][ T9800] netlink: 720 bytes leftover after parsing attributes in process `syz.0.1067'. [ 250.647941][ T9806] xt_bpf: check failed: parse error [ 250.818667][ T9823] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 250.822535][ T24] usb 6-1: USB disconnect, device number 17 [ 251.245273][ T9843] netlink: 28812 bytes leftover after parsing attributes in process `syz.2.1078'. [ 251.250164][ T9843] netlink: ct family unspecified [ 251.255044][ T9843] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 251.280165][ T9843] bond4: entered promiscuous mode [ 251.286057][ T9843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.293970][ T9843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=9843 comm=syz.2.1078 [ 251.315830][ T9843] bond4: (slave bridge2): making interface the new active one [ 251.319598][ T9843] bridge2: entered promiscuous mode [ 251.331145][ T9843] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 251.382470][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.397045][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 251.397064][ T40] audit: type=1400 audit(2000000095.584:729): avc: denied { ioctl } for pid=9845 comm="syz.2.1079" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.398572][ T9846] No buffer was provided with the request [ 251.534542][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.540389][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.545482][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.554925][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.564738][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.582573][ T50] usb 5-1: config 0 descriptor?? [ 251.862454][ T40] audit: type=1400 audit(2000000096.044:730): avc: denied { getopt } for pid=9863 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.973930][ T6028] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 252.024997][ T50] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 252.086186][ T9871] loop5: detected capacity change from 0 to 7 [ 252.108251][ C3] blk_print_req_error: 138 callbacks suppressed [ 252.108266][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.116441][ C3] buffer_io_error: 138 callbacks suppressed [ 252.116460][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.125766][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.130695][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.142596][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.147128][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.150557][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.155013][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.157646][ T6028] usb 6-1: config 0 has no interfaces? [ 252.161825][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.165715][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.173030][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.176764][ T6028] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 252.177117][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.181665][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.186369][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.189377][ T6028] usb 6-1: Product: syz [ 252.193116][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.193244][ T9871] ldm_validate_partition_table(): Disk read failed. [ 252.198902][ T6028] usb 6-1: Manufacturer: syz [ 252.202882][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.204291][ T6028] usb 6-1: SerialNumber: syz [ 252.207792][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.213070][ T6028] usb 6-1: config 0 descriptor?? [ 252.214630][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.220330][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.224065][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.228107][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 252.233604][ T9871] Dev loop5: unable to read RDB block 0 [ 252.237377][ T9871] loop5: unable to read partition table [ 252.240414][ T9871] loop5: partition table beyond EOD, truncated [ 252.243826][ T9871] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 252.258506][ T9879] ldm_validate_partition_table(): Disk read failed. [ 252.265319][ T9879] Dev loop5: unable to read RDB block 0 [ 252.270424][ T9879] loop5: unable to read partition table [ 252.281706][ T9879] loop5: partition table beyond EOD, truncated [ 252.465094][ T1254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.472946][ T1254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.581839][ T9897] xt_bpf: check failed: parse error [ 252.827222][ T9909] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 252.893328][ T9909] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 253.269126][ T9914] __nla_validate_parse: 2 callbacks suppressed [ 253.269488][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 253.293440][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.330136][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.477727][ T40] audit: type=1400 audit(2000000097.664:731): avc: denied { accept } for pid=9921 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.611138][ T9925] Bluetooth: hci0: too big key_count value 8526 [ 254.003086][ T9941] xt_bpf: check failed: parse error [ 254.018466][ T9943] comedi: No check for data length of config insn id 3 is implemented [ 254.023057][ T9943] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 254.023112][ T9943] comedi: Assuming n=86 is correct [ 254.035398][ T6028] usb 5-1: USB disconnect, device number 13 [ 254.585616][ T9961] FAULT_INJECTION: forcing a failure. [ 254.585616][ T9961] name failslab, interval 1, probability 0, space 0, times 1 [ 254.592121][ T9961] CPU: 2 UID: 0 PID: 9961 Comm: syz.2.1111 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.592152][ T9961] Tainted: [L]=SOFTLOCKUP [ 254.592158][ T9961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.592169][ T9961] Call Trace: [ 254.592649][ T9961] [ 254.592659][ T9961] dump_stack_lvl+0x100/0x190 [ 254.594275][ T9961] should_fail_ex.cold+0x5/0xa [ 254.595057][ T9961] should_failslab+0xc2/0x120 [ 254.595678][ T9961] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 254.595704][ T9961] ? create_new_namespaces+0x30/0xac0 [ 254.595885][ T9961] ? rcu_is_watching+0x12/0xc0 [ 254.595912][ T9961] create_new_namespaces+0x30/0xac0 [ 254.595938][ T9961] ? bpf_lsm_capable+0x9/0x10 [ 254.595967][ T9961] ? security_capable+0x80/0x260 [ 254.596734][ T9961] unshare_nsproxy_namespaces+0xf2/0x220 [ 254.596766][ T9961] ksys_unshare+0x438/0xab0 [ 254.596789][ T9961] ? __pfx_ksys_unshare+0x10/0x10 [ 254.596807][ T9961] ? ksys_write+0x1ac/0x250 [ 254.596837][ T9961] __x64_sys_unshare+0x31/0x40 [ 254.596857][ T9961] do_syscall_64+0x10b/0xf80 [ 254.596936][ T9961] ? clear_bhb_loop+0x40/0x90 [ 254.596969][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.596989][ T9961] RIP: 0033:0x7fc38659c819 [ 254.597009][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.597027][ T9961] RSP: 002b:00007fc3847f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.597173][ T9961] RAX: ffffffffffffffda RBX: 00007fc386815fa0 RCX: 00007fc38659c819 [ 254.597185][ T9961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 254.597196][ T9961] RBP: 00007fc3847f6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.597207][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.597218][ T9961] R13: 00007fc386816038 R14: 00007fc386815fa0 R15: 00007ffe01cf8de8 [ 254.597244][ T9961] [ 254.696307][ T6028] usb 6-1: USB disconnect, device number 18 [ 254.761908][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 254.786045][ T40] audit: type=1400 audit(2000000098.974:732): avc: denied { connect } for pid=9971 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.950217][ T9976] syzkaller0: entered promiscuous mode [ 254.975595][ T9976] syzkaller0: entered allmulticast mode [ 254.978780][ T40] audit: type=1400 audit(2000000099.164:733): avc: denied { connect } for pid=9984 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.992659][ T40] audit: type=1400 audit(2000000099.164:734): avc: denied { write } for pid=9984 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.644031][T10013] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1124'. [ 256.192859][ T6025] ------------[ cut here ]------------ [ 256.198469][ T6025] [CRTC:39:crtc-0] vblank wait timed out [ 256.201467][ T6025] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#1: kworker/1:3/6025 [ 256.210531][ T6025] Modules linked in: [ 256.216076][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.221909][ T6025] Tainted: [L]=SOFTLOCKUP [ 256.224211][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.229669][ T6025] Workqueue: events drm_fb_helper_damage_work [ 256.233283][ T6025] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 256.237318][ T6025] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d e8 da 3e 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 0f 61 fc e9 7c fe ff ff e8 79 [ 256.265085][ T6025] RSP: 0018:ffffc900028ef6e8 EFLAGS: 00010246 [ 256.312227][ T6025] RAX: 0000000000000000 RBX: ffff888027f60040 RCX: 1ffff11004fec022 [ 256.316629][ T6025] RDX: ffff888026f58340 RSI: 0000000000000027 RDI: ffffffff90e74620 [ 256.320844][ T6025] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 256.326351][ T6025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 256.347146][ T6025] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888064e3f500 [ 256.351426][ T6025] FS: 0000000000000000(0000) GS:ffff8880d63db000(0000) knlGS:0000000000000000 [ 256.355446][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.358355][ T6025] CR2: 00007f6d32486ff8 CR3: 00000000542e9000 CR4: 0000000000352ef0 [ 256.362484][ T6025] Call Trace: [ 256.364166][ T6025] [ 256.365437][ T6025] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 256.368616][ T6025] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.371347][ T6025] ? lockdep_hardirqs_on+0x78/0x100 [ 256.374188][ T6025] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.377671][ T6025] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 256.380697][ T6025] drm_atomic_helper_commit_tail+0xff/0x130 [ 256.383429][ T6025] commit_tail+0x338/0x430 [ 256.385564][ T6025] drm_atomic_helper_commit+0x303/0x380 [ 256.388337][ T6025] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 256.391358][ T6025] drm_atomic_commit+0x230/0x300 [ 256.393741][ T6025] ? __pfx_drm_atomic_commit+0x10/0x10 [ 256.396165][ T6025] ? __pfx___drm_printfn_info+0x10/0x10 [ 256.399058][ T6025] ? modeset_lock+0x114/0x6d0 [ 256.401556][ T6025] drm_atomic_helper_dirtyfb+0x603/0x790 [ 256.404293][ T6025] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 256.406708][ T6025] ? do_raw_spin_lock+0x128/0x260 [ 256.409868][ T6025] ? find_held_lock+0x2b/0x80 [ 256.412172][ T6025] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 256.416451][ T6025] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 256.419945][ T6025] drm_fb_helper_damage_work+0x348/0x640 [ 256.422619][ T6025] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 256.425341][ T6025] ? rcu_is_watching+0x12/0xc0 [ 256.427505][ T6025] process_one_work+0xa0e/0x1980 [ 256.430168][ T6025] ? __pfx_process_one_work+0x10/0x10 [ 256.432765][ T6025] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 256.435791][ T6025] worker_thread+0x5ef/0xe50 [ 256.438089][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 256.440602][ T6025] ? kthread+0x13a/0x450 [ 256.442854][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 256.445268][ T6025] kthread+0x370/0x450 [ 256.447160][ T6025] ? __pfx_kthread+0x10/0x10 [ 256.449821][ T6025] ret_from_fork+0x72b/0xd50 [ 256.452564][ T6025] ? __pfx_ret_from_fork+0x10/0x10 [ 256.455097][ T6025] ? __switch_to+0x800/0x1100 [ 256.457472][ T6025] ? __pfx_kthread+0x10/0x10 [ 256.459962][ T6025] ret_from_fork_asm+0x1a/0x30 [ 256.462364][ T6025] [ 256.463671][ T6025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.467495][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.474710][ T6025] Tainted: [L]=SOFTLOCKUP [ 256.476768][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.480879][ T6025] Workqueue: events drm_fb_helper_damage_work [ 256.483189][ T6025] Call Trace: [ 256.484801][ T6025] [ 256.486145][ T6025] dump_stack_lvl+0x100/0x190 [ 256.488446][ T6025] vpanic+0x552/0x970 [ 256.490511][ T6025] ? __pfx_vpanic+0x10/0x10 [ 256.493379][ T6025] panic+0xd1/0xe0 [ 256.495609][ T6025] ? __pfx_panic+0x10/0x10 [ 256.498290][ T6025] ? check_panic_on_warn+0x1f/0x90 [ 256.500601][ T6025] check_panic_on_warn.cold+0x19/0x34 [ 256.503169][ T6025] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 256.506648][ T6025] __warn.cold+0x191/0x328 [ 256.508778][ T6025] __report_bug+0x296/0x3d0 [ 256.511125][ T6025] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 256.514172][ T6025] ? __pfx___report_bug+0x10/0x10 [ 256.517194][ T6025] ? lockdep_hardirqs_on+0x78/0x100 [ 256.520216][ T6025] report_bug_entry+0xe1/0x290 [ 256.523182][ T6025] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 256.526902][ T6025] handle_bug+0x1cd/0x2a0 [ 256.528797][ T6025] exc_invalid_op+0x17/0x50 [ 256.530793][ T6025] asm_exc_invalid_op+0x1a/0x20 [ 256.532871][ T6025] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 256.536130][ T6025] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d e8 da 3e 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 0f 61 fc e9 7c fe ff ff e8 79 [ 256.545112][ T6025] RSP: 0018:ffffc900028ef6e8 EFLAGS: 00010246 [ 256.547969][ T6025] RAX: 0000000000000000 RBX: ffff888027f60040 RCX: 1ffff11004fec022 [ 256.551393][ T6025] RDX: ffff888026f58340 RSI: 0000000000000027 RDI: ffffffff90e74620 [ 256.555050][ T6025] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 256.558826][ T6025] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 256.562230][ T6025] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888064e3f500 [ 256.566188][ T6025] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 256.569755][ T6025] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 256.573338][ T6025] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.576280][ T6025] ? lockdep_hardirqs_on+0x78/0x100 [ 256.578776][ T6025] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.581973][ T6025] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 256.584980][ T6025] drm_atomic_helper_commit_tail+0xff/0x130 [ 256.587575][ T6025] commit_tail+0x338/0x430 [ 256.590319][ T6025] drm_atomic_helper_commit+0x303/0x380 [ 256.594897][ T6025] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 256.598688][ T6025] drm_atomic_commit+0x230/0x300 [ 256.600866][ T6025] ? __pfx_drm_atomic_commit+0x10/0x10 [ 256.603451][ T6025] ? __pfx___drm_printfn_info+0x10/0x10 [ 256.607207][ T6025] ? modeset_lock+0x114/0x6d0 [ 256.610036][ T6025] drm_atomic_helper_dirtyfb+0x603/0x790 [ 256.612866][ T6025] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 256.615701][ T6025] ? do_raw_spin_lock+0x128/0x260 [ 256.618428][ T6025] ? find_held_lock+0x2b/0x80 [ 256.620868][ T6025] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 256.623460][ T6025] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 256.626061][ T6025] drm_fb_helper_damage_work+0x348/0x640 [ 256.628859][ T6025] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 256.633297][ T6025] ? rcu_is_watching+0x12/0xc0 [ 256.635567][ T6025] process_one_work+0xa0e/0x1980 [ 256.637962][ T6025] ? __pfx_process_one_work+0x10/0x10 [ 256.640776][ T6025] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 256.646272][ T6025] worker_thread+0x5ef/0xe50 [ 256.648747][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 256.652611][ T6025] ? kthread+0x13a/0x450 [ 256.655375][ T6025] ? __pfx_worker_thread+0x10/0x10 [ 256.657746][ T6025] kthread+0x370/0x450 [ 256.659639][ T6025] ? __pfx_kthread+0x10/0x10 [ 256.671960][ T6025] ret_from_fork+0x72b/0xd50 [ 256.673800][ T6025] ? __pfx_ret_from_fork+0x10/0x10 [ 256.675849][ T6025] ? __switch_to+0x800/0x1100 [ 256.677643][ T6025] ? __pfx_kthread+0x10/0x10 [ 256.685895][ T6025] ret_from_fork_asm+0x1a/0x30 [ 256.693298][ T6025] [ 256.696008][ T6025] Kernel Offset: disabled [ 256.707664][ T6025] Rebooting in 86400 seconds..