last executing test programs: 12.648685076s ago: executing program 0 (id=339): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) setreuid(0xffffffffffffffff, 0xee00) r1 = socket$kcm(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900d308000079000000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, r2, 0x200, 0x5f0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "7aa9ad9a69a10de61d0fc62321cd06ee70f8ccd4542a779ce5097315591eda7416218c659802fe43867a631a92"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8d0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)={0x14, 0x9, 0xa, 0x401, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60) 12.570539699s ago: executing program 0 (id=341): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4086, 0xff6}], 0x1, 0x300, 0xf5ffffff) r4 = syz_io_uring_setup(0x6960, &(0x7f0000000000)={0x0, 0x13f58, 0x10000, 0x2, 0x2d0, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r4, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) 12.569825253s ago: executing program 3 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d412ba80000000000000000000000cc78608136182e7c3706765f306e4285c2b61934abadde6c3b8bfcc99bd27b6e6d69de3dc3c8f8b4d099ffcc4da99735cf5f4369fd292d590f728cd64a3dfd1c71a3f5d99f8b98f298362708df8600001400000000000000000000000079994c28d885c03da5b0d589493ea4023bdca23b520d010d5faad6f43beadc3e703e566cd1d7fc6152493ed5dbb89d6b9db569fde2c852167a2babbae399bfc70d0b232cfae0b78cbb5ae442f7ddfb4e2632956909dc729135d15201208773a1ec6200f29b", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x80000000}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000001d00)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "83cb90", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xdb, 0x4, 0x0, 0x9}}}}}}}}, 0x4e) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r8, 0x100000000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ceph\x00', 0x208000, 0x0) 12.350658457s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xec, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 11.700759133s ago: executing program 0 (id=348): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(r0, 0x0, 0xfffffff6) syz_clone3(&(0x7f0000000380)={0x21c2280, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 11.700440377s ago: executing program 0 (id=349): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x45300, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x4ff, 0x80000000, 0x1, 0x5}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000a010}, 0x20000010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r5 = syz_clone(0x8284000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x21, 0x5, 0x2) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0xffffffffffffff91, &(0x7f0000000100)={0x8004000000000004}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x86) 10.789834961s ago: executing program 0 (id=361): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r1) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001020795cf062b4fc02", @ANYRESHEX=r0, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001020795cf062b4fc02", @ANYRESHEX=r0, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) 10.501891483s ago: executing program 0 (id=366): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd700008000000170000000c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="2000ae80140002007465616d300093b7c17599b1417742ff00000000", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e", 0x22}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x2000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xffffffff, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r0}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000001780), 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 10.347151385s ago: executing program 32 (id=366): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd700008000000170000000c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="2000ae80140002007465616d300093b7c17599b1417742ff00000000", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e", 0x22}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x2000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xffffffff, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r0}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000001780), 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 8.727729323s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xec, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 8.270129289s ago: executing program 4 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x204840, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb06"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpeername$packet(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1108, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) sendto$inet6(r3, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) 8.269931704s ago: executing program 4 (id=398): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0xc, 0xa000200000a958, 0x100040000, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.175621443s ago: executing program 4 (id=401): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/236, 0xec}], 0x1, 0x5f0e, 0x0) (async) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/236, 0xec}], 0x1, 0x5f0e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.860620647s ago: executing program 3 (id=410): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0xc, 0xa000200000a958, 0x100040000, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7.859803477s ago: executing program 3 (id=412): inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000003040)="162dd3", 0x3}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x2f, 0x7}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r8, 0x0, 0x0) wait4(r8, 0x0, 0x40000000, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, 0x0) 6.049317742s ago: executing program 3 (id=420): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0xc, 0xa000200000a958, 0x100040000, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.006879264s ago: executing program 33 (id=420): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0xc, 0xa000200000a958, 0x100040000, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.950777408s ago: executing program 4 (id=422): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0x100003}, {0x80000001, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.923777294s ago: executing program 34 (id=422): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x5, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x400003, 0x40000002, 0x100003}, {0x80000001, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.179193734s ago: executing program 1 (id=435): mount$9p_virtio(&(0x7f0000000040), 0x0, 0x0, 0x4, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de13577133898fe1184f05568ab34992"], 0x20}}, 0xc000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="04060000", @ANYRES16=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) 2.102162584s ago: executing program 2 (id=462): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$kcm(0xa, 0x3, 0x3a) keyctl$revoke(0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 2.039548995s ago: executing program 2 (id=465): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7050000000000007910a8000000000003000000000000002ebba7f09662d7dc01d308c7039500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1.979268743s ago: executing program 2 (id=467): r0 = gettid() r1 = socket$inet6(0xa, 0x3, 0x2f) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @multicast1}, &(0x7f0000000180)=0xc) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r4, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x4, 0x1}}, 0x20) write$dsp(r2, &(0x7f0000000280)='\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x200, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffe0}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x22004091) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000001c0)=[r5, r6], 0x2) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42884}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 1.108252958s ago: executing program 2 (id=474): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c014) setreuid(0xffffffffffffffff, 0xee00) (async, rerun: 64) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) (rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xb29}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00ff0000c0000000", @ANYRES32=0x1, @ANYBLOB="9d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000000000000100"/28], 0x48) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) (async, rerun: 32) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (rerun: 32) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x1000, 0x400c}}) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000000)) (async, rerun: 64) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0x40082104, 0x0) (async, rerun: 32) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0xea95, 0x900, 0x4, 0x5}, 0x8) (async) close(0x3) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0xfd3b3000) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r1, 0x52e08000) 1.108007077s ago: executing program 1 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r2}, &(0x7f0000002480), &(0x7f00000024c0)=r1}, 0x20) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) (async) r5 = socket(0x1e, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x10f, 0x11, 0x0, &(0x7f0000000500)) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000080)={0x100000, 0x2d7, &(0x7f0000000300)="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", &(0x7f0000001300)="2a9ed8de0481a0188323b529eebe429a8084c1f5c991490ab51fa7bcf657a08591f747115ebe7a4b0143c976e9fd8eebd9d80d4b87a6cfc2720a1b4e552c94819959487cc1340915e5e8f3ae3d941b860350296f2c51aeb6ec0a26b85775316a5fd77e2b49fd9188b1cd510d2d0b212dd1e54a67a570c6159760e782df30b627b09ec76fc7ab2021795f881bb64f90aed42fa9f2012e6891f2c30586a9e4147cc8b7a62e6c286b6f75718faac1f45ee45420ccc5ee214ab8a62710db892dc603c4d4c687ff46a346362a8faa56363260", 0x1000, 0xd0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000000)=0xffff0001) (async) r8 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r9, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) ioctl$SNDCTL_DSP_RESET(r6, 0x80044dfe, 0x1000000000000) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000400001a000100e70000000000000014140000000000150008de000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000180), &(0x7f0000000040)=@udp=r3}, 0x20) 1.107700431s ago: executing program 1 (id=476): r0 = fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003540)=@vmx={0x100, 0x0, 0x465, {0x6000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}}) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x1) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xbf, 0x2924, 0xffff, 0x9e01, 0x11, "0000000000000002"}) (async) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r7 = accept$ax25(r6, &(0x7f0000000180)={{0x3, @bcast}, [@bcast, @rose, @default, @netrom, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000200)=0x48) close(r7) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r9, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r9, &(0x7f0000002180), 0x0, 0x84c0) (async) write$cgroup_int(r8, &(0x7f0000000100)=0x8, 0x12) setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f0000000240)=0xffe, 0x4) 1.019872518s ago: executing program 1 (id=479): r0 = socket$packet(0x11, 0x2, 0x300) msgget$private(0x0, 0xb27766e99bf42011) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r7, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2}}, 0x2e) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x2e00, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, @local}, 0x10) 1.019082552s ago: executing program 2 (id=480): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3ecc, 0x4800, 0x0, 0x1000000004, 0x2}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0xf3}, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xf, r3}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='syzkaller0\x00', 0x10) 950.028546ms ago: executing program 1 (id=483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0xa, @sliced={0xbf8a, [0x401, 0x2, 0x2, 0x3, 0x1, 0x5, 0x39e, 0x5, 0x5, 0x5, 0x3ff, 0x7, 0x6f, 0x7, 0x6, 0x2, 0x9, 0x4, 0x5, 0xff, 0x2, 0x7fff, 0xe0e, 0xd, 0x6, 0x0, 0x9, 0x7ff, 0x4, 0x6, 0x1, 0x8, 0xf, 0x100, 0x2, 0xaa, 0x0, 0x4, 0x4, 0xa1, 0x7ff, 0xa, 0xb, 0x3, 0x5, 0x60, 0x100, 0xb8], 0x4}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @local, 0x5}, 0x1c) r3 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000000), 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 790.720751ms ago: executing program 5 (id=485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000160001040000000000000000ac1414aa00000000000000007f0061db3a1c000fd100000002020000800c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000400000000000000000000080010000800000000000000000000000000000000000000000010100000004000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a000000940000000000000000000000ad040000240009000000010000000000420000000000000001000000000000000800000000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 790.307836ms ago: executing program 5 (id=487): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa193, 0x2c502}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x8, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x30, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f0000000140)=""/180, 0x2c, 0xb4, 0x0, 0x100}, 0x28) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 580.335637ms ago: executing program 6 (id=491): socket(0x25, 0x2, 0xded) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r1}) r3 = socket(0xa, 0x1, 0xfffffffd) request_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000021, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x35) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r8 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) pread64(r6, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@local, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x32}, {0x0, 0x4, 0x5, 0x0, 0x40, 0xfffffffffffffff9, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0xcd17}, 0x6, 0x40000000, 0x0, 0x1, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 480.33015ms ago: executing program 5 (id=492): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000280)={&(0x7f0000000180)=""/129, 0x81}) (async) ptrace$getregs(0xc, r0, 0xcd6, &(0x7f00000002c0)=""/4096) (async) mount(&(0x7f00000012c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = socket$kcm(0x2, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0xc, &(0x7f00000000c0)=[{0x29, '\x00', @data=0x5, 0xfffffff7}]}) (async) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000003c0)=@sr0, 0x0, 0x0) 479.854081ms ago: executing program 6 (id=493): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) socket$inet6(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$kcm(0xa, 0x3, 0x3a) keyctl$revoke(0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 479.065128ms ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async, rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x24004040, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00083c01fe7b4a00000000000000000000000000fe8000000000000000000000000000aa0000fd0066000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 379.123424ms ago: executing program 6 (id=495): r0 = socket(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000140)=""/196, 0xc4, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf4e) recvmsg(r6, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000240)=0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r7}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x48080}, 0x10) 378.757981ms ago: executing program 5 (id=496): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0x0, 0xf000}, 0xc5f}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x100000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000001a40), 0x1000009, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x7ff, r2}, 0x38) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x8}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 287.35897ms ago: executing program 6 (id=497): socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 101.804109ms ago: executing program 5 (id=498): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c4af96c8663ad81b86b898d9435af40b29d0936e15fb284457b0bc44d54579a75db65633809f4e37ef15070c36fdb9660809c71e250fab354c5772fee217712b65392", 0x0, 0x407, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000180)=""/149, 0x95}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 100.141327ms ago: executing program 6 (id=499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d991db235b7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r4 = epoll_create(0xc9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x1}) 99.957097ms ago: executing program 2 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000005eb0920948aeb8f7c000107000000000087984986bf1100b42c7f93df00000011000000060001001b00000008000a007afa41af0b0564edd3d5766e8371cbb24ec3f08eb16479663fe1699e8d070bea0e3cdee7dd2d8a0d962549c397915bb294ad1c32b876f1f72d9d9936c252376f5894f027f9289c4bbdbe3410850dae904314a58edfb6d0ab67b9c1dd5c26772f3b420a8bf1", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22642, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000180), 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000280)={0x2, 0x3}, 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 366.173µs ago: executing program 1 (id=501): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000040)=0xffff, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x800001) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, 0x0, 0x20000010) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c5) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x4}) (async) close(r0) 0s ago: executing program 6 (id=502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x12, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x47, 0x75, 0x3, 0x3, 0x3, 0x2, 0x0, @none}]}}}}, 0x1d) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r5], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) (async) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f00000002c0)={{0x8, 0x4, &(0x7f0000000280)=[{0x1, 0x0, 0x3}, {0x2, 0x0, 0x1}, {0xc, 0x0, 0x4}, {0x25, 0x0, 0x8}]}, 0xf3, 0x4, 0x12, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r7, 0xc010644a, &(0x7f0000000300)={r8}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x0, 0x9}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r5, r6], 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01864c1, &(0x7f0000000200)={r3}) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) kernel console output (not intermixed with test programs): [ 43.977802][ T40] audit: type=1400 audit(1773729826.160:60): avc: denied { rlimitinh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.983874][ T40] audit: type=1400 audit(1773729826.160:61): avc: denied { siginh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:14699' (ED25519) to the list of known hosts. [ 46.001068][ T40] audit: type=1400 audit(1773729828.200:62): avc: denied { name_bind } for pid=5899 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.026773][ T40] audit: type=1400 audit(1773729828.220:63): avc: denied { execute } for pid=5901 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.035205][ T40] audit: type=1400 audit(1773729828.230:64): avc: denied { execute_no_trans } for pid=5901 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.191136][ T40] audit: type=1400 audit(1773729830.390:65): avc: denied { mounton } for pid=5901 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.198971][ T40] audit: type=1400 audit(1773729830.400:66): avc: denied { mount } for pid=5901 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.200669][ T5901] cgroup: Unknown subsys name 'net' [ 48.321626][ T5901] cgroup: Unknown subsys name 'cpuset' [ 48.326827][ T5901] cgroup: Unknown subsys name 'rlimit' [ 48.517586][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.215030][ T5901] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.471116][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.471133][ T40] audit: type=1400 audit(1773729834.670:82): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.713018][ T40] audit: type=1400 audit(1773729834.910:83): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.719612][ T40] audit: type=1400 audit(1773729834.910:84): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.731062][ T40] audit: type=1400 audit(1773729834.910:85): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.742138][ T40] audit: type=1400 audit(1773729834.930:86): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[5670]" dev="sockfs" ino=5670 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.764186][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.768924][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.772395][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.775145][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.775623][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.778570][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.781596][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.783299][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.783907][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.784408][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.784823][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.785977][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.786360][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.787152][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.787631][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.788250][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.794931][ T40] audit: type=1400 audit(1773729834.990:87): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.797484][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.804603][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.806308][ T40] audit: type=1400 audit(1773729834.990:88): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.809172][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.815306][ T40] audit: type=1400 audit(1773729834.990:89): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.818307][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.974404][ T40] audit: type=1400 audit(1773729835.170:90): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.022726][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.175855][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 53.180845][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 53.189323][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.191582][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.193853][ T5931] bridge_slave_0: entered allmulticast mode [ 53.196514][ T5931] bridge_slave_0: entered promiscuous mode [ 53.222215][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.224528][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.226806][ T5931] bridge_slave_1: entered allmulticast mode [ 53.229964][ T5931] bridge_slave_1: entered promiscuous mode [ 53.300366][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.322800][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.328291][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.368701][ T5931] team0: Port device team_slave_0 added [ 53.379147][ T5931] team0: Port device team_slave_1 added [ 53.415538][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.418434][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.421447][ T5930] bridge_slave_0: entered allmulticast mode [ 53.425302][ T5930] bridge_slave_0: entered promiscuous mode [ 53.429522][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.431856][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.434740][ T5933] bridge_slave_0: entered allmulticast mode [ 53.439824][ T5933] bridge_slave_0: entered promiscuous mode [ 53.442979][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.445834][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.448813][ T5933] bridge_slave_1: entered allmulticast mode [ 53.451572][ T5933] bridge_slave_1: entered promiscuous mode [ 53.474367][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.477568][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.480185][ T5930] bridge_slave_1: entered allmulticast mode [ 53.483436][ T5930] bridge_slave_1: entered promiscuous mode [ 53.498139][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.500423][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.510222][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.516887][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.519999][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.531131][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.568316][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.583148][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.586259][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.589982][ T5937] bridge_slave_0: entered allmulticast mode [ 53.593958][ T5937] bridge_slave_0: entered promiscuous mode [ 53.598881][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.601284][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.604496][ T5937] bridge_slave_1: entered allmulticast mode [ 53.608461][ T5937] bridge_slave_1: entered promiscuous mode [ 53.613361][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.628999][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.642423][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.688735][ T5931] hsr_slave_0: entered promiscuous mode [ 53.691999][ T5931] hsr_slave_1: entered promiscuous mode [ 53.704223][ T5933] team0: Port device team_slave_0 added [ 53.707437][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.733525][ T5933] team0: Port device team_slave_1 added [ 53.737822][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.743291][ T5930] team0: Port device team_slave_0 added [ 53.786133][ T5930] team0: Port device team_slave_1 added [ 53.810220][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.813011][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.823747][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.832210][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.835177][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.846309][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.861697][ T5937] team0: Port device team_slave_0 added [ 53.881653][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.884036][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.892585][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.898569][ T5937] team0: Port device team_slave_1 added [ 53.906211][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.909341][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.919654][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.993427][ T5933] hsr_slave_0: entered promiscuous mode [ 53.996667][ T5933] hsr_slave_1: entered promiscuous mode [ 54.000156][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 54.002685][ T5933] Cannot create hsr debugfs directory [ 54.006824][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.009823][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.020280][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.031646][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.034718][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.045525][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.109294][ T5930] hsr_slave_0: entered promiscuous mode [ 54.112607][ T5930] hsr_slave_1: entered promiscuous mode [ 54.115605][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 54.118624][ T5930] Cannot create hsr debugfs directory [ 54.195470][ T5937] hsr_slave_0: entered promiscuous mode [ 54.198844][ T5937] hsr_slave_1: entered promiscuous mode [ 54.201871][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 54.204388][ T5937] Cannot create hsr debugfs directory [ 54.318807][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.349499][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.359947][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.369210][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.489008][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.494150][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.511060][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.518865][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.565209][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.573001][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.580201][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.589836][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.662194][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.668656][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.675218][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.684476][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.704117][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.738189][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.754098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.756760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.763398][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.775638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.778832][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.798044][ T5944] Bluetooth: hci2: command tx timeout [ 54.803955][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.815783][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.838208][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.842445][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.844769][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.855242][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.857781][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.862242][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.865354][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.877584][ T5944] Bluetooth: hci0: command tx timeout [ 54.877602][ T5935] Bluetooth: hci3: command tx timeout [ 54.881025][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.887834][ T5935] Bluetooth: hci1: command tx timeout [ 54.910562][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.919588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.922652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.928644][ T40] audit: type=1400 audit(1773729837.130:91): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.940784][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.978515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.981795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.994380][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.997502][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.040070][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.065485][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.090312][ T5931] veth0_vlan: entered promiscuous mode [ 55.100446][ T5931] veth1_vlan: entered promiscuous mode [ 55.130596][ T5931] veth0_macvtap: entered promiscuous mode [ 55.135191][ T5931] veth1_macvtap: entered promiscuous mode [ 55.139846][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.163919][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.172157][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.180890][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.200968][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.204899][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.230250][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.233276][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.245437][ T5930] veth0_vlan: entered promiscuous mode [ 55.248739][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.260997][ T5933] veth0_vlan: entered promiscuous mode [ 55.273576][ T5930] veth1_vlan: entered promiscuous mode [ 55.294100][ T5933] veth1_vlan: entered promiscuous mode [ 55.319028][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.322622][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.329277][ T5937] veth0_vlan: entered promiscuous mode [ 55.354327][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.354818][ T5937] veth1_vlan: entered promiscuous mode [ 55.357339][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.362619][ T5930] veth0_macvtap: entered promiscuous mode [ 55.375458][ T5933] veth0_macvtap: entered promiscuous mode [ 55.385217][ T5930] veth1_macvtap: entered promiscuous mode [ 55.389580][ T5933] veth1_macvtap: entered promiscuous mode [ 55.413823][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.414193][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.426677][ T5937] veth0_macvtap: entered promiscuous mode [ 55.435662][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.441825][ T5937] veth1_macvtap: entered promiscuous mode [ 55.449904][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.473269][ T105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.476676][ T105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.482917][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.497828][ T105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.501152][ T105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.509497][ T105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.514184][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.521585][ T6017] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 55.521884][ T105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.528683][ T105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.531935][ T105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.538100][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.559275][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.563098][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.576994][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.590555][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.594694][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.601585][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.652981][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.655677][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.675159][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.688317][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.708660][ T6021] ======================================================= [ 55.708660][ T6021] WARNING: The mand mount option has been deprecated and [ 55.708660][ T6021] and is ignored by this kernel. Remove the mand [ 55.708660][ T6021] option from the mount to silence this warning. [ 55.708660][ T6021] ======================================================= [ 55.727084][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.729876][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.738790][ T6021] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 55.749782][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.753415][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.801960][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.809286][ T6023] hfs: can't find a HFS filesystem on dev sr0 [ 55.811704][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.967900][ T6037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 55.970726][ T6037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.976140][ T6037] vhci_hcd vhci_hcd.0: Device attached [ 55.981776][ T6038] vhci_hcd: cannot find the pending unlink 1023 [ 55.984631][ T6038] vhci_hcd: connection closed [ 55.985436][ T105] vhci_hcd vhci_hcd.2: stop threads [ 55.991797][ T105] vhci_hcd vhci_hcd.2: release socket [ 55.991917][ T6040] binder: Unknown parameter 'maxç2¦­L1k‡z' [ 55.994256][ T105] vhci_hcd vhci_hcd.2: disconnect device [ 56.006337][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.010786][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.046179][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.052493][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.106253][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.110897][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.475564][ T6060] Zero length message leads to an empty skb [ 56.877547][ T5935] Bluetooth: hci2: command tx timeout [ 56.927105][ T6066] tmpfs: Unknown parameter 'grpquotaffective_cpus' [ 56.939000][ T6045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.941166][ T6045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.949552][ T6045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.957550][ T5935] Bluetooth: hci1: command tx timeout [ 56.959748][ T5935] Bluetooth: hci3: command tx timeout [ 56.966212][ T6045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.973476][ T6045] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.128329][ T6045] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.135366][ T6045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.167385][ T6045] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.183026][ T6045] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.193282][ T6045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.195995][ T6045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.203050][ T6045] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.341517][ T6083] Failed to get privilege flags for destination (handle=0x2:0x156) [ 57.472411][ T6094] hfs: can't find a HFS filesystem on dev sr0 [ 57.551428][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 57.551443][ T40] audit: type=1400 audit(1773729839.750:189): avc: denied { execute } for pid=6095 comm="syz.2.22" path="/5/cpu.stat" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.610821][ T40] audit: type=1400 audit(1773729839.810:190): avc: denied { sys_module } for pid=6095 comm="syz.2.22" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.625901][ T40] audit: type=1400 audit(1773729839.820:191): avc: denied { write } for pid=6105 comm="syz.0.25" name="ipv6_route" dev="proc" ino=4026533419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.644650][ T40] audit: type=1400 audit(1773729839.840:192): avc: denied { create } for pid=6095 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.658195][ T40] audit: type=1400 audit(1773729839.840:193): avc: denied { ioctl } for pid=6095 comm="syz.2.22" path="socket:[10328]" dev="sockfs" ino=10328 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.726164][ T40] audit: type=1400 audit(1773729839.920:194): avc: denied { read write } for pid=6111 comm="syz.0.28" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.726761][ T6115] could not open pipe file descriptor [ 57.733965][ T40] audit: type=1400 audit(1773729839.920:195): avc: denied { open } for pid=6111 comm="syz.0.28" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.745293][ T40] audit: type=1400 audit(1773729839.920:196): avc: denied { name_bind } for pid=6111 comm="syz.0.28" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.752985][ T40] audit: type=1400 audit(1773729839.920:197): avc: denied { node_bind } for pid=6111 comm="syz.0.28" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.761115][ T6119] fuse: Bad value for 'rootmode' [ 57.795364][ T40] audit: type=1400 audit(1773729839.990:198): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 58.088512][ T6151] kAFS: unable to lookup cell 'syz0' [ 58.157881][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 58.223962][ T6160] overlayfs: conflicting lowerdir path [ 58.312622][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.45'. [ 58.313375][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 58.323868][ T6166] comedi comedi2: dt2814: I/O port conflict (0x8,2) [ 58.426346][ T6174] binder: Unknown parameter 'maxç2¦­L1k‡z' [ 58.532745][ T6183] overlay: Unknown parameter 'appraise' [ 58.573004][ T6183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46096 sclass=netlink_route_socket pid=6183 comm=syz.1.52 [ 58.664963][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.52'. [ 58.681766][ T6199] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 58.744829][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 58.749637][ T6204] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 58.753161][ T6204] nbd: error processing sock list [ 58.923102][ T6219] binder: Unknown parameter 'maxç2¦­L1k‡z' [ 59.047863][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 59.097893][ T6251] netlink: 'syz.0.72': attribute type 19 has an invalid length. [ 59.107123][ T6251] netlink: 'syz.0.72': attribute type 19 has an invalid length. [ 59.141627][ T105] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.146180][ T105] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.172390][ T6255] binder: Unknown parameter 'maxç2¦­L1k‡z' [ 59.198673][ T105] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.201559][ T105] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.207625][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 59.207728][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 59.219983][ T6248] ip6erspan0: entered promiscuous mode [ 59.290149][ T6261] process 'syz.3.73' launched './file2' with NULL argv: empty string added [ 59.316438][ T6264] netlink: 'syz.1.79': attribute type 3 has an invalid length. [ 59.377393][ T5998] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.530875][ T5998] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.535277][ T5998] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.541243][ T5998] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.544900][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.548972][ T5998] usb 7-1: Product: syz [ 59.550848][ T5998] usb 7-1: Manufacturer: syz [ 59.552890][ T5998] usb 7-1: SerialNumber: syz [ 59.559413][ T5998] usb 7-1: config 0 descriptor?? [ 59.569888][ T5998] usb 7-1: selecting invalid altsetting 0 [ 59.617284][ T840] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.771866][ T5998] usb 7-1: USB disconnect, device number 2 [ 59.787961][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 59.791327][ T840] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.795241][ T840] usb 6-1: config 179 has no interface number 0 [ 59.798171][ T840] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 59.801886][ T840] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 59.805624][ T840] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 59.809526][ T840] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 59.813264][ T840] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.818239][ T840] usb 6-1: config 179 interface 65 has no altsetting 0 [ 59.820541][ T840] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 59.823519][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.037360][ T840] usb 6-1: string descriptor 0 read error: -71 [ 60.047452][ T840] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 60.055442][ T5326] input input5: unable to receive magic message: -71 [ 60.072650][ T5326] input input5: unable to receive magic message: -71 [ 60.086662][ T840] usb 6-1: USB disconnect, device number 2 [ 60.088772][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 60.088908][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 60.179645][ T6283] EXT4-fs (nbd3): unable to read superblock [ 60.248755][ T5935] Bluetooth: hci0: command 0x040f tx timeout [ 60.332107][ T6288] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 60.334804][ T6288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.338242][ T6288] netlink: 'syz.3.86': attribute type 30 has an invalid length. [ 60.351015][ T105] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.354380][ T105] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.358877][ T105] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.363528][ T105] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.386630][ T840] IPVS: starting estimator thread 0... [ 60.489097][ T6295] IPVS: using max 28 ests per chain, 67200 per kthread [ 60.670446][ T6315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6315 comm=syz.1.94 [ 60.675698][ T6315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6315 comm=syz.1.94 [ 60.676309][ T6316] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.685855][ T6317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6317 comm=syz.1.94 [ 61.118935][ T5935] Bluetooth: hci2: command 0x0419 tx timeout [ 61.253202][ T6334] __nla_validate_parse: 9 callbacks suppressed [ 61.253219][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 61.261095][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 61.280446][ T5935] Bluetooth: hci3: command 0x0419 tx timeout [ 61.280478][ T5944] Bluetooth: hci1: command 0x0419 tx timeout [ 61.315994][ T6337] bond1: entered promiscuous mode [ 61.323593][ T6337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.720796][ T6367] binder: binder_mmap: 6366 200000ffd000-200001000000 bad vm_flags failed -1 [ 61.935357][ T6367] mmap: syz.3.108 (6367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.171498][ T6379] new mount options do not match the existing superblock, will be ignored [ 62.177775][ T6379] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 62.180476][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 62.182022][ T6380] binder: 6378:6380 ioctl c0306201 2000000003c0 returned -14 [ 62.317308][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 62.457401][ T6395] binder: 6394:6395 ioctl 40046205 0 returned -22 [ 62.583341][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 62.583356][ T40] audit: type=1400 audit(1773729844.780:310): avc: denied { create } for pid=6398 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.595231][ T40] audit: type=1400 audit(1773729844.790:311): avc: denied { read write } for pid=6398 comm="syz.1.119" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.606311][ T40] audit: type=1400 audit(1773729844.790:312): avc: denied { open } for pid=6398 comm="syz.1.119" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.619422][ T40] audit: type=1400 audit(1773729844.790:313): avc: denied { ioctl } for pid=6398 comm="syz.1.119" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.631864][ T40] audit: type=1400 audit(1773729844.790:314): avc: denied { write } for pid=6398 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.897288][ T1336] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.013533][ T40] audit: type=1400 audit(1773729845.210:315): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.047359][ T1336] usb 8-1: Using ep0 maxpacket: 16 [ 63.052413][ T1336] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 63.055939][ T1336] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 63.058609][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 63.060186][ T1336] usb 8-1: Product: syz [ 63.062041][ T6421] netlink: 6 bytes leftover after parsing attributes in process `syz.2.127'. [ 63.063251][ T1336] usb 8-1: Manufacturer: syz [ 63.069085][ T1336] usb 8-1: SerialNumber: syz [ 63.073282][ T1336] usb 8-1: config 0 descriptor?? [ 63.099807][ T40] audit: type=1400 audit(1773729845.300:316): avc: denied { map_create } for pid=6422 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.100032][ T6423] netlink: 'syz.2.128': attribute type 39 has an invalid length. [ 63.102400][ T6424] netlink: 'syz.2.128': attribute type 39 has an invalid length. [ 63.207356][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 63.282139][ T6418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.286050][ T5999] usb 8-1: USB disconnect, device number 2 [ 63.300265][ T40] audit: type=1400 audit(1773729845.500:317): avc: denied { write } for pid=6428 comm="syz.2.130" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.357403][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 63.360307][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 63.469723][ T40] audit: type=1400 audit(1773729845.670:318): avc: denied { prog_load } for pid=6442 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.534130][ T40] audit: type=1400 audit(1773729845.730:319): avc: denied { create } for pid=6445 comm="syz.1.134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 64.053801][ T840] IPVS: starting estimator thread 0... [ 64.147456][ T6464] IPVS: using max 44 ests per chain, 105600 per kthread [ 64.201955][ T6474] efs: device does not support 512 byte blocks [ 64.205190][ T6474] device does not support 512 byte blocks [ 64.205190][ T6474] [ 64.305717][ T6490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.312492][ T6490] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 64.316605][ T6490] delete_channel: no stack [ 64.377344][ T6496] random: crng reseeded on system resumption [ 64.384319][ T6496] Hibernate inconsistent memory map detected! [ 64.387049][ T6496] PM: hibernation: Image mismatch: architecture specific data [ 64.398268][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 64.405376][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 64.408706][ T6496] nbd: must specify at least one socket [ 64.581506][ T6516] sp0: Synchronizing with TNC [ 64.587652][ T6516] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.159'. [ 64.592820][ T6515] [U] è [ 64.604991][ T6514] syzkaller0: entered promiscuous mode [ 64.606827][ T6514] syzkaller0: entered allmulticast mode [ 64.607498][ T5999] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.777392][ T5999] usb 7-1: Using ep0 maxpacket: 8 [ 64.788686][ T5999] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 64.792572][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.796956][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.801279][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.805843][ T5999] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.811366][ T6524] netlink: 'syz.3.162': attribute type 21 has an invalid length. [ 64.815621][ T5999] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.817376][ T1336] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 64.821410][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.972184][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 64.976960][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 64.982183][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 64.987031][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 64.992186][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.000141][ T1336] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 65.004150][ T1336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.007637][ T1336] usb 6-1: Product: syz [ 65.009538][ T1336] usb 6-1: Manufacturer: syz [ 65.011602][ T1336] usb 6-1: SerialNumber: syz [ 65.015734][ T1336] usb 6-1: config 0 descriptor?? [ 65.018930][ T6519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 65.031014][ T1336] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 65.034473][ T5999] usb 7-1: usb_control_msg returned -32 [ 65.037848][ T5999] usbtmc 7-1:16.0: can't read capabilities [ 65.045396][ C2] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 65.224717][ T840] usb 6-1: USB disconnect, device number 3 [ 65.287602][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 65.447402][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 65.450289][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 65.492590][ T6524] netlink: 'syz.3.162': attribute type 6 has an invalid length. [ 65.495823][ T6524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.655771][ T6535] overlayfs: overlapping lowerdir path [ 65.740042][ T6541] usbtmc 7-1:16.0: usb_clear_halt returned -32 [ 65.742580][ T6541] tmpfs: Bad value for 'huge' [ 65.851525][ T6556] netlink: 'syz.3.171': attribute type 5 has an invalid length. [ 65.942574][ T840] usb 7-1: USB disconnect, device number 3 [ 65.959854][ T6564] openvswitch: netlink: IP tunnel TTL not specified. [ 66.104121][ T6574] overlayfs: failed to resolve './file1/file0': -2 [ 66.160316][ T6580] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 66.163197][ T6580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.167339][ T6580] vhci_hcd vhci_hcd.0: Device attached [ 66.171541][ T6581] vhci_hcd: connection closed [ 66.171724][ T1237] vhci_hcd vhci_hcd.3: stop threads [ 66.175759][ T1237] vhci_hcd vhci_hcd.3: release socket [ 66.178159][ T1237] vhci_hcd vhci_hcd.3: disconnect device [ 66.487322][ T5935] Bluetooth: hci0: command 0x040f tx timeout [ 66.610337][ T6598] fuse: Bad value for 'fd' [ 66.735043][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 66.762964][ T6612] overlayfs: failed to resolve './file1/file0': -2 [ 67.634305][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 67.640034][ T6614] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 67.643387][ T6614] netlink: 'syz.1.186': attribute type 8 has an invalid length. [ 67.657347][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 67.685138][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 67.685148][ T40] audit: type=1400 audit(1773729849.880:351): avc: denied { getopt } for pid=6613 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.695222][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 67.698641][ T6615] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 67.701140][ T6615] netlink: 'syz.1.186': attribute type 8 has an invalid length. [ 67.703615][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 67.741861][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 67.755960][ T40] audit: type=1400 audit(1773729849.950:352): avc: denied { shutdown } for pid=6630 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.780661][ T40] audit: type=1400 audit(1773729849.980:353): avc: denied { name_bind } for pid=6637 comm="syz.3.193" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 67.799191][ T40] audit: type=1400 audit(1773729850.000:354): avc: denied { read } for pid=6639 comm="syz.2.195" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.828110][ T6643] overlayfs: failed to resolve './file1/file0': -2 [ 67.840694][ T40] audit: type=1400 audit(1773729850.040:355): avc: denied { view } for pid=6644 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.841123][ T6645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 67.875147][ T40] audit: type=1400 audit(1773729850.070:356): avc: denied { bind } for pid=6646 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.878105][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 67.885245][ T40] audit: type=1400 audit(2000000000.000:357): avc: denied { read write } for pid=6651 comm="syz.1.199" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.887786][ T6650] netlink: 944 bytes leftover after parsing attributes in process `syz.0.198'. [ 67.893689][ T40] audit: type=1400 audit(2000000000.000:358): avc: denied { open } for pid=6651 comm="syz.1.199" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.907882][ T40] audit: type=1400 audit(2000000000.030:359): avc: denied { ioctl } for pid=6651 comm="syz.1.199" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.922604][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 67.942139][ T40] audit: type=1400 audit(2000000000.060:360): avc: denied { setopt } for pid=6651 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.959029][ T6654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6654 comm=syz.3.200 [ 67.960803][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 67.968023][ T6654] netlink: 'syz.3.200': attribute type 39 has an invalid length. [ 67.990501][ T6660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.113620][ T830] IPVS: starting estimator thread 0... [ 68.113721][ T6670] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 68.113863][ T6671] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 68.207398][ T6672] IPVS: using max 44 ests per chain, 105600 per kthread [ 68.225024][ T6680] SELinux: policydb magic number 0x17 does not match expected magic number 0xf97cff8c [ 68.230276][ T6680] SELinux: failed to load policy [ 68.277297][ T6526] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.439301][ T6640] program syz.2.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.445130][ T6526] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.450631][ T6526] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 68.453672][ T6526] usb 7-1: can't read configurations, error -71 [ 68.466439][ T6697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.473210][ T6697] block device autoloading is deprecated and will be removed. [ 68.478346][ T6692] md: md2 stopped. [ 68.655059][ T6699] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 68.667035][ T6699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.672196][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 68.673933][ T6699] ipip0: entered promiscuous mode [ 68.678687][ T6699] ipip0: entered allmulticast mode [ 68.682456][ T6699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.685077][ T6699] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 68.688968][ T6699] bond1: (slave ipip0): Error -95 calling set_mac_address [ 69.031271][ T6724] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 69.036999][ T6724] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 69.087993][ T5935] Bluetooth: hci0: unexpected event for opcode 0x2064 [ 69.136053][ T6732] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 69.251559][ T6740] syzkaller0: entered promiscuous mode [ 69.330507][ T6739] xt_hashlimit: size too large, truncated to 1048576 [ 69.547444][ T1336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.700008][ T1336] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 69.702887][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.708889][ T1336] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 69.717270][ T1336] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 69.720089][ T1336] usb 6-1: Manufacturer: syz [ 69.727453][ T1336] usb 6-1: config 0 descriptor?? [ 69.797588][ T1336] rc_core: IR keymap rc-hauppauge not found [ 69.799701][ T1336] Registered IR keymap rc-empty [ 69.804019][ T1336] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 69.809577][ T1336] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 69.935575][ T830] usb 6-1: USB disconnect, device number 4 [ 70.027270][ T54] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 70.191346][ T54] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 70.198407][ T54] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 70.209458][ T54] usb 5-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 70.213579][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.216349][ T54] usb 5-1: Product: Ð¥ [ 70.217865][ T54] usb 5-1: Manufacturer: ê‹â³Œë›¬å²å¶’â—Šç©â»½éŽ»âºƒä…½è•˜ê·°ä™°ã®æ¹¦å©Ÿï©¼ïŠå«¦í‡•駙ٜä§â¤ªëªŽá¦¨ä†›ê„“譶②ᆴ撊蟯 [ 70.222178][ T54] usb 5-1: SerialNumber: 刷ᑚ튀ã¶ë¯”ïºç’㢚áى೬ŋꜶ [ 70.445109][ T54] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 70.481499][ T54] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.488347][ T54] usb 5-1: USB disconnect, device number 2 [ 70.524201][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.247605][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.336938][ T6798] overlayfs: failed to resolve './file1/file0': -2 [ 71.416775][ T54] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 71.419658][ T54] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.422793][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 71.426644][ T54] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.429942][ T54] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.437275][ T54] usb 8-1: Product: syz [ 71.438690][ T54] usb 8-1: Manufacturer: syz [ 71.440215][ T54] usb 8-1: SerialNumber: syz [ 71.444290][ T54] usb 8-1: config 0 descriptor?? [ 71.454396][ T54] hub 8-1:0.0: bad descriptor, ignoring hub [ 71.456383][ T54] hub 8-1:0.0: probe with driver hub failed with error -5 [ 71.463191][ T54] usb 8-1: selecting invalid altsetting 0 [ 71.746944][ T6823] x_tables: duplicate underflow at hook 1 [ 71.751602][ T6823] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 71.754303][ T6823] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 71.781441][ T6825] No buffer was provided with the request [ 71.904273][ T6830] overlayfs: failed to resolve './file1/file0': -2 [ 71.937948][ T54] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 72.121657][ T54] usb 8-1: device firmware changed [ 72.124912][ T54] usb 8-1: USB disconnect, device number 3 [ 72.245402][ T6852] IPVS: length: 18 != 8 [ 72.277339][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.358049][ T6860] __nla_validate_parse: 8 callbacks suppressed [ 72.358061][ T6860] netlink: 84 bytes leftover after parsing attributes in process `syz.0.270'. [ 72.372438][ T6860] team0 (unregistering): Port device team_slave_0 removed [ 72.381030][ T6860] team0 (unregistering): Port device team_slave_1 removed [ 72.438413][ T54] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 72.441241][ T54] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.444384][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.450236][ T54] usb 8-1: string descriptor 0 read error: -22 [ 72.452874][ T54] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.456578][ T54] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.462052][ T54] usb 8-1: config 0 descriptor?? [ 72.465655][ T54] hub 8-1:0.0: bad descriptor, ignoring hub [ 72.467874][ T54] hub 8-1:0.0: probe with driver hub failed with error -5 [ 72.472203][ T54] usb 8-1: selecting invalid altsetting 0 [ 72.510744][ T6870] loop2: detected capacity change from 0 to 7 [ 72.519507][ T6870] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 72.523598][ T6870] loop2: partition table partially beyond EOD, truncated [ 72.526983][ T6870] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 72.531588][ T6870] loop2: p2 start 445263249 is beyond EOD, truncated [ 72.670605][ T5341] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 72.673024][ T5341] loop2: partition table partially beyond EOD, truncated [ 72.675430][ T5341] loop2: p1 size 2574515542 extends beyond EOD, truncated [ 72.679128][ T5341] loop2: p2 start 445263249 is beyond EOD, truncated [ 72.707586][ T6876] mkiss: ax0: crc mode is auto. [ 72.710631][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.733499][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 72.736434][ T6879] validate_nla: 1 callbacks suppressed [ 72.736442][ T6879] netlink: 'syz.0.276': attribute type 26 has an invalid length. [ 72.765425][ T6882] usb usb9: usbfs: process 6882 (syz.1.273) did not claim interface 0 before use [ 72.791718][ T6882] syzkaller0: entered promiscuous mode [ 72.794285][ T6882] syzkaller0: entered allmulticast mode [ 72.798446][ T840] usb 8-1: USB disconnect, device number 4 [ 72.872432][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 72.872443][ T40] audit: type=1400 audit(2000000004.990:413): avc: denied { write } for pid=6890 comm="syz.3.278" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 73.615530][ T40] audit: type=1400 audit(2000000005.730:414): avc: denied { create } for pid=6925 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.626773][ T40] audit: type=1400 audit(2000000005.730:415): avc: denied { setopt } for pid=6925 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.627737][ T6928] raw_sendmsg: syz.3.285 forgot to set AF_INET. Fix it! [ 73.679665][ T6932] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 73.681825][ T6934] x_tables: duplicate underflow at hook 3 [ 73.718666][ T6943] Cannot find set identified by id 0 to match [ 73.721476][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 73.739503][ T40] audit: type=1326 audit(2000000005.860:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.750349][ T40] audit: type=1400 audit(2000000005.860:417): avc: denied { setattr } for pid=6948 comm="syz.2.293" name="ALG" dev="sockfs" ino=16536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.759087][ T40] audit: type=1326 audit(2000000005.860:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.766961][ T40] audit: type=1326 audit(2000000005.860:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.776592][ T40] audit: type=1326 audit(2000000005.860:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.785904][ T40] audit: type=1326 audit(2000000005.860:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.794936][ T40] audit: type=1326 audit(2000000005.860:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.0.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74bf9c799 code=0x7ffc0000 [ 73.814063][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 73.819784][ T6952] vlan2: entered allmulticast mode [ 73.821484][ T6952] vlan0: entered allmulticast mode [ 73.823657][ T6952] veth0_vlan: entered allmulticast mode [ 73.875780][ T6954] binder: BINDER_SET_CONTEXT_MGR already set [ 73.878101][ T6954] binder: 6953:6954 ioctl 4018620d 200000001000 returned -16 [ 73.965894][ T6965] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.217322][ T5997] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.227270][ T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.357353][ T54] usb 6-1: device descriptor read/64, error -71 [ 74.368016][ T5997] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 74.372403][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.376385][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.381077][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.384824][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.388847][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.393521][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.398763][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.402764][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.407605][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.412230][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.416210][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.420954][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.424765][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.428846][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.433549][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.437496][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.440876][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.444575][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.447500][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.450486][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.455122][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.459073][ T5997] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.462982][ T5997] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.467808][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.472643][ T5997] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.476596][ T5997] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.479875][ T5997] usb 7-1: Product: syz [ 74.481701][ T5997] usb 7-1: Manufacturer: syz [ 74.483832][ T5997] usb 7-1: SerialNumber: syz [ 74.488385][ T5997] usb 7-1: config 0 descriptor?? [ 74.494715][ T5997] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 74.597389][ T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.698829][ T1336] usb 7-1: USB disconnect, device number 6 [ 74.701927][ T1336] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 74.727340][ T54] usb 6-1: device descriptor read/64, error -71 [ 74.730658][ T6977] netlink: 52 bytes leftover after parsing attributes in process `syz.3.304'. [ 74.736694][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.739525][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.747979][ T6977] syz.3.304 (6977): /proc/6976/oom_adj is deprecated, please use /proc/6976/oom_score_adj instead. [ 74.751947][ T6977] netlink: 76 bytes leftover after parsing attributes in process `syz.3.304'. [ 74.755431][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.758059][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.760547][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.762898][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.794604][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 74.847723][ T54] usb usb6-port1: attempt power cycle [ 74.911686][ T29] cfg80211: failed to load regulatory.db [ 74.942311][ T6983] bond2: option xmit_hash_policy: invalid value (6) [ 74.945487][ T6983] bond2 (unregistering): Released all slaves [ 74.980788][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 74.984460][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 74.994623][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 75.055939][ T6998] batman_adv: batadv0: Adding interface: gretap1 [ 75.058605][ T6998] batman_adv: batadv0: Interface activated: gretap1 [ 75.157291][ T6767] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 75.199183][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.217907][ T54] usb 6-1: device descriptor read/8, error -71 [ 75.224862][ T7005] Bluetooth: MGMT ver 1.23 [ 75.287292][ T6767] usb 7-1: device descriptor read/64, error -71 [ 75.296296][ T7009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.467295][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 75.487723][ T54] usb 6-1: device descriptor read/8, error -71 [ 75.498142][ T7018] fuse: Bad value for 'fd' [ 75.527454][ T6767] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 75.553782][ T7023] block nbd3: NBD_DISCONNECT [ 75.610348][ T54] usb usb6-port1: unable to enumerate USB device [ 75.622407][ T7029] vxfs: WRONG superblock magic 00000000 at 1 [ 75.624707][ T7029] vxfs: WRONG superblock magic 00000000 at 8 [ 75.626700][ T7029] vxfs: can't find superblock. [ 75.667333][ T6767] usb 7-1: device descriptor read/64, error -71 [ 75.686853][ T7036] syzkaller0: entered promiscuous mode [ 75.689405][ T7036] syzkaller0: entered allmulticast mode [ 75.787489][ T6767] usb usb7-port1: attempt power cycle [ 76.073517][ T7060] binder: 7056:7060 ioctl c018620c 200000002140 returned -22 [ 76.147339][ T6767] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 76.177882][ T6767] usb 7-1: device descriptor read/8, error -71 [ 76.181056][ T7061] syz.0.333 (7061) used greatest stack depth: 19104 bytes left [ 76.229694][ T7064] input: syz0 as /devices/virtual/input/input8 [ 76.246935][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.249612][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.272866][ T5935] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 76.427286][ T6767] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 76.448198][ T6767] usb 7-1: device descriptor read/8, error -71 [ 76.558341][ T6767] usb usb7-port1: unable to enumerate USB device [ 76.623689][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.627807][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.708477][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.712124][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.768948][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.778539][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.779796][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.783192][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.784951][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.789359][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.794693][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.846046][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.849744][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.919932][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 77.030567][ T13] bridge_slave_1: left allmulticast mode [ 77.032694][ T13] bridge_slave_1: left promiscuous mode [ 77.035373][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.042904][ T13] bridge_slave_0: left allmulticast mode [ 77.045028][ T13] bridge_slave_0: left promiscuous mode [ 77.046997][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.132200][ T7099] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 77.241212][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.245748][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.249880][ T13] bond0 (unregistering): Released all slaves [ 77.255309][ T13] bond1 (unregistering): Released all slaves [ 77.275596][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.281284][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.281294][ T7106] netlink: 'syz.2.347': attribute type 10 has an invalid length. [ 77.287414][ T7085] bridge_slave_0: entered allmulticast mode [ 77.297314][ T7085] bridge_slave_0: entered promiscuous mode [ 77.302998][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.306048][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.310655][ T7085] bridge_slave_1: entered allmulticast mode [ 77.314671][ T7085] bridge_slave_1: entered promiscuous mode [ 77.324893][ T7106] veth1_macvtap: left promiscuous mode [ 77.367042][ T7117] ipt_REJECT: TCP_RESET invalid for non-tcp [ 77.439719][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7103 comm=syz.2.347 [ 77.504590][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.511131][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.541928][ T7085] team0: Port device team_slave_0 added [ 77.545120][ T7085] team0: Port device team_slave_1 added [ 77.560617][ T54] IPVS: starting estimator thread 0... [ 77.570314][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.572662][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.582398][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.590289][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.592466][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.604675][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.667866][ T7134] IPVS: using max 44 ests per chain, 105600 per kthread [ 77.714919][ T7145] IPv6: NLM_F_REPLACE set, but no existing node found! [ 77.724864][ T7085] hsr_slave_0: entered promiscuous mode [ 77.731185][ T7085] hsr_slave_1: entered promiscuous mode [ 77.733431][ T7085] debugfs: 'hsr0' already exists in 'hsr' [ 77.735283][ T7085] Cannot create hsr debugfs directory [ 77.808439][ T7149] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 77.837100][ T13] hsr_slave_0: left promiscuous mode [ 77.839405][ T13] hsr_slave_1: left promiscuous mode [ 77.841449][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.843933][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.848037][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.850447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.861441][ T13] veth1_macvtap: left promiscuous mode [ 77.863386][ T13] veth0_macvtap: left promiscuous mode [ 77.865223][ T13] veth1_vlan: left promiscuous mode [ 77.866920][ T13] veth0_vlan: left promiscuous mode [ 78.040114][ T13] team0 (unregistering): Port device team_slave_1 removed [ 78.051854][ T13] team0 (unregistering): Port device team_slave_0 removed [ 78.058194][ T7151] kvm: user requested TSC rate below hardware speed [ 78.063237][ T7151] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 78.066489][ T7151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 78.400608][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 78.400626][ T40] audit: type=1400 audit(2000000010.510:534): avc: denied { read } for pid=7162 comm="syz.1.363" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.414101][ T40] audit: type=1400 audit(2000000010.510:535): avc: denied { open } for pid=7162 comm="syz.1.363" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.548732][ T13] IPVS: stop unused estimator thread 0... [ 78.663831][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.667175][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.702937][ T40] audit: type=1400 audit(2000000010.810:536): avc: denied { write } for pid=7187 comm="syz.2.369" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.727170][ T40] audit: type=1400 audit(2000000010.840:537): avc: denied { ioctl } for pid=7187 comm="syz.2.369" path="socket:[18606]" dev="sockfs" ino=18606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.744742][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.757413][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.759746][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.764068][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.767844][ T7192] __nla_validate_parse: 7 callbacks suppressed [ 78.767854][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 78.768471][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.781406][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.786902][ T7085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.787336][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.793962][ T7085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.798591][ T7085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.809085][ T7085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.836241][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.839946][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.887446][ T5944] Bluetooth: hci0: command tx timeout [ 78.925767][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.935254][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.954236][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.958091][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.978029][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.980355][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.983524][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.985847][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.999235][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 79.124594][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.126947][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.129913][ T7189] bridge_slave_0: entered allmulticast mode [ 79.132643][ T7189] bridge_slave_0: entered promiscuous mode [ 79.135843][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.139445][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.142653][ T7189] bridge_slave_1: entered allmulticast mode [ 79.146591][ T7189] bridge_slave_1: entered promiscuous mode [ 79.189483][ T40] audit: type=1400 audit(2000000011.310:538): avc: denied { checkpoint_restore } for pid=7224 comm="syz.2.376" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.210871][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.236935][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.260597][ T7228] capability: warning: `syz.1.377' uses 32-bit capabilities (legacy support in use) [ 79.280656][ T13] bridge_slave_1: left allmulticast mode [ 79.283001][ T13] bridge_slave_1: left promiscuous mode [ 79.285498][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.291487][ T13] bridge_slave_0: left allmulticast mode [ 79.293322][ T13] bridge_slave_0: left promiscuous mode [ 79.295769][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.303486][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 79.365108][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 79.431258][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.435244][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.439581][ T13] bond0 (unregistering): Released all slaves [ 79.450638][ T7189] team0: Port device team_slave_0 added [ 79.454419][ T7189] team0: Port device team_slave_1 added [ 79.465709][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.484350][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.486611][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.503355][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.508769][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.511029][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.519536][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.536757][ T40] audit: type=1400 audit(2000000011.650:539): avc: denied { ioctl } for pid=7241 comm="syz.1.381" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.555576][ T7189] hsr_slave_0: entered promiscuous mode [ 79.558426][ T7189] hsr_slave_1: entered promiscuous mode [ 79.638623][ T40] audit: type=1400 audit(2000000011.760:540): avc: denied { create } for pid=7246 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.661881][ T40] audit: type=1400 audit(2000000011.770:541): avc: denied { connect } for pid=7246 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.681804][ T7085] veth0_vlan: entered promiscuous mode [ 79.708799][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 79.722345][ T7248] bond1: entered promiscuous mode [ 79.724430][ T7248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.745626][ T7085] veth1_vlan: entered promiscuous mode [ 79.752871][ T7248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.755249][ T7248] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 79.760877][ T7248] bond1: (slave vcan1): Error -95 calling set_mac_address [ 79.770654][ T13] hsr_slave_0: left promiscuous mode [ 79.773541][ T13] hsr_slave_1: left promiscuous mode [ 79.776358][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.779321][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.783254][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.785898][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.792847][ T13] veth1_macvtap: left promiscuous mode [ 79.794785][ T13] veth0_macvtap: left promiscuous mode [ 80.033657][ T7085] veth0_macvtap: entered promiscuous mode [ 80.044067][ T7085] veth1_macvtap: entered promiscuous mode [ 80.047455][ T7189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.053185][ T7189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.061017][ T7189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.067615][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.072063][ T7189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.078150][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.086062][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.092321][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.100839][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.104244][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.151319][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.153897][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.172265][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177179][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.205332][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.214369][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.214442][ T40] audit: type=1400 audit(2000000012.330:542): avc: denied { mounton } for pid=7085 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.219905][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.226456][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.250097][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.252425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.271782][ T40] audit: type=1326 audit(2000000012.390:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.3.343" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47ca79c799 code=0x0 [ 80.274482][ T7189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.295381][ T7294] syzkaller0: entered promiscuous mode [ 80.297112][ T7294] syzkaller0: entered allmulticast mode [ 80.311443][ T13] IPVS: stop unused estimator thread 0... [ 80.386182][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.457578][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 80.461618][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 80.512493][ T7321] kernel profiling enabled (shift: 63) [ 80.514430][ T7321] profiling shift: 63 too large [ 80.540026][ T7189] veth0_vlan: entered promiscuous mode [ 80.548164][ T7189] veth1_vlan: entered promiscuous mode [ 80.561736][ T7189] veth0_macvtap: entered promiscuous mode [ 80.565409][ T7189] veth1_macvtap: entered promiscuous mode [ 80.573872][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.582141][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.588305][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.591213][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.594529][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.598071][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.629048][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.631792][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.646226][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.655419][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.690545][ T7325] dvmrp0: entered allmulticast mode [ 80.764794][ T7336] x_tables: ip_tables: osf match: only valid for protocol 6 [ 80.770460][ T7337] overlayfs: workdir and upperdir must reside under the same mount [ 80.857174][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.859493][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.862609][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.868625][ T7345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.874349][ T7345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.891255][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.895164][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.898077][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.900714][ T7345] xfrm0 speed is unknown, defaulting to 1000 [ 80.949043][ T7349] syzkaller0: entered promiscuous mode [ 80.951428][ T7349] syzkaller0: entered allmulticast mode [ 80.956171][ T7351] Bluetooth: MGMT ver 1.23 [ 80.958003][ T5944] Bluetooth: hci0: command tx timeout [ 80.959952][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 81.134622][ T7363] overlayfs: workdir and upperdir must reside under the same mount [ 81.297300][ T830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.457720][ T830] usb 6-1: Using ep0 maxpacket: 16 [ 81.461855][ T830] usb 6-1: config 2 has an invalid interface number: 44 but max is 3 [ 81.465068][ T830] usb 6-1: config 2 has an invalid interface number: 151 but max is 3 [ 81.474261][ T830] usb 6-1: config 2 has an invalid interface number: 205 but max is 3 [ 81.477335][ T830] usb 6-1: config 2 has an invalid interface number: 244 but max is 3 [ 81.480416][ T830] usb 6-1: config 2 has an invalid interface number: 103 but max is 3 [ 81.483288][ T830] usb 6-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 81.486269][ T830] usb 6-1: config 2 has no interface number 0 [ 81.488813][ T830] usb 6-1: config 2 has no interface number 1 [ 81.491122][ T830] usb 6-1: config 2 has no interface number 2 [ 81.493207][ T830] usb 6-1: config 2 has no interface number 3 [ 81.495543][ T830] usb 6-1: config 2 has no interface number 4 [ 81.497689][ T830] usb 6-1: config 2 interface 44 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 81.502091][ T830] usb 6-1: config 2 interface 44 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 81.506399][ T830] usb 6-1: config 2 interface 151 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 81.510318][ T830] usb 6-1: config 2 interface 151 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 81.514172][ T830] usb 6-1: config 2 interface 151 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 81.518179][ T830] usb 6-1: config 2 interface 151 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 81.521768][ T830] usb 6-1: config 2 interface 151 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 81.525293][ T830] usb 6-1: config 2 interface 151 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 81.530286][ T830] usb 6-1: config 2 interface 151 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 81.533911][ T830] usb 6-1: config 2 interface 151 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 81.537895][ T830] usb 6-1: config 2 interface 205 altsetting 187 has a duplicate endpoint with address 0x4, skipping [ 81.541568][ T830] usb 6-1: config 2 interface 205 altsetting 187 endpoint 0x8 has invalid maxpacket 520, setting to 64 [ 81.545122][ T830] usb 6-1: config 2 interface 205 altsetting 187 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 81.549666][ T830] usb 6-1: too many endpoints for config 2 interface 244 altsetting 25: 99, using maximum allowed: 30 [ 81.553393][ T830] usb 6-1: config 2 interface 244 altsetting 25 has a duplicate endpoint with address 0x5, skipping [ 81.556864][ T830] usb 6-1: config 2 interface 244 altsetting 25 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 81.560702][ T830] usb 6-1: config 2 interface 244 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 81.564301][ T830] usb 6-1: config 2 interface 244 altsetting 25 has a duplicate endpoint with address 0x5, skipping [ 81.567977][ T830] usb 6-1: config 2 interface 244 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 81.571609][ T830] usb 6-1: config 2 interface 244 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 81.575226][ T830] usb 6-1: config 2 interface 244 altsetting 25 has a duplicate endpoint with address 0xD, skipping [ 81.579249][ T830] usb 6-1: config 2 interface 244 altsetting 25 has 8 endpoint descriptors, different from the interface descriptor's value: 99 [ 81.583636][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 81.587188][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 81.591087][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 81.594594][ T830] usb 6-1: config 2 interface 103 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 81.598455][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 81.602035][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 81.605508][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 81.609214][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 81.612739][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 81.616225][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 81.619924][ T830] usb 6-1: config 2 interface 103 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 81.623475][ T830] usb 6-1: config 2 interface 103 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 81.627111][ T830] usb 6-1: config 2 interface 103 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 81.630771][ T830] usb 6-1: config 2 interface 44 has no altsetting 0 [ 81.632994][ T830] usb 6-1: config 2 interface 151 has no altsetting 0 [ 81.635425][ T830] usb 6-1: config 2 interface 205 has no altsetting 0 [ 81.637790][ T830] usb 6-1: config 2 interface 244 has no altsetting 0 [ 81.640044][ T830] usb 6-1: config 2 interface 103 has no altsetting 0 [ 82.937137][ T105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.066878][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.070392][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.073144][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.075907][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.079107][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.098266][ T7406] xfrm0 speed is unknown, defaulting to 1000 [ 83.151317][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.156743][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.160762][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.163949][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.166692][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.171935][ T7406] chnl_net:caif_netlink_parms(): no params data found [ 83.224041][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.226431][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.228964][ T7406] bridge_slave_0: entered allmulticast mode [ 83.231678][ T7406] bridge_slave_0: entered promiscuous mode [ 83.234680][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.237178][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.239640][ T7406] bridge_slave_1: entered allmulticast mode [ 83.242392][ T7406] bridge_slave_1: entered promiscuous mode [ 83.259204][ T7411] xfrm0 speed is unknown, defaulting to 1000 [ 83.261676][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.272543][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.304544][ T7406] team0: Port device team_slave_0 added [ 83.310967][ T7406] team0: Port device team_slave_1 added [ 83.337445][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.339899][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.348567][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.352820][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.355091][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.363575][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.378273][ T105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.405664][ T7406] hsr_slave_0: entered promiscuous mode [ 83.408607][ T7406] hsr_slave_1: entered promiscuous mode [ 83.410755][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 83.412618][ T7406] Cannot create hsr debugfs directory [ 83.453907][ T105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.513274][ T7423] hfs: can't find a HFS filesystem on dev loop2 [ 83.533905][ T105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.554199][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 83.554210][ T40] audit: type=1400 audit(2000000015.670:547): avc: denied { mount } for pid=7424 comm="syz.2.425" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 83.554878][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 83.557514][ T7425] overlayfs: overlapping lowerdir path [ 83.570722][ T40] audit: type=1400 audit(2000000015.690:548): avc: denied { watch } for pid=7424 comm="syz.2.425" path="/97/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.579841][ T40] audit: type=1400 audit(2000000015.690:549): avc: denied { watch_sb } for pid=7424 comm="syz.2.425" path="/97/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.587469][ T40] audit: type=1400 audit(2000000015.700:550): avc: denied { getattr } for pid=7424 comm="syz.2.425" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.594581][ T40] audit: type=1400 audit(2000000015.700:551): avc: denied { mounton } for pid=7424 comm="syz.2.425" path="/97/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.660888][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.663375][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.665801][ T7411] bridge_slave_0: entered allmulticast mode [ 83.669212][ T7411] bridge_slave_0: entered promiscuous mode [ 83.687639][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.690324][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.693019][ T7411] bridge_slave_1: entered allmulticast mode [ 83.696811][ T7411] bridge_slave_1: entered promiscuous mode [ 83.734610][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.750932][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.765601][ T7406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.771361][ T7406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.777092][ T7411] team0: Port device team_slave_0 added [ 83.779750][ T105] bridge_slave_1: left allmulticast mode [ 83.781729][ T105] bridge_slave_1: left promiscuous mode [ 83.783777][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.789679][ T105] bridge_slave_0: left allmulticast mode [ 83.791636][ T105] bridge_slave_0: left promiscuous mode [ 83.793674][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.942741][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.948700][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.954149][ T105] bond0 (unregistering): Released all slaves [ 83.958969][ T7406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.964647][ T7406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.972991][ T7411] team0: Port device team_slave_1 added [ 84.007505][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.010165][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.020330][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.024749][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.027084][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.036286][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.064139][ T7411] hsr_slave_0: entered promiscuous mode [ 84.066583][ T7411] hsr_slave_1: entered promiscuous mode [ 84.068523][ T830] usb 6-1: Dual-Role OTG device on HNP port [ 84.068734][ T830] usb 6-1: can't set HNP mode: -71 [ 84.071738][ T7411] debugfs: 'hsr0' already exists in 'hsr' [ 84.074323][ T7411] Cannot create hsr debugfs directory [ 84.139629][ T7440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.244798][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.269931][ T105] hsr_slave_0: left promiscuous mode [ 84.272211][ T105] hsr_slave_1: left promiscuous mode [ 84.274920][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.278411][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.281311][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.283725][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.290821][ T105] veth1_macvtap: left promiscuous mode [ 84.292790][ T105] veth0_macvtap: left promiscuous mode [ 84.295144][ T105] veth1_vlan: left promiscuous mode [ 84.297498][ T105] veth0_vlan: left promiscuous mode [ 84.428572][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 84.432016][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 84.446146][ T105] team0 (unregistering): Port device team_slave_1 removed [ 84.456767][ T105] team0 (unregistering): Port device team_slave_0 removed [ 84.554626][ T7411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.571142][ T7411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.582999][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.587953][ T7411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.593580][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 84.596663][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.430'. [ 84.602150][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 84.605515][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.430'. [ 84.608498][ T7450] netlink: 104 bytes leftover after parsing attributes in process `syz.2.430'. [ 84.614692][ T7411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.627302][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.630456][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.646763][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.650064][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.716410][ T7406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.721057][ T7406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.746466][ T7467] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 84.764826][ T40] audit: type=1400 audit(2000000016.880:552): avc: denied { read } for pid=7464 comm="syz.2.432" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.785469][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.803134][ T7472] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 84.810853][ T7411] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.811210][ T40] audit: type=1326 audit(2000000016.930:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.432" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe1c99c799 code=0x0 [ 84.816727][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.823187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.830034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.832392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.862532][ T7411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.884774][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.973850][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.001777][ T105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.053179][ T7406] veth0_vlan: entered promiscuous mode [ 85.058991][ T7406] veth1_vlan: entered promiscuous mode [ 85.074855][ T105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.098629][ T7406] veth0_macvtap: entered promiscuous mode [ 85.104183][ T7406] veth1_macvtap: entered promiscuous mode [ 85.114827][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.119151][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.126527][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129652][ T5944] Bluetooth: hci0: command tx timeout [ 85.130585][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.135225][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.145193][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.165910][ T105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.167317][ T830] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 85.198523][ T5944] Bluetooth: hci3: command tx timeout [ 85.211271][ T7411] veth0_vlan: entered promiscuous mode [ 85.214068][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.222731][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.248912][ T105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.262314][ T7411] veth1_vlan: entered promiscuous mode [ 85.265450][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.269764][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.284736][ T7411] veth0_macvtap: entered promiscuous mode [ 85.291681][ T40] audit: type=1400 audit(2000000017.410:554): avc: denied { mounton } for pid=7406 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.295547][ T7411] veth1_macvtap: entered promiscuous mode [ 85.320541][ T830] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.325791][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.329463][ T830] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.334894][ T830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.342526][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.346746][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.374253][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.398550][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.402417][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.410637][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.445049][ T105] bridge_slave_1: left allmulticast mode [ 85.448726][ T105] bridge_slave_1: left promiscuous mode [ 85.451133][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.455342][ T105] bridge_slave_0: left allmulticast mode [ 85.457481][ T105] bridge_slave_0: left promiscuous mode [ 85.459626][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.565066][ T830] usb 6-1: usb_control_msg returned -32 [ 85.567776][ T830] usbtmc 6-1:16.0: can't read capabilities [ 85.603300][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.603955][ T7522] tmpfs: Bad value for 'mpol' [ 85.620510][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.626601][ T105] bond0 (unregistering): Released all slaves [ 85.669269][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 85.684150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.686779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.715652][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.721053][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.817588][ T7535] warning: `syz.5.440' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.844210][ T7535] overlayfs: failed lookup in lower (newroot/2, name='file0', err=-40): overlapping layers [ 85.927338][ T40] audit: type=1400 audit(2000000018.040:555): avc: denied { setopt } for pid=7479 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.927741][ T7553] Bluetooth: MGMT ver 1.23 [ 85.943751][ T40] audit: type=1400 audit(2000000018.050:556): avc: denied { bind } for pid=7554 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.969970][ T105] hsr_slave_0: left promiscuous mode [ 85.970518][ T7548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.442'. [ 85.991377][ T105] hsr_slave_1: left promiscuous mode [ 85.997692][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.000175][ T105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.008968][ T105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.011324][ T105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.025961][ T105] veth1_macvtap: left promiscuous mode [ 86.028238][ T105] veth0_macvtap: left promiscuous mode [ 86.030354][ T105] veth1_vlan: left promiscuous mode [ 86.032915][ T105] veth0_vlan: left promiscuous mode [ 86.189192][ T105] team0 (unregistering): Port device team_slave_1 removed [ 86.196021][ T105] team0 (unregistering): Port device team_slave_0 removed [ 86.227287][ T5998] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 86.298157][ T7581] netlink: 'syz.5.451': attribute type 5 has an invalid length. [ 86.299414][ T7582] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.451'. [ 86.302145][ T7585] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 86.309358][ T7585] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 86.387375][ T5998] usb 11-1: Using ep0 maxpacket: 32 [ 86.396189][ T5998] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.399033][ T5998] usb 11-1: config 0 has no interface number 0 [ 86.409664][ T5998] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 86.412573][ T5998] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.415088][ T5998] usb 11-1: Product: syz [ 86.416461][ T5998] usb 11-1: Manufacturer: syz [ 86.427362][ T5998] usb 11-1: SerialNumber: syz [ 86.430065][ T5998] usb 11-1: config 0 descriptor?? [ 86.433183][ T5998] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 86.434165][ T7599] xfrm0 speed is unknown, defaulting to 1000 [ 86.435789][ T5998] usb 11-1: selecting invalid altsetting 1 [ 86.447372][ T5998] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 86.457775][ T7604] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.461763][ T5998] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.464963][ T5998] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.476073][ T7604] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.483981][ T5998] usb 11-1: media controller created [ 86.504318][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.563206][ T7613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7613 comm=syz.5.457 [ 86.702375][ T7628] comedi: valid board names for 8255 driver are: [ 86.710631][ T7628] 8255 [ 86.712029][ T7628] comedi: valid board names for vmk80xx driver are: [ 86.721279][ T7628] vmk80xx [ 86.722867][ T7628] comedi: valid board names for usbduxsigma driver are: [ 86.726009][ T7628] usbduxsigma [ 86.732751][ T7628] comedi: valid board names for usbduxfast driver are: [ 86.735884][ T7628] usbduxfast [ 86.737743][ T7628] comedi: valid board names for usbdux driver are: [ 86.740510][ T7628] usbdux [ 86.741635][ T7628] comedi: valid board names for ni6501 driver are: [ 86.744478][ T7628] ni6501 [ 86.746011][ T7628] comedi: valid board names for dt9812 driver are: [ 86.749081][ T7628] dt9812 [ 86.750557][ T7628] comedi: valid board names for ni_labpc_cs driver are: [ 86.770995][ T7628] ni_labpc_cs [ 86.776016][ T7628] comedi: valid board names for ni_daq_700 driver are: [ 86.781958][ T7628] ni_daq_700 [ 86.783208][ T7628] comedi: valid board names for labpc_pci driver are: [ 86.785474][ T7628] labpc_pci [ 86.786663][ T7628] comedi: valid board names for adl_pci9118 driver are: [ 86.789601][ T7628] pci9118dg [ 86.790772][ T7628] pci9118hg [ 86.791912][ T7628] pci9118hr [ 86.793091][ T7628] comedi: valid board names for 8255_pci driver are: [ 86.795351][ T7628] 8255_pci [ 86.796472][ T7628] comedi: valid board names for s526 driver are: [ 86.799109][ T7628] s526 [ 86.800334][ T7628] comedi: valid board names for multiq3 driver are: [ 86.802542][ T7628] multiq3 [ 86.803686][ T7628] comedi: valid board names for pcmuio driver are: [ 86.805864][ T7628] pcmuio48 [ 86.806981][ T7628] pcmuio96 [ 86.808325][ T7628] comedi: valid board names for pcmmio driver are: [ 86.810463][ T7628] pcmmio [ 86.811414][ T7628] comedi: valid board names for pcmda12 driver are: [ 86.813600][ T7628] pcmda12 [ 86.814731][ T7628] comedi: valid board names for pcmad driver are: [ 86.816869][ T7628] pcmad12 [ 86.818059][ T7628] pcmad16 [ 86.819078][ T7628] comedi: valid board names for ni_labpc driver are: [ 86.821474][ T7628] lab-pc-1200 [ 86.822669][ T7628] lab-pc-1200ai [ 86.823862][ T7628] lab-pc+ [ 86.824965][ T7628] comedi: valid board names for atmio16 driver are: [ 86.828487][ T7628] atmio16 [ 86.829619][ T7628] atmio16d [ 86.830644][ T7628] comedi: valid board names for ni_at_ao driver are: [ 86.832789][ T7628] at-ao-6 [ 86.833899][ T7628] at-ao-10 [ 86.835056][ T7628] comedi: valid board names for ni_at_a2150 driver are: [ 86.838467][ T7628] ni_at_a2150 [ 86.840454][ T7628] comedi: valid board names for adq12b driver are: [ 86.841966][ T7634] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 86.843048][ T7628] adq12b [ 86.846765][ T7628] comedi: valid board names for mpc624 driver are: [ 86.850955][ T7628] mpc624 [ 86.852012][ T7628] comedi: valid board names for c6xdigio driver are: [ 86.854264][ T7628] c6xdigio [ 86.877705][ T7628] comedi: valid board names for aio_iiro_16 driver are: [ 86.884377][ T7640] netlink: 'syz.5.463': attribute type 1 has an invalid length. [ 86.887619][ T7640] nbd: error processing sock list [ 86.887717][ T7628] aio_iiro_16 [ 86.891176][ T7628] comedi: valid board names for aio_aio12_8 driver are: [ 86.898783][ T7628] aio_aio12_8 [ 86.900357][ T7628] aio_ai12_8 [ 86.901800][ T7628] aio_ao12_4 [ 86.902901][ T7628] comedi: valid board names for fl512 driver are: [ 86.937942][ T7628] fl512 [ 86.938927][ T7628] comedi: valid board names for dmm32at driver are: [ 86.941074][ T7628] dmm32at [ 86.942118][ T7628] comedi: valid board names for dt282x driver are: [ 86.944239][ T7628] dt2821 [ 86.945266][ T7628] dt2821-f [ 86.946333][ T7628] dt2821-g [ 86.949961][ T7628] dt2823 [ 86.951123][ T7628] dt2824-pgh [ 86.952249][ T7628] dt2824-pgl [ 86.953358][ T7628] dt2825 [ 86.954355][ T7628] dt2827 [ 86.955342][ T7628] dt2828 [ 86.956346][ T7628] dt2829 [ 86.964327][ T7628] dt21-ez [ 86.966029][ T7628] dt23-ez [ 86.967115][ T7628] dt24-ez [ 86.968636][ T7628] dt24-ez-pgl [ 86.969792][ T7628] comedi: valid board names for dt2817 driver are: [ 86.972018][ T7628] dt2817 [ 86.973046][ T7628] comedi: valid board names for dt2815 driver are: [ 86.975156][ T7628] dt2815 [ 86.976139][ T7628] comedi: valid board names for dt2814 driver are: [ 86.979861][ T7628] dt2814 [ 86.981152][ T7628] comedi: valid board names for dt2811 driver are: [ 86.983216][ T7628] dt2811-pgh [ 86.984571][ T7628] dt2811-pgl [ 86.985728][ T7628] comedi: valid board names for dt2801 driver are: [ 86.996315][ T7628] dt2801 [ 86.998157][ T7628] comedi: valid board names for das6402 driver are: [ 87.000300][ T7628] das6402-12 [ 87.001418][ T7628] das6402-16 [ 87.002526][ T7628] comedi: valid board names for das1800 driver are: [ 87.004652][ T7628] das-1701st [ 87.005761][ T7628] das-1701st-da [ 87.006945][ T7628] das-1702st [ 87.009122][ T7628] das-1702st-da [ 87.010326][ T7628] das-1702hr [ 87.010861][ T7653] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 87.011481][ T7628] das-1702hr-da [ 87.014590][ T7653] netlink: 'syz.5.466': attribute type 1 has an invalid length. [ 87.014862][ T7628] das-1701ao [ 87.014869][ T7628] das-1702ao [ 87.014873][ T7628] das-1801st [ 87.014877][ T7628] das-1801st-da [ 87.014881][ T7628] das-1802st [ 87.014884][ T7628] das-1802st-da [ 87.014888][ T7628] das-1802hr [ 87.014892][ T7628] das-1802hr-da [ 87.018968][ T7653] netlink: 'syz.5.466': attribute type 4 has an invalid length. [ 87.019581][ T7628] das-1801hc [ 87.030148][ T7628] das-1802hc [ 87.031259][ T7628] das-1801ao [ 87.032364][ T7628] das-1802ao [ 87.033477][ T7628] comedi: valid board names for das800 driver are: [ 87.035479][ T7628] das-800 [ 87.036502][ T7628] cio-das800 [ 87.038510][ T7628] das-801 [ 87.040662][ T7628] cio-das801 [ 87.041945][ T7628] das-802 [ 87.042922][ T7628] cio-das802 [ 87.044416][ T7628] cio-das802/16 [ 87.045824][ T7628] comedi: valid board names for isa-das08 driver are: [ 87.048181][ T7628] isa-das08 [ 87.049224][ T7628] das08-pgm [ 87.050300][ T7628] das08-pgh [ 87.052216][ T7628] das08-pgl [ 87.053313][ T7628] das08-aoh [ 87.054411][ T7628] das08-aol [ 87.057299][ T7628] das08-aom [ 87.058414][ T7628] das08/jr-ao [ 87.062093][ T7628] das08jr-16-ao [ 87.063505][ T7628] pc104-das08 [ 87.064708][ T7628] das08jr/16 [ 87.065887][ T7628] comedi: valid board names for das16m1 driver are: [ 87.070055][ T7628] das16m1 [ 87.071120][ T7628] comedi: valid board names for dac02 driver are: [ 87.073207][ T7628] dac02 [ 87.074174][ T7628] comedi: valid board names for rti802 driver are: [ 87.076293][ T7628] rti802 [ 87.077570][ T7628] comedi: valid board names for rti800 driver are: [ 87.079713][ T7628] rti800 [ 87.080700][ T7628] rti815 [ 87.081715][ T7628] comedi: valid board names for pcm3724 driver are: [ 87.083843][ T7628] pcm3724 [ 87.084878][ T7628] comedi: valid board names for pcl818 driver are: [ 87.086949][ T7628] pcl818l [ 87.094947][ T7628] pcl818h [ 87.096017][ T7628] pcl818hd [ 87.097089][ T7628] pcl818hg [ 87.098827][ T7628] pcl818 [ 87.099827][ T7628] pcl718 [ 87.100819][ T7628] pcm3718 [ 87.101860][ T7628] comedi: valid board names for pcl816 driver are: [ 87.103967][ T7628] pcl816 [ 87.104996][ T7628] pcl814b [ 87.106037][ T7628] comedi: valid board names for pcl812 driver are: [ 87.108659][ T7628] pcl812 [ 87.109662][ T7628] pcl812pg [ 87.110724][ T7628] acl8112pg [ 87.111808][ T7628] acl8112dg [ 87.112890][ T7628] acl8112hg [ 87.113980][ T7628] a821pgl [ 87.115023][ T7628] a821pglnda [ 87.116134][ T7628] a821pgh [ 87.117174][ T7628] a822pgl [ 87.119532][ T7628] a822pgh [ 87.120615][ T7628] a823pgl [ 87.121652][ T7628] a823pgh [ 87.122674][ T7628] pcl813 [ 87.123633][ T7628] pcl813b [ 87.124654][ T7628] acl8113 [ 87.125688][ T7628] iso813 [ 87.126671][ T7628] acl8216 [ 87.128604][ T7628] a826pg [ 87.129713][ T7628] comedi: valid board names for pcl730 driver are: [ 87.131825][ T7628] pcl730 [ 87.132809][ T7628] iso730 [ 87.134338][ T7628] acl7130 [ 87.135384][ T7628] pcm3730 [ 87.136424][ T7628] pcl725 [ 87.137861][ T7628] p8r8dio [ 87.138909][ T7628] acl7225b [ 87.139945][ T7628] p16r16dio [ 87.141009][ T7628] pcl733 [ 87.141977][ T7628] pcl734 [ 87.142942][ T7628] opmm-1616-xt [ 87.144058][ T7628] pearl-mm-p [ 87.145218][ T7628] ir104-pbf [ 87.146370][ T7628] comedi: valid board names for pcl726 driver are: [ 87.150364][ T7628] pcl726 [ 87.151643][ T7628] pcl727 [ 87.152860][ T7628] pcl728 [ 87.154091][ T7628] acl6126 [ 87.155189][ T7628] acl6128 [ 87.156206][ T7628] comedi: valid board names for pcl724 driver are: [ 87.158716][ T7628] pcl724 [ 87.159677][ T7628] pcl722 [ 87.160694][ T7628] pcl731 [ 87.161677][ T7628] acl7122 [ 87.162683][ T7628] acl7124 [ 87.163705][ T7628] pet48dio [ 87.164724][ T7628] pcmio48 [ 87.165750][ T7628] onyx-mm-dio [ 87.166883][ T7628] comedi: valid board names for pcl711 driver are: [ 87.169678][ T7628] pcl711 [ 87.170677][ T7628] pcl711b [ 87.171760][ T7628] acl8112hg [ 87.172847][ T7628] acl8112dg [ 87.178664][ T7628] comedi: valid board names for amplc_pc263 driver are: [ 87.180930][ T7628] pc263 [ 87.181897][ T7628] comedi: valid board names for amplc_pc236 driver are: [ 87.184138][ T7628] pc36at [ 87.185163][ T7628] comedi: valid board names for amplc_dio200 driver are: [ 87.198688][ T7628] pc212e [ 87.199717][ T7628] pc214e [ 87.200699][ T7628] pc215e [ 87.202303][ T7628] pc218e [ 87.203313][ T7628] pc272e [ 87.204313][ T7628] comedi: valid board names for comedi_parport driver are: [ 87.206663][ T7628] comedi_parport [ 87.207443][ T5944] Bluetooth: hci0: command tx timeout [ 87.209371][ T7628] comedi: valid board names for comedi_test driver are: [ 87.212227][ T7628] comedi_test [ 87.213372][ T7628] comedi: valid board names for comedi_bond driver are: [ 87.215618][ T7628] comedi_bond [ 87.277356][ T5944] Bluetooth: hci3: command tx timeout [ 87.539773][ T7674] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 87.607498][ T5998] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 87.610547][ T5998] zl10353_read_register: readreg error (reg=127, ret==-110) [ 87.610660][ T7561] usb 11-1: dvb_usb_ce6230: I2C read not implemented [ 87.671838][ T5998] usb 11-1: USB disconnect, device number 2 [ 87.859593][ T34] usb 6-1: USB disconnect, device number 11 [ 88.015875][ T7710] batadv_slave_1: entered promiscuous mode [ 88.020717][ T7708] batadv_slave_1: left promiscuous mode [ 88.242827][ T7774] bridge1: entered promiscuous mode [ 88.251168][ T7774] bridge2: entered promiscuous mode [ 88.256172][ T7774] bridge3: entered promiscuous mode [ 88.258399][ T7777] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x0) [ 88.261799][ T7774] bridge4: entered promiscuous mode [ 88.269146][ T7774] bridge5: entered promiscuous mode [ 88.275785][ T7774] bridge6: entered promiscuous mode [ 88.280988][ T7774] bridge7: entered promiscuous mode [ 88.302639][ T7774] bridge8: entered promiscuous mode [ 88.311853][ T7774] bridge9: entered promiscuous mode [ 88.320915][ T7774] bridge10: entered promiscuous mode [ 88.339451][ T7774] bridge11: entered promiscuous mode [ 88.348542][ T7774] bridge12: entered promiscuous mode [ 88.353693][ T7774] bridge13: entered promiscuous mode [ 88.356523][ T5944] Bluetooth: hci3: unexpected subevent 0x0c length: 51 > 5 [ 88.359240][ T7774] bridge14: entered promiscuous mode [ 88.364598][ T7774] bridge15: entered promiscuous mode [ 88.369600][ T7774] bridge16: entered promiscuous mode [ 88.374455][ T7774] bridge17: entered promiscuous mode [ 88.379752][ T7774] bridge18: entered promiscuous mode [ 88.385008][ T7774] bridge19: entered promiscuous mode [ 88.392092][ T7774] bridge20: entered promiscuous mode [ 88.399030][ T7774] bridge21: entered promiscuous mode [ 88.405066][ T7774] bridge22: entered promiscuous mode [ 88.411186][ T7774] bridge23: entered promiscuous mode [ 88.416613][ T7774] bridge24: entered promiscuous mode [ 88.422157][ T7774] bridge25: entered promiscuous mode [ 88.427493][ T7774] bridge26: entered promiscuous mode [ 88.433144][ T7774] bridge27: entered promiscuous mode [ 88.438642][ T7774] bridge28: entered promiscuous mode [ 88.444367][ T7774] bridge29: entered promiscuous mode [ 88.449915][ T7774] bridge30: entered promiscuous mode [ 88.455097][ T7774] bridge31: entered promiscuous mode [ 88.460987][ T7774] bridge32: entered promiscuous mode [ 88.466212][ T7774] bridge33: entered promiscuous mode [ 88.518983][ T7786] FAT-fs (nbd5): unable to read boot sector [ 88.572430][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 88.572446][ T40] audit: type=1400 audit(2000000020.690:571): avc: denied { connect } for pid=7792 comm="syz.5.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.719189][ T7807] netlink: 'syz.6.497': attribute type 39 has an invalid length. [ 88.901228][ T40] audit: type=1400 audit(2000000021.020:572): avc: denied { create } for pid=7809 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.908508][ T7814] macvtap1: entered promiscuous mode [ 88.911088][ T7814] macsec0: entered promiscuous mode [ 88.913711][ T7814] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 88.917097][ T40] audit: type=1400 audit(2000000021.030:573): avc: denied { sys_admin } for pid=7809 comm="syz.2.500" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.927032][ T7814] macsec0: left promiscuous mode [ 88.968908][ T7818] program syz.5.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.994099][ T40] audit: type=1400 audit(2000000021.110:574): avc: denied { setopt } for pid=7819 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.008825][ T7823] overlayfs: failed to clone upperpath [ 89.022627][ T7826] ------------[ cut here ]------------ [ 89.024476][ T7826] 1 [ 89.024483][ T7826] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#3: syz.6.502/7826 [ 89.028846][ T7826] Modules linked in: [ 89.030253][ T7826] CPU: 3 UID: 0 PID: 7826 Comm: syz.6.502 Not tainted syzkaller #0 PREEMPT(full) [ 89.033218][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.036492][ T7826] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.038797][ T7826] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 22 82 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 89.045187][ T7826] RSP: 0018:ffffc900031ff7a0 EFLAGS: 00010246 [ 89.047194][ T7826] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.049835][ T7826] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 89.052430][ T7826] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 89.055182][ T7826] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 89.057900][ T7826] R13: 1ffff9200063ff43 R14: 0000000000000016 R15: 1ffff9200063ff0d [ 89.060458][ T7826] FS: 00007fa153fd46c0(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000 [ 89.063349][ T7826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.065547][ T7826] CR2: 00007fa153185dc0 CR3: 0000000057ce3000 CR4: 0000000000352ef0 [ 89.068387][ T7826] Call Trace: [ 89.069517][ T7826] [ 89.070498][ T7826] ? bpf_ksym_find+0x128/0x1c0 [ 89.072069][ T7826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.074084][ T7826] ? is_bpf_text_address+0x94/0x1a0 [ 89.075788][ T7826] ? kernel_text_address+0x8d/0x100 [ 89.077560][ T7826] ? __kernel_text_address+0xd/0x30 [ 89.079253][ T7826] ? unwind_get_return_address+0x59/0xa0 [ 89.081071][ T7826] ? arch_stack_walk+0xa6/0xf0 [ 89.082639][ T7826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 89.084703][ T7826] ? tomoyo_path_number_perm+0x46d/0x580 [ 89.086549][ T7826] ? stack_trace_save+0x8e/0xc0 [ 89.088248][ T7826] ? __lock_acquire+0x4a5/0x2630 [ 89.089901][ T7826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.091828][ T7826] ? policy_nodemask+0xed/0x4f0 [ 89.093420][ T7826] alloc_pages_mpol+0x1fb/0x550 [ 89.094988][ T7826] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 89.096726][ T7826] ? find_held_lock+0x2b/0x80 [ 89.098343][ T7826] ? avc_has_extended_perms+0x33a/0x1080 [ 89.100178][ T7826] ? avc_has_extended_perms+0x33a/0x1080 [ 89.102005][ T7826] ? drm_syncobj_array_find+0x34/0x3b0 [ 89.103761][ T7826] ___kmalloc_large_node+0x104/0x150 [ 89.105480][ T7826] __kmalloc_large_node_noprof+0x1c/0x70 [ 89.107356][ T7826] __kmalloc_noprof+0x5be/0x850 [ 89.108979][ T7826] drm_syncobj_array_find+0x34/0x3b0 [ 89.110700][ T7826] drm_syncobj_signal_ioctl+0x20b/0x460 [ 89.112491][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.114490][ T7826] ? drm_dev_exit+0x41/0x60 [ 89.115986][ T7826] ? drm_dev_exit+0x41/0x60 [ 89.117741][ T7826] drm_ioctl_kernel+0x1f3/0x3e0 [ 89.119359][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.121328][ T7826] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 89.123030][ T7826] drm_ioctl+0x5e6/0xc60 [ 89.124383][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.126314][ T7826] ? __pfx_drm_ioctl+0x10/0x10 [ 89.127980][ T7826] ? selinux_file_ioctl+0x139/0x290 [ 89.129695][ T7826] ? selinux_file_ioctl+0xb4/0x290 [ 89.131379][ T7826] ? __pfx_drm_ioctl+0x10/0x10 [ 89.132945][ T7826] __x64_sys_ioctl+0x18e/0x210 [ 89.134491][ T7826] do_syscall_64+0x106/0xf80 [ 89.135962][ T7826] ? clear_bhb_loop+0x40/0x90 [ 89.137595][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.139491][ T7826] RIP: 0033:0x7fa15319c799 [ 89.140971][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.147096][ T7826] RSP: 002b:00007fa153fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.149861][ T7826] RAX: ffffffffffffffda RBX: 00007fa153415fa0 RCX: 00007fa15319c799 [ 89.152412][ T7826] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 89.154979][ T7826] RBP: 00007fa153232c99 R08: 0000000000000000 R09: 0000000000000000 [ 89.157762][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.160287][ T7826] R13: 00007fa153416038 R14: 00007fa153415fa0 R15: 00007fffc52c6a88 [ 89.162817][ T7826] [ 89.163853][ T7826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.166191][ T7826] CPU: 3 UID: 0 PID: 7826 Comm: syz.6.502 Not tainted syzkaller #0 PREEMPT(full) [ 89.169153][ T7826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.172394][ T7826] Call Trace: [ 89.173496][ T7826] [ 89.174491][ T7826] dump_stack_lvl+0x100/0x190 [ 89.176046][ T7826] vpanic+0x552/0x970 [ 89.177379][ T7826] ? __pfx_vpanic+0x10/0x10 [ 89.178880][ T7826] panic+0xd1/0xe0 [ 89.180121][ T7826] ? __pfx_panic+0x10/0x10 [ 89.181593][ T7826] ? check_panic_on_warn+0x1f/0x90 [ 89.183263][ T7826] check_panic_on_warn.cold+0x19/0x34 [ 89.184970][ T7826] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 89.186937][ T7826] __warn.cold+0x191/0x348 [ 89.188413][ T7826] __report_bug+0x296/0x3d0 [ 89.189916][ T7826] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 89.191923][ T7826] ? __pfx___report_bug+0x10/0x10 [ 89.193574][ T7826] ? __lock_acquire+0x4a5/0x2630 [ 89.195149][ T7826] ? __lock_acquire+0x4a5/0x2630 [ 89.196785][ T7826] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 89.198795][ T7826] report_bug+0xb2/0x220 [ 89.200210][ T7826] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 89.202221][ T7826] handle_bug+0x16a/0x2a0 [ 89.203647][ T7826] exc_invalid_op+0x17/0x50 [ 89.205147][ T7826] asm_exc_invalid_op+0x1a/0x20 [ 89.206744][ T7826] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 89.208958][ T7826] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 22 82 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 89.215118][ T7826] RSP: 0018:ffffc900031ff7a0 EFLAGS: 00010246 [ 89.217090][ T7826] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.219650][ T7826] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 89.222205][ T7826] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 89.224752][ T7826] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 89.227324][ T7826] R13: 1ffff9200063ff43 R14: 0000000000000016 R15: 1ffff9200063ff0d [ 89.229891][ T7826] ? bpf_ksym_find+0x128/0x1c0 [ 89.231458][ T7826] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.233461][ T7826] ? is_bpf_text_address+0x94/0x1a0 [ 89.235167][ T7826] ? kernel_text_address+0x8d/0x100 [ 89.236865][ T7826] ? __kernel_text_address+0xd/0x30 [ 89.238571][ T7826] ? unwind_get_return_address+0x59/0xa0 [ 89.240358][ T7826] ? arch_stack_walk+0xa6/0xf0 [ 89.241870][ T7826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 89.243920][ T7826] ? tomoyo_path_number_perm+0x46d/0x580 [ 89.245749][ T7826] ? stack_trace_save+0x8e/0xc0 [ 89.247356][ T7826] ? __lock_acquire+0x4a5/0x2630 [ 89.248986][ T7826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.250918][ T7826] ? policy_nodemask+0xed/0x4f0 [ 89.252490][ T7826] alloc_pages_mpol+0x1fb/0x550 [ 89.254043][ T7826] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 89.255780][ T7826] ? find_held_lock+0x2b/0x80 [ 89.257300][ T7826] ? avc_has_extended_perms+0x33a/0x1080 [ 89.259061][ T7826] ? avc_has_extended_perms+0x33a/0x1080 [ 89.260943][ T7826] ? drm_syncobj_array_find+0x34/0x3b0 [ 89.262715][ T7826] ___kmalloc_large_node+0x104/0x150 [ 89.264446][ T7826] __kmalloc_large_node_noprof+0x1c/0x70 [ 89.266271][ T7826] __kmalloc_noprof+0x5be/0x850 [ 89.267889][ T7826] drm_syncobj_array_find+0x34/0x3b0 [ 89.269608][ T7826] drm_syncobj_signal_ioctl+0x20b/0x460 [ 89.271395][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.273356][ T7826] ? drm_dev_exit+0x41/0x60 [ 89.274854][ T7826] ? drm_dev_exit+0x41/0x60 [ 89.276339][ T7826] drm_ioctl_kernel+0x1f3/0x3e0 [ 89.277937][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.279901][ T7826] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 89.281646][ T7826] drm_ioctl+0x5e6/0xc60 [ 89.283035][ T7826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 89.284998][ T7826] ? __pfx_drm_ioctl+0x10/0x10 [ 89.286569][ T7826] ? selinux_file_ioctl+0x139/0x290 [ 89.288287][ T7826] ? selinux_file_ioctl+0xb4/0x290 [ 89.289958][ T7826] ? __pfx_drm_ioctl+0x10/0x10 [ 89.291511][ T7826] __x64_sys_ioctl+0x18e/0x210 [ 89.293076][ T7826] do_syscall_64+0x106/0xf80 [ 89.294603][ T7826] ? clear_bhb_loop+0x40/0x90 [ 89.296151][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.298077][ T7826] RIP: 0033:0x7fa15319c799 [ 89.299533][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.305690][ T7826] RSP: 002b:00007fa153fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.308394][ T7826] RAX: ffffffffffffffda RBX: 00007fa153415fa0 RCX: 00007fa15319c799 [ 89.310944][ T7826] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000004 [ 89.313489][ T7826] RBP: 00007fa153232c99 R08: 0000000000000000 R09: 0000000000000000 [ 89.316046][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.318597][ T7826] R13: 00007fa153416038 R14: 00007fa153415fa0 R15: 00007fffc52c6a88 [ 89.321144][ T7826] [ 89.322952][ T7826] Kernel Offset: disabled [ 89.324362][ T7826] Rebooting in 86400 seconds..