last executing test programs: 4.406240463s ago: executing program 0 (id=245): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbdd}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) 4.405038713s ago: executing program 0 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0), 0x5, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd06, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x24}}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@can_delroute={0x44, 0x19, 0x300, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x1, 0x2, 0x0, 0x0, "619029c0256df7d7"}, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1b5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.404025913s ago: executing program 0 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', r0, &(0x7f0000000000)='./file7\x00', 0x5) 4.403914764s ago: executing program 0 (id=250): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x1, @remote}, 0x16, {0x2, 0x4e24, @rand_addr=0x64010101}, 'bridge0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 4.350046566s ago: executing program 0 (id=251): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000800)={0xe142, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "ad65813991951e"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x3, 0x6, 0x1000, 0x8000, 0x7, 0x8, 0xc9, 0x9, 0x10, 0x0, 0x2, 0x1, 0x8000000000000000, 0xc5}, 0x8, [0x0]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x80, "08a5437803361b66daec1184153f3cb7b47af26fcc819544a0c0141b178e97e4", 0x3032344d}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 4.049874154s ago: executing program 0 (id=254): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x1) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000080)={0x36, &(0x7f0000000580)=[{0x16, '\x00', @buffer={"35272ae91496445f86d1ddf767d3d003026c6539de187d6fc0800419c9a80d41", 0x20}, 0x2}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0}, 0x50) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000280)={0x9, 0x7bb6, 0x9, 0x6, 0x6}) r6 = dup3(r3, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 3.949954843s ago: executing program 32 (id=254): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x1) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000080)={0x36, &(0x7f0000000580)=[{0x16, '\x00', @buffer={"35272ae91496445f86d1ddf767d3d003026c6539de187d6fc0800419c9a80d41", 0x20}, 0x2}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0}, 0x50) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000280)={0x9, 0x7bb6, 0x9, 0x6, 0x6}) r6 = dup3(r3, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 2.435750143s ago: executing program 3 (id=267): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa0000030000009078ac1414bbb71414aa070b05e0000001ac1414aa004e2240010000f5fff152295e96aa41b0e00b9545e7db517106f12c09527f8c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090784000"], 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) close(0x3) 2.433592297s ago: executing program 3 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r5, &(0x7f0000005480)=ANY=[@ANYBLOB="0000000900800001076d0600f7ffaaaaaaaaaabb00000000000086dd"], 0x12a5) read$FUSE(r4, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r6, 0x0, 0x20000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2510000000050035000900ed0008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2.325101134s ago: executing program 3 (id=271): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 1.853681377s ago: executing program 3 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x704, 0x808, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x34, r8, 0x1, 0x70bd25, 0xffffffff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f00000004c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x881}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', r15, 0x8, 0x80, 0x7, 0x69, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0x8a, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x4}, {@loopback}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x1a, 0x0, 0x3, [0x3ff, 0x7837, 0x6]}, @noop]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.68974022s ago: executing program 1 (id=279): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x10000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$CDROM_GET_CAPABILITY(r2, 0x5331) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0xffffe000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000001c0)=0x9b7c) 1.68759237s ago: executing program 1 (id=280): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x6a, 0x1, 0x0, &(0x7f0000000640)) flistxattr(r2, 0xfffffffffffffffe, 0x0) 1.547434198s ago: executing program 3 (id=281): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x4}) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x4, 0x4}) (async) close(r0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') (async) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) 1.499530407s ago: executing program 2 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x228080, 0x0, 0x9}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_DST_IF={0x8, 0xa, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x29, 0x8, 0x2, 0x1, 0x8, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8004, 0x1, 0x6, 0x27c}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r10, r12, 0x25, 0x4}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x13c, r4, 0x4, 0xfffffffc, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf692ff2533806069}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@multicast2, {0x2, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) 1.38928545s ago: executing program 3 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="0ed46ead3da318846b816649311f8936f17342581a897e5406000000934ff99e0ae0806c1c4581b64a00baa5678db66c882b4b0146002c8a532650e731b34e3e7ec8d2192102ed84a4ee77f234d718efe67e9b24f82c3d5341284f3a48c95498df835dd541a8fd9680bb03c404c2bebbb7438888206beb111d947cb4d941728db21fd0a313000000000000006d92797e651a111bbdbae4e822ddfb25b299d3572dec", @ANYRES16=r2, @ANYBLOB="000828bd70000000000004070200"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x8000}, 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0x100, 0x4) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r5 = open(0x0, 0x400, 0x43) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="042f8c0400000004001e0033183cf6f4b949a5b106e184"], 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r6, 0x1, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x200048}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x198, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x21}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf78d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) 1.32954444s ago: executing program 2 (id=285): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x7ffffc, 0x20, 0xffffffff, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x48, 0x1002, 0x7, 0x10004, 0x8000020, 0x7fffd, 0x0, 0x8}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "6f854a383a2932262fad21555ee74840"}) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x6, 0xe}) 1.269902404s ago: executing program 2 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000300)=""/95, &(0x7f0000000000)=0x5f) (async) write$binfmt_misc(r6, &(0x7f0000000040), 0xffc1) (async) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) (async) fchdir(r4) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000280), 0x4) (async) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="27050200420014000600002fb96dbcf706e1c9dce80188a8db0f8d86498b3812b0164aebaff0", 0x26}], 0x1}, 0x0) 1.190092642s ago: executing program 2 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1846f800fb0a78eeff3c206ee6f1670e1699", 0x12}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40c4844) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) (async) sendfile(r1, r1, 0x0, 0xb) 1.155779993s ago: executing program 4 (id=255): read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="ee96dc7a40940dc198199e4dff3beca01a6ffb02442bb948d00831c7a8ed058915dc8eb9bba41c0a34f506c580cf33f2c8b7", 0x32, 0x0, &(0x7f0000000140)={0x2, 0xe4, {0x1, 0xc, 0x9b, "cd66ddfb1a690903c62db132376883684cadbf1a9c114ece368264884756dad612e14acff8b1895bdaed03a0f92eb89e7d6faafa2fcd1b13d8645483e9d312d32ccc9cc0bfa12e8c89ee435c2703424f30657ae46d1cc3f9a5fe0baa6dad27d9fd42ee6ab44bc9074b74cbcf63f3b1fdb9072e4912ffb4a0ed3ec2cc33fadea909eb8ad01ea09a111ecec55309643345157b06f77ed46d8d8db99d", 0x3c, "252e89952bfacda8e28f58ee24f66620d39d1ae8dca8ac0c9641223bf77f6f9f1564af324d8040d6fa3c1023da7b2bfd52526c34a179511275bac0a2"}, 0xb9, "f0c22bb77c641cc79cfcc06eda6fdb6d7008bca597037baa8c54dec57ad9634b5ca0828c641208917ad3eaba0a577d124653433d830e59bee57e29c34244d5d422e38f584b95f100d3f8bbd275dccc70d7210cb76386744935b71d0ec8a5108cff69371b546f3da38721c0d5c58fc84e4f4fc756e84ff5b196fa73849c9ab34779486ffd52bafec6bb1b346103fdc806e073f91500c5a390f621499e742cab67e597e40bfa98845bfbfb4f810eaff33d25413aa32205ea2aab"}, 0x1a9}) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000380)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000440)=@usbdevfs_connect={0xfd19}) (async) ioctl$FITHAW(r1, 0xc0045878) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000500)={r4, 0xffffffffffffffff, 0xf486}) (async) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000540)=0x1000, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=r6, 0x4) (async) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000ac0)={{&(0x7f00000008c0), 0x0, 0x40, 0x4, 0xf24}, {&(0x7f0000000900)=[{0x2}], 0x1, 0x10, 0x8, 0x6a89a6e8}, {&(0x7f0000000940)=[0x6, 0x1, 0x7, 0xfff, 0x1, 0xec], 0x6, 0x8, 0x400, 0x9}, {&(0x7f0000000980)=[{0xdd, 0x1000, 0xd0, 0x6, 0x7}, {0x0, 0x7e, 0x0, 0x8000000000000001, 0x4}, {0x800, 0x800, 0x3, 0x100000000, 0x6}, {0xd3a7, 0xa, 0x5, 0x7, 0x6}, {0x80000000, 0x8, 0x453f, 0x7, 0x6}, {0x2f, 0x6, 0x5, 0x8, 0x1}], 0x6, 0x28, 0x2b, 0x7}, {&(0x7f0000000a80)=[0x6, 0x6, 0x0, 0x1, 0x92, 0xbf0, 0x400], 0x7, 0x8, 0x0, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000b40)={0x6, 0x3, {0xb51, @struct={0xf, 0x4}, 0x0, 0x8, 0x6be, 0x7, 0x0, 0x9, 0x406, @struct={0xf, 0x3ff}, 0x1, 0xe, [0x800, 0xfffffffffffffeff, 0x211, 0x2dd, 0x3, 0x6]}, {0xffffffffffffff80, @struct={0x853a, 0xfffffe01}, 0x0, 0x6, 0x60d4, 0x80000000, 0x80, 0x9776, 0x0, @usage, 0xcc, 0x4, [0xfffffffffffffffd, 0x9, 0x40, 0xfaf3, 0x0, 0x3]}, {0x3, @struct={0xfa, 0x2}, 0x0, 0xd, 0x0, 0x4, 0x7ff, 0x1, 0x22, @struct={0x1, 0x80000000}, 0x3b, 0xffffffff, [0x3, 0x6, 0x8, 0x9619, 0xac2f, 0x10000]}, {0x9, 0x9, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000f40)={r8, 0xffffffffffffb1a6, 0x8, 0x1}) (async) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000001340)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001380)={r9, 0x10}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@broadcast, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000014c0)=0xe8) (async) fcntl$setownex(r7, 0xf, &(0x7f0000001500)={0x3, r5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000001540)) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, 0x1406, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004094) (async) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000001ac0)={0x0, 0x0, 0xe, 0x6, 0x34, &(0x7f00000016c0)="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"}) (async) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000001b00), 0x4) (async) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x2020) (async) writev(r7, &(0x7f0000004100)=[{&(0x7f0000003b80)="65e1638cf62b2d053f54bd780698b02d3cb5d47197a3eff44b9654bada0272d57a47bc6f454d4639bb245d72e9ac6cab130be06c4e049ef26c35909de64bb0fef2750647fdd6245c89f91a25dde5debfc9083857f56a7667eeca82407433c9093c3020c5fafd8fd0f7f15cb46f9f31a2ec213a4e1fde9ec71d5ca0ec0197e4ce3cd361be485d85a432d49716c428da311b27937945487897176de2e743855338dc75ff58476d1c32fa21b6686734dafdaf24336696e4e9b11567354b1c40408525bd6f79827816a8cb6d938efd92d2df74b36ca3c29877cda0d1efe20f21edb0094d75dcfea8506efc1a02ca47afbbdc59019ec0a66bb5", 0xf7}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)="943e4c026942bf81605b7b4a1f25193c12a21c52f543cc924587", 0x1a}, {&(0x7f0000003d00)="994e4511e2eab59e3c38e35cc7c112c7799d644c161d6ff45197f5d78cb3ad64124c051ce8b8fd3aee72", 0x2a}, {&(0x7f0000003d40)="fce196b44a4902e12951b8e74dd70e125a5e5eb6f2a3f2694703390dee5e9ea4ed533c8c350f441bff6bda7c70d5672e77d6aeb102f0a85ff471e274ac6ac4f4e35018f4f1181bbadba56b27d2310a37d03aa0f91932d01fd30e0b77915b86e8ff6b6c8f60b8bc955e5838cb17599ff5", 0x70}, {&(0x7f0000003dc0)="2507797f54bd6201d81d5f6763eb5775a0b41c56b7c241f835ccebddd57d8b6991b45ca62c9eb7d4cd486851af3b6b2c63b4dba2ecc2efd96bf4abf3a7fd08c65165fa43394202e6d3f21354e9df423810e01970c739eef2b86639fc5893138979e976df54d6971dde3fb4395a4be1255901fbf49eea3795bce453f38ca7fff2ccdf7979c7196c460abe0f2b80114bf9f7af5c6b71734934362ad44312759e1ef451bfaefa460bb445de78051351af1cd6bc8b5320a6fcd8aaa4914e93ef84a7f6", 0xc1}, {&(0x7f0000003ec0)="199647284ac1bd1ba1e99b34219baf5d5473ff514ec3b108b66018e1b5da3dc819ad51acb225a95567c1c954c6d7ff1090e8db46626cfcd1edd6c9eead049381c6d18e79fdc514e86fec4a897594a6ab2141df9d50f8fbfd2e8048f761a14c0025f496a2b77e2a70810752227f56dd37d847c54b4e1390e0e9c7a94e13a6392fdbc9", 0x82}, {0xffffffffffffffff}, {&(0x7f0000003f80)="c825a21fbe2eb999d441e867354d69d6fd05fe4678842c215af5edf75e6c3bde50a52401a618767b49bec88a03c0a1d82b06fb1cd1086922e9a4a737ac72ba8da36188c101bc138f3556201b0a06b129c4262f8136c912439bb773dd8cf4b78a2fbe", 0x62}, {&(0x7f0000004000)="38316362ca4c3c4e81d724ffc9b67c486b1cce6d3ed54539108d015810a6b6fe455ab24da0888a98bf409949cf4e4dae8026b8971552aeedc3ac93220498f7cd2bffdd1ef26a6539fa8a33bcb0c51f7f476aca68579321e835c10ba0be40135523bd48af8131ac0be9d32d4260469afc8c653d069f92235449babcefe07f983ce97abd06dccb5fbd74e8886240bca84b3bb226fc0ae7523cdda99978e0543338aecc62ce8e330203058b515721526344c5a738ee91a3e93f52acd13ae95d74e62ca183", 0xc3}], 0xa) (async) r10 = accept4$nfc_llcp(r2, &(0x7f00000041c0), &(0x7f0000004240)=0x60, 0x800) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000004280)) 1.068012734s ago: executing program 4 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="f3aebd6969fa0000000f01d9660f78c4020a1bf7b805008300b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f06", 0x47}], 0x1, 0x10, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x2000000, {{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x120}, {@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0xfffffffd, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffffffffffffffff}, {}, 0x70bd26, 0x0, 0x2, 0x2, 0x0, 0x18}}, 0xf0}}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.066860321s ago: executing program 2 (id=289): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000040)) 999.177065ms ago: executing program 2 (id=290): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x400, 0x4, 0x0, 0x1fb}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r0}, 0x4474e422, 0x3ff}) ppoll(&(0x7f0000000200)=[{r6}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x20000) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f00000003c0)={0x1, 0x1, @raw_data=[0xdbd, 0x7, 0x8, 0x3, 0x1, 0xe1, 0xd, 0x5, 0x9, 0x4, 0x3, 0x1, 0x7, 0x688]}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000000c0)={0x0, 0x1800000000000, 0x3ff, 0x1, 0x5}) io_uring_enter(r3, 0x5da1, 0x6efa, 0x8, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001240)={r8, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 778.279833ms ago: executing program 4 (id=291): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) (async) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000340)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48eb, 0x1158, 0x2, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) (async) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ppoll(&(0x7f0000000040)=[{r8, 0x12c2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r8, 0xf51bb000) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000140)={0x3, 0x0, 0x6}) (async) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000140)={0x3, 0x0, 0x6}) syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x2) socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 189.982917ms ago: executing program 1 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77682a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000140)=""/251, &(0x7f0000000080)=0xfb) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x0, 0x2000000000000, 0x3, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x42d, 0x0, 0x10000000000f48, 0x8, 0x25}) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0xb}], 0x1, 0x4000001, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @private=0xa010100, @multicast, @private=0x1}}}}, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 69.966966ms ago: executing program 1 (id=293): epoll_create1(0x80000) (async) r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f8e96b9381b6698b9843d2bceb29fbd8619a2966e18d636a2d2aaae46a15b4e7f797ea24291375d8a08f194f777f3f4633590a2626ca13b2a05425309a53e6a17faa80856478baa8659acd7eaf797598e451c009600705b436dcc68b733e29825e1efe9a3a2e9b747c", @ANYRES16=r3, @ANYBLOB="0100000a40000000000a0100000005000100000000000800020005000000"], 0x24}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f00000021c0)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x20000001, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x20000001, 0x81, 0xffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(r8, r8, 0x0) (async) setresuid(r8, r8, 0x0) setuid(r8) socket(0x5, 0x0, 0x3) (async) r9 = socket(0x5, 0x0, 0x3) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r10, 0x1000000, 0x0) (async) lseek(r10, 0x1000000, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000002200)={{r9}, "cd262834ca95f5cd06cdd81a16a2f4951ee7f54224e0e2e834bd6ed8fc7884c67229ac7f138b0c3e5f31ca793c7419da97a83e768b8d770800b5a5cc6b8c57fb14c0f262fbca029eea619545f43fae1fe1d8f2e544552bdaa232cd101a1eb5077ca183d78ce37f82cca7f5199d65ff7e01497a94429d1f603f501162a0efffa81d7d72f6b3e353ae250d3b4abfe29fd4a92a7547dc72a20ff1fa30c7b762609500d2ee3817187b8fbdad8828f7b4e7c7e968f6848f3ffc26dec29771a4794a9556db5bb8b1bcd509739ab7e0de0386d5021968d08277f9334f3e5bb8c3a743660c81eb60f2f342a4c2fc8f178098dd974845fe3735c5f6365f9bd85b9ab0b598a0cfa420c94f8b9aebe3f6a0ad5b7b159f7a91d51813c36eb125ea1613edac5d3e7562cda720193b326faba961468e8e0428ba9726237e2d1531b597bf7b0cc98e4c9211508365a05876029533e292af6c0545927c34666491935efefcbb8a587b5059fbc1a1c45dd8eee335a58f324fd07f3443fac888f870cc0bd1fb7e0f31fbc95bc53960916b67cb26ec7b554e8a726fa286cbd5f613d88abc139221afa0c386854d84628434e8d7428b4d9d59ea3de96ef0fceb4e715f9c8c3324ac10a89c7a220152be254499687277d7108bb92754b778081c34a9ad6283275c909e2e4750ac2b1beb6a5495885b2d5e360448a17811e33354ae4d084487bdf8d733d98e05c68c64f96273be95b578dfe38fee6089a1eb9ec11776ba0ecb65b030f5cd4d957e9b8ef4d4461d60140bc40205024b1a7ab25dd35b0d2e81eb391352af65b3a8c110488a5e9ac1401dab136f6df93aa8d87fd66329107f545e2da11fd35fd595390f2872016c316aad75a0f150a93f70927ddca389f91b46c7dfad2a55a4787cff48cf0706e8293b4548461458a6da3a3fe752b16892210c979279d350634a65d19e50ce73e1756dd0b15340409179b56bc9a3b03d2766b6e75caa02a5d68bc1c0fbd37c6e1b1855b62a98242a11f2170e659f711f6595abcb1266d6b8a936994a6a5c5bcb59b6e9ac4309fb654758bd97899ebdfa5b4fc54f1390becb041b90b128fbaee46cfa916c7f72e09e1c41858955cc601f413555075af12978e5cabc4153a874ca8b1071efaa683606f7e6b6660012872824847818d8b207691184367b6da5a0781d09bd986cd2f0e9f8abb2e0f7d53ec0bd369a9bb75cc9080ec9dfc9a1ce62fe14f375f40c891d3572da676a5123ece1b3921c80c0624d4e8f1ea23d399df6dfbc69c6f029253cb85acd3313256b4d341c1adfd305c353dee7f36d4c906ab851c10924a2ca740b82bd688ff84ed2b7320574d46ccd6cde99bbe1d3b12d6b670d161649eb8cebdc527555c004bbc35b75dee82426b2a8a75626db4ddc48c530dc8630bc984768b5612b18d91f1640536fa3e473fc3f64b99c29cedd0a1cec22f1e23291509db0e9a809ed8980ad144a1f430987c4902b83893b976486db14f2a5b8a9a8cdde6b7de2a03981344970dc1d77ed93984b3b07644d4893e181ec7cdcbdacdfa6770eb6500a899619aec154ed8062917b914405ca78fd713f44f037b27e52eb127b9bebb769976acb6762e5d8b822bfdba53d7eea82075903f846f732fe13a72744c3675099aa99549b0df9030d3d5500037bd5a16c038e435bafc9e8f65c378ae674314c188fcbec22f493c8d116685144ea476b5852a29f20c0d324637022490cbebd87d92c74508ed0f561285ddd2998b74181caf15508d4c2ca449e192e6c6cc7004e30611b342ff92ec3fe93c84e111ab919ab91ea7770e4b434e511b5244f80a54a15de3aa7adcc294958981aeefaa055c034caae85532a82653898c0b15cb556947b52a5ca254c33573a6474bb33b52426193a84ec91a53b36d46199d6a246a14ebd0adf1c803ee6d82b83fcf23736dabb6b9a3bbf145ca5c0e811ce11ee71e2220bfd87c60ba50f79e8d4594603a414d18125d8be73dc2c71e829116943db4376d1396d5a15806e1cb6762c7fd94c2c78d4cf2506f93b85170dcbd6c1d2f365cd4c1fe385199a6f861e90f8efe6b07d3f15f7586cba84f2a7bc460b74da611fba46c0bcf3c20ca186b67ff0e3ac5a0d4da67b69adee84b0b1caef4d064ed56f9c4efd047a7422f7e75e7dec3330bfa5e7419dadab9ee84befcc223592c31d9d76813b89384a2716b9a9b97d82912e19612be890671215d9405fa183a7d9d7f2cb16f5cf6948af9f614e5cbf7259040b7d70c92fed8f5629ba88f6fcbb23e9164f3ff2599a2ce415df1b475dd93b5be2ca1c9b15fb08a230c80bbdd399a321dee4a9f51ae8d35e7ce9ca6fd65f3c72fa1eb9708463dbfd4ac82290a138b18187b50b035a222f50f9a45e7cc25da54a4091be641aef46925d2cc8961da38e909d37026be9d3c74e2806799f476805d8bdddcbbe5e2875514ceed90aa2748bd268e7d780c2c0cfa05caaca7b21b0b2594ca1c1a0c3b53aba3e9f9a5da635a613aaa6f73fcf05bbe888bdef1fef51812476dc9fdc4160293e0aed449608d3a8620bbd770d89cf9f32b11c063474797c0b89f5c824daa9f91e4b7a2acb038a414fb5f28d9f391e380777029e3cca1c5e1b58bdbc6bfea32c13f33e7a7cc92b395a523bde8bfd5ee7be19284d50450ed6dc02c2e12a6aca7fe119faf1d06cad59e0a5f8a85642c3c732ec886125abce3af9e113ae587a6e1356c4b5828a203214930776705e3aa9b00e55842c974bd5eed5a8a1ef8ff0ebc86b87ce05f85364a34699fd9b9e819b2d2d6a88afc48954da684c09d13d2afd306d0e101847b036d9e8fac9db53846acd85ca35c23350a619a0a3ea0cb03e369cfc1145d4dce5658bf6d01edb2ffbd936a9d6f516c6dc8082d38c7f761d45c94041ff9589c6e1c244e7f2c3fb83625bfb99c5297e3d85ef8326a121b5d079445491d96d6311a94fdb9bc5d0b685179db59ba402fa1aaeafe44e9c5b6df74d28a2e8b841f1eb4319f1ceb7a6bbc1e573c523fb52bc66b0f9ebde4294d98b369c4732ade64a83e2082b735384fd6a62b4f1969bc2b46f53fddb7242d1e138be54d8a1734b2ae4cd85a62cc4f7097ec1c31db3b7121241fc7a362010773f9f4ccaffd9c9dd7b29536fbe0525e893492a1ccfdd4aa21563d18fc08610b699b1998a3d5ef57646835e2c75b94df6feec26fd5cad57d980eea7eda8d406b33a5fb76067184dedc5636c0228a055aeed66d26d8696a170c296398ab0cc878f82f61e416b93d59f8c346a6b111f0a8fea5ff10d1769477835d02ee79b02c4bd8259abd8ac48879f3321b111c1eb0d79a1789049e4b03ca4e985c15ca9273d8670793b5257f43b3f60a05055c38ff4949b3dfc08102ba6a860e13cc53d68aa5683fd210eb1d0103fe8c43a585cf79cb9a1625ad6cff84eb41bbffd5f13b5691ca8d8145cd23d10c58eb7f9944c9164cf711a57f65c4fa31188f5012ca0feea80620721edd711f1318edb6d35d4885bee023dfe33881902172ec0372a4bc1c70612fe13a9fee8d73c7281112a70667fb90ddb7461bc29e6579bf152982657ccfc4e795b3a542062d963a020bb80af4a77127409676ebc9d798411385ad7d042443ede529ad80d64a66915fbddd04ac9232d04914c6ed61c8564158944d35e28dccd145c227b26795fbfe50708cf96cca01107c4795d777d4ad284c7cab165d61929e0ae2c45f6f61080ceeb4d52794518b66b5371fb2eea52053d21d2294f0e6bb1e1073c4910c12f6e42a481ac2f2ca6dae5581ca877f98f7d6eb4bd7ffd1852891ba6ae68a965b2c5c50ed8fbd8851fa1c075c9f8773f0adf3d66dee2e9edd2c7be43fadf159195fdcb0ff3fa58a5a541487ae711d263ad983fd55914161c347939da456536004c9a11c9639e9e46c57075b2053f99ab8babc57fed9db23760f2cb304d023075113b6977f8c5ea4ed57a103d78ed0b32741a5f1b57db90268a175f3e0941389a18a3d881f760fcb8d58d68fb217823b07a0a3aa5bc63e10062d4c78eceaa644c6209c242fffe215427c9f412b8d0d2fff94e67d2afdcd64a0600c8672b91aa6443ae3f87f06b0714c480fb4d35c3e666b8a6b9599c19d909c80ed5adbe05d1cd768670a833f234dff9caa3ef1fa59188f6009c29408470edae0086be05642f162db02e7f76a98c77baca19648b5fa44d4e378622b800385ff699dd12cdbe33b69fab3093296dd77d8910c3c7542585bdf2773a904c5ba5ae29a363572bb822124b72d2973150b1d0be97d40fa93eb4ea1c0c9870dc1807baef9d84d18542505e3a43a45acb7f0282a87b49c28c9da641fe063d9517f6b06bb1dd9cfe158ade3dc1508895f0df377e29c81593c623434fc8d9da02ccb92703cad3a012f90a506022fb1c651522e39a0e3e48284bf891bbe8545b5b6856ca1da2a1242e66d933ab629a6e22525e274d5d7b092fd5e82f24e954e79a5ec0ad4b52a2d3962642288dcfcea2962ae6e3fd36cd9f211c952156318b0fb57c911b11ac0d27c66a461ff148dc07a4f8d65111ffb5c4ff1b7ce27ae9b278f931db7fa6a09a7946aa8156b4cd1d22d4743245511661ec4f0efba885bcddcc03bc797c432f6a17001064e6b52b341cbc3c7c884b890ffb80ffa3b1b18fba2690162f690459d93e837752a367afe21b706bb59e275cb0124ec9fc825a3e77a9833db46cd44967be43a1a12e3c3eca1630906f9c55adfa57830fe7ed8cd50026e1aa07fc6cf762a25bf9fc2390ead9a23ea06b00ec733f86a55292b6dc0be87a0a02c859438cd96e962b7b6ea3f751cb532153a5a097b2df9d1b710ba8c6c2b5c6fee285b265bcb912710e8247c7c1d5defa5b7983d9bb9df40e4af3a2980a735efa0be746d1fe5b6ecc81e28460f4ce0fb39de543daa01fdf963c45193fafaeb781cf205711c71cef91c6e125282839686439ef43279ce8ae0a90e70e5b8776beed4e3b0e5feb0fab54dfc91e0c2d8500f5f058750dd25936a6a2ecdcb6c85d5c40ad6a364b0fcd01e52fb9df61bd3a9c3aa3a623cf733dcae31c9ff29e3604d370a41594c139c2e00dfdb322056e0ad2f01532f5e40d2e1368275f20b4785b628b351ec5f81151833b31fa39fea89857325cd7bb04cc714c9aade6409c824a7f56a826ef8af8110ce8a2f1f01fb0424689054a02bfd59cfb33d2bc6caa35e7e34ad1bf577e33b1f427faaecdf84f57a6a53661ae7a7b4f8035b45d4b21a2c4a298225e43577acd96ff5faa159eb46f8980dda5f5841a26a6675d3dcad8bb5037657eba88e4fece85b9c9e8a8b4aed20115a91d7dd21af7f2d8c0ebca7a0fc29828128542e6fa320ff1321eb7dcfd1ea0a5d14b71dbff0d2b407636fbaa1ce20191100204823498c47cc59334b8be6d563392bf69ec0f0fe87dc7a9a291d9b76c78ba4946bd48bae74b39d06d0fc10b7905b6f52cf6ad89d0dcb58270ffd271c74c6d586160fc0d3f774edc8b55d03497df1380a7d4f4915026ede289f42539af879b603194434fe99e3d149622b7f2b635f5d0839f9c47db086afd2f68c83380fbf6d993697e183d9d610efb37c0657753e7276c51d5b7c0dc158784ce1e3002ada2a358101dd7487c59444725c4e0650e980ed283de202028b53bb6fe18bf7251da2131cff3b05222d501351ca40f728b0a1f523bc49ceaf7c471af6b6a74d1e49a5b823a8c2d68005b08b38c50eebcf3a2955efd83ee4159e4d5b7c1505b18ab8c171d70376ed9ac22fa96f0792b969e7654dca4a2142f01c2dfd3e467"}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=r11, @ANYBLOB="0000000001520000"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001600)={0x24, r7, 0x400, 0x4070bd28, 0x5, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x18) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000ffdb01250700000005003300000000008d660000020000080500350006000000080039000f00000005000e568bd64714a7bcde768d36b52d2f00"/78], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0x1, 0x0, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0x1, 0x0, 0x1}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/781], 0x74c4}, 0x1, 0x0, 0x0, 0xc004}, 0x2000c000) 186.718µs ago: executing program 1 (id=294): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) 0s ago: executing program 1 (id=295): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x102, 0x0) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, &(0x7f00000000c0)=""/193, 0xc1, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff000) (async) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x102, 0x0) (async) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, &(0x7f00000000c0)=""/193, 0xc1, 0x0, 0x0}, 0x58) (async) kernel console output (not intermixed with test programs): [ 53.095929][ T40] audit: type=1400 audit(1773797796.966:61): avc: denied { siginh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:61664' (ED25519) to the list of known hosts. [ 55.234303][ T40] audit: type=1400 audit(1773797799.126:62): avc: denied { name_bind } for pid=5913 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.261241][ T40] audit: type=1400 audit(1773797799.156:63): avc: denied { execute } for pid=5914 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.270476][ T40] audit: type=1400 audit(1773797799.156:64): avc: denied { execute_no_trans } for pid=5914 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.503044][ T40] audit: type=1400 audit(1773797801.396:65): avc: denied { mounton } for pid=5914 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.513321][ T40] audit: type=1400 audit(1773797801.406:66): avc: denied { mount } for pid=5914 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.515352][ T5914] cgroup: Unknown subsys name 'net' [ 57.702442][ T5914] cgroup: Unknown subsys name 'cpuset' [ 57.709513][ T5914] cgroup: Unknown subsys name 'rlimit' [ 57.921359][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.780816][ T5914] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.744333][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 62.744350][ T40] audit: type=1400 audit(1773797806.636:82): avc: denied { execmem } for pid=5923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.925143][ T40] audit: type=1400 audit(1773797806.816:83): avc: denied { create } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.934036][ T40] audit: type=1400 audit(1773797806.816:84): avc: denied { read write } for pid=5927 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.945736][ T40] audit: type=1400 audit(1773797806.816:85): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.956274][ T40] audit: type=1400 audit(1773797806.816:86): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="socket:[3662]" dev="sockfs" ino=3662 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.967047][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.972030][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.977213][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.978567][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.979076][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.981008][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.981018][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.981859][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.983880][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.984281][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.985115][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.986132][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.986413][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.987647][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.990072][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.992190][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.992736][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.993138][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.001263][ T40] audit: type=1400 audit(1773797806.886:87): avc: denied { read } for pid=5928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.030910][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.034533][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.036495][ T40] audit: type=1400 audit(1773797806.886:88): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.047914][ T40] audit: type=1400 audit(1773797806.886:89): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.292340][ T40] audit: type=1400 audit(1773797807.186:90): avc: denied { module_request } for pid=5927 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.352954][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 63.394833][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 63.484767][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 63.515344][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 63.592561][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.595988][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.599333][ T5927] bridge_slave_0: entered allmulticast mode [ 63.603233][ T5927] bridge_slave_0: entered promiscuous mode [ 63.618583][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.620927][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.623334][ T5927] bridge_slave_1: entered allmulticast mode [ 63.626723][ T5927] bridge_slave_1: entered promiscuous mode [ 63.659760][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.662228][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.664545][ T5930] bridge_slave_0: entered allmulticast mode [ 63.667238][ T5930] bridge_slave_0: entered promiscuous mode [ 63.716768][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.720153][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.722596][ T5930] bridge_slave_1: entered allmulticast mode [ 63.725668][ T5930] bridge_slave_1: entered promiscuous mode [ 63.731354][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.747879][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.750829][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.753983][ T5928] bridge_slave_0: entered allmulticast mode [ 63.758269][ T5928] bridge_slave_0: entered promiscuous mode [ 63.762095][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.765109][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.768929][ T5928] bridge_slave_1: entered allmulticast mode [ 63.772819][ T5928] bridge_slave_1: entered promiscuous mode [ 63.790892][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.793885][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.796292][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.798838][ T5935] bridge_slave_0: entered allmulticast mode [ 63.801639][ T5935] bridge_slave_0: entered promiscuous mode [ 63.809967][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.813252][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.816661][ T5935] bridge_slave_1: entered allmulticast mode [ 63.820974][ T5935] bridge_slave_1: entered promiscuous mode [ 63.847618][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.853268][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.865422][ T5927] team0: Port device team_slave_0 added [ 63.868566][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.873227][ T5927] team0: Port device team_slave_1 added [ 63.884381][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.910988][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.941492][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.945312][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.948346][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.959020][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.974891][ T5928] team0: Port device team_slave_0 added [ 63.986011][ T5928] team0: Port device team_slave_1 added [ 63.989269][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.992315][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.003633][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.010479][ T5930] team0: Port device team_slave_0 added [ 64.043728][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.046402][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.055169][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.061396][ T5930] team0: Port device team_slave_1 added [ 64.065391][ T5935] team0: Port device team_slave_0 added [ 64.072379][ T5935] team0: Port device team_slave_1 added [ 64.075266][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.077585][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.085899][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.120211][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.122559][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.134042][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.140291][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.143194][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.154477][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.202018][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.205124][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.216993][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.223419][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.226455][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.237308][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.247696][ T5927] hsr_slave_0: entered promiscuous mode [ 64.251384][ T5927] hsr_slave_1: entered promiscuous mode [ 64.259449][ T5928] hsr_slave_0: entered promiscuous mode [ 64.261794][ T5928] hsr_slave_1: entered promiscuous mode [ 64.263913][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 64.266219][ T5928] Cannot create hsr debugfs directory [ 64.329843][ T5930] hsr_slave_0: entered promiscuous mode [ 64.333346][ T5930] hsr_slave_1: entered promiscuous mode [ 64.336356][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 64.338983][ T5930] Cannot create hsr debugfs directory [ 64.385824][ T5935] hsr_slave_0: entered promiscuous mode [ 64.388447][ T5935] hsr_slave_1: entered promiscuous mode [ 64.390656][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 64.392524][ T5935] Cannot create hsr debugfs directory [ 64.700945][ T5927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.707415][ T5927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.712352][ T5927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.721524][ T5927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.765206][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.772572][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.781992][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.788837][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.846107][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.853050][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.861437][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.867630][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.929631][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.936750][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.944323][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.953195][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.965035][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.993451][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.006829][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.009315][ T5942] Bluetooth: hci2: command tx timeout [ 65.030405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.033722][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.056652][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.059887][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.074945][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.078627][ T5942] Bluetooth: hci1: command tx timeout [ 65.078709][ T5943] Bluetooth: hci3: command tx timeout [ 65.088021][ T5943] Bluetooth: hci0: command tx timeout [ 65.096847][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.099242][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.112697][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.115853][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.141651][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.160634][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.172743][ T40] audit: type=1400 audit(1773797809.066:91): avc: denied { sys_module } for pid=5927 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.177678][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.183159][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.193965][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.199848][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.202177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.250168][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.280053][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.283221][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.299302][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.301609][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.318947][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.381414][ T5927] veth0_vlan: entered promiscuous mode [ 65.397649][ T5927] veth1_vlan: entered promiscuous mode [ 65.407317][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.435247][ T5927] veth0_macvtap: entered promiscuous mode [ 65.443695][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.447763][ T5927] veth1_macvtap: entered promiscuous mode [ 65.465689][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.479712][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.493260][ T5928] veth0_vlan: entered promiscuous mode [ 65.501231][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.505257][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.513308][ T5928] veth1_vlan: entered promiscuous mode [ 65.517918][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.521836][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.553016][ T5935] veth0_vlan: entered promiscuous mode [ 65.568457][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.577564][ T5935] veth1_vlan: entered promiscuous mode [ 65.594155][ T5928] veth0_macvtap: entered promiscuous mode [ 65.613796][ T5928] veth1_macvtap: entered promiscuous mode [ 65.619140][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.625455][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.659229][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.665426][ T5935] veth0_macvtap: entered promiscuous mode [ 65.672591][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.676113][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.681201][ T5935] veth1_macvtap: entered promiscuous mode [ 65.689752][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.714704][ T5930] veth0_vlan: entered promiscuous mode [ 65.716939][ T113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.721174][ T113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.730846][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.732725][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.738409][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.741910][ T113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.753725][ T113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767425][ T5930] veth1_vlan: entered promiscuous mode [ 65.771127][ T113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.780012][ T113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.782884][ T113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.785773][ T113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.840983][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.846992][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.867685][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.872338][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.873819][ T5930] veth0_macvtap: entered promiscuous mode [ 65.890153][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.892822][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.897585][ T5930] veth1_macvtap: entered promiscuous mode [ 65.923092][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.950583][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.956045][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.960959][ T6018] Zero length message leads to an empty skb [ 65.961440][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.964120][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.985852][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996467][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.002815][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.071538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.078311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.100987][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.105075][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.109893][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.114221][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.209264][ T6028] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6'. [ 66.280955][ T6037] ======================================================= [ 66.280955][ T6037] WARNING: The mand mount option has been deprecated and [ 66.280955][ T6037] and is ignored by this kernel. Remove the mand [ 66.280955][ T6037] option from the mount to silence this warning. [ 66.280955][ T6037] ======================================================= [ 66.334584][ T6042] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9'. [ 66.340807][ T6041] syzkaller0: entered promiscuous mode [ 66.343271][ T6041] syzkaller0: entered allmulticast mode [ 66.353697][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.356817][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.359793][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.362723][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.365685][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.368663][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.371590][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.374581][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.377475][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.380437][ T6042] tc action pedit 'at' offset -2147483647 out of bounds [ 66.383384][ T6042] 0: reclassify loop, rule prio 0, protocol 800 [ 66.391452][ T6044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.413907][ T6046] syzkaller0: entered promiscuous mode [ 66.416216][ T6046] syzkaller0: entered allmulticast mode [ 66.419769][ T6044] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8'. [ 66.423566][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 66.427465][ T6044] netlink: 'syz.2.8': attribute type 20 has an invalid length. [ 66.455075][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.459191][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.463530][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.464119][ T6044] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8'. [ 66.466805][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.470757][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 66.478529][ T6044] netlink: 'syz.2.8': attribute type 20 has an invalid length. [ 66.784939][ T5943] Bluetooth: hci0: SCO packet for unknown connection handle 48 [ 67.090302][ T5943] Bluetooth: hci2: command tx timeout [ 67.158526][ T5943] Bluetooth: hci0: command tx timeout [ 67.160907][ T5943] Bluetooth: hci3: command tx timeout [ 67.162216][ T5942] Bluetooth: hci1: command tx timeout [ 67.163625][ T6057] netlink: 'syz.0.12': attribute type 3 has an invalid length. [ 67.168319][ T6058] netlink: 'syz.0.12': attribute type 3 has an invalid length. [ 67.176712][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 67.180153][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 67.183124][ T6057] netlink: 'syz.0.12': attribute type 18 has an invalid length. [ 67.383561][ T6070] evm: overlay not supported [ 67.615631][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.795813][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 67.795829][ T40] audit: type=1400 audit(1773797811.686:164): avc: denied { write } for pid=6084 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.811452][ T40] audit: type=1400 audit(1773797811.686:165): avc: denied { open } for pid=6084 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.855359][ T6087] netlink: 'syz.0.21': attribute type 6 has an invalid length. [ 67.907876][ T40] audit: type=1400 audit(1773797811.796:166): avc: denied { read } for pid=6090 comm="syz.0.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.497035][ T6079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.500565][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.508625][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.513912][ T6079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.516213][ T6079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.520293][ T6079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.524484][ T6079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.526448][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.530062][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.534755][ T6079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.537417][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.540360][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.585976][ T40] audit: type=1400 audit(1773797812.476:167): avc: denied { write } for pid=6096 comm="syz.1.24" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.590801][ T6099] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 68.604111][ T40] audit: type=1400 audit(1773797812.496:168): avc: denied { create } for pid=6098 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.610211][ T40] audit: type=1400 audit(1773797812.506:169): avc: denied { create } for pid=6100 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.610256][ T40] audit: type=1400 audit(1773797812.506:170): avc: denied { create } for pid=6100 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.610352][ T40] audit: type=1400 audit(1773797812.506:171): avc: denied { bind } for pid=6100 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.610625][ T40] audit: type=1400 audit(1773797812.506:172): avc: denied { connect } for pid=6100 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.611248][ T40] audit: type=1400 audit(1773797812.506:173): avc: denied { read } for pid=6100 comm="syz.0.23" name="ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.631387][ T6101] ubi0: attaching mtd0 [ 68.664141][ T6101] ubi0: scanning is finished [ 68.668032][ T6101] ubi0: empty MTD device detected [ 68.668925][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.695774][ T6107] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 68.791379][ T6101] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 68.795783][ T6101] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 68.799362][ T6101] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 68.802327][ T6101] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 68.805691][ T6101] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 68.809155][ T6101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 68.812652][ T6101] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2271953022 [ 68.817105][ T6101] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 68.822016][ T6110] ubi0: background thread "ubi_bgt0d" started, PID 6110 [ 68.866271][ T6116] 5gQ[: renamed from lo (while UP) [ 68.970309][ T6125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=6125 comm=syz.0.32 [ 68.988048][ T6054] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.010260][ T6127] tipc: Invalid UDP bearer configuration [ 69.010302][ T6127] tipc: Enabling of bearer rejected, failed to enable media [ 69.122357][ T6054] usb 8-1: device descriptor read/64, error -71 [ 69.358014][ T6054] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.452951][ T6170] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 69.457050][ T6170] nvme_fabrics: unknown parameter or missing value 'system_u:object_r:ppp_device_t:s0 /usr/sbin/cups-browsed 00000000000000000003' in ctrl creation request [ 69.463836][ T6170] /dev/sg0: Can't lookup blockdev [ 69.471852][ T6163] delete_channel: no stack [ 69.473994][ T6163] delete_channel: no stack [ 69.498082][ T6054] usb 8-1: device descriptor read/64, error -71 [ 69.617209][ T6054] usb usb8-port1: attempt power cycle [ 69.798345][ T5942] Bluetooth: hci0: command 0x0419 tx timeout [ 69.958499][ T6054] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.988655][ T6054] usb 8-1: device descriptor read/8, error -71 [ 70.061100][ T6224] batman_adv: batadv0: Adding interface: dummy0 [ 70.063848][ T6224] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.074918][ T6224] batman_adv: batadv0: Interface activated: dummy0 [ 70.083737][ T6225] batadv0: mtu less than device minimum [ 70.086248][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.090311][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.094312][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.098264][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.102622][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.106429][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.110512][ T6225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.135429][ T5943] Bluetooth: hci3: Malformed Event: 0x2f [ 70.229376][ T6054] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 70.259333][ T6054] usb 8-1: device descriptor read/8, error -71 [ 70.343970][ T6240] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 70.357554][ T6246] SELinux: truncated policydb string identifier [ 70.361219][ T6246] SELinux: failed to load policy [ 70.368342][ T6054] usb usb8-port1: unable to enumerate USB device [ 70.414963][ T6249] process 'syz.1.68' launched '/dev/fd/5' with NULL argv: empty string added [ 70.464614][ T6258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6258 comm=syz.2.70 [ 70.490806][ T6258] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 70.507012][ T6258] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.518341][ T5943] Bluetooth: hci1: command 0x0419 tx timeout [ 70.521013][ T5942] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 70.547552][ T6261] netlink: 'syz.1.71': attribute type 4 has an invalid length. [ 70.550727][ T6261] capability: warning: `syz.1.71' uses deprecated v2 capabilities in a way that may be insecure [ 70.592472][ T6268] kvm: apic: phys broadcast and lowest prio [ 70.598201][ T5942] Bluetooth: hci3: command 0x0419 tx timeout [ 70.598842][ T5943] Bluetooth: hci2: command 0x0419 tx timeout [ 70.954278][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.957383][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.071640][ T6293] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 71.194024][ T6310] __nla_validate_parse: 6 callbacks suppressed [ 71.194038][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 71.201249][ T6310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30233 sclass=netlink_route_socket pid=6310 comm=syz.0.81 [ 71.249309][ T6312] mkiss: ax0: crc mode is auto. [ 71.308141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.640252][ T88] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.673987][ T6321] tmpfs: Bad value for 'mpol' [ 71.878102][ T5943] Bluetooth: hci0: command 0x0419 tx timeout [ 71.911244][ T6350] netlink: 'syz.2.93': attribute type 9 has an invalid length. [ 71.999931][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 72.011838][ T6362] efs: cannot read volume header [ 72.013660][ T6364] net_ratelimit: 13 callbacks suppressed [ 72.013669][ T6364] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 72.069339][ T6368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'. [ 72.071965][ T6374] fuse: Unknown parameter 'rootmoD` Q`' [ 72.114130][ T6378] program syz.3.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.132249][ T6378] FAT-fs (sr0): bogus number of reserved sectors [ 72.134705][ T6378] FAT-fs (sr0): Can't find a valid FAT filesystem [ 72.165187][ T6387] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 72.223661][ T6389] binder: 6386:6389 ioctl ae80 0 returned -22 [ 72.253738][ T6391] syzkaller0: entered promiscuous mode [ 72.255837][ T6391] syzkaller0: entered allmulticast mode [ 72.263616][ T6391] tc action pedit offset must be on 32 bit boundaries [ 72.299317][ T6395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.108'. [ 72.302333][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 72.533284][ T6403] binder: 6402:6403 ioctl c00c620f 0 returned -14 [ 72.598658][ T5943] Bluetooth: hci1: command 0x0419 tx timeout [ 72.603963][ T6413] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 72.614481][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.623315][ T6413] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.679148][ T5943] Bluetooth: hci3: command 0x0419 tx timeout [ 72.681222][ T5943] Bluetooth: hci2: command 0x0419 tx timeout [ 72.779889][ T6421] /dev/sr0: Can't open blockdev [ 72.787245][ T6445] PKCS8: Unsupported PKCS#8 version [ 72.810878][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 72.810893][ T40] audit: type=1400 audit(1773797816.706:301): avc: denied { listen } for pid=6448 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.852637][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 72.856935][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 72.860369][ T40] audit: type=1400 audit(1773797816.756:302): avc: denied { accept } for pid=6452 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.932964][ T40] audit: type=1400 audit(1773797816.826:303): avc: denied { nlmsg_write } for pid=6456 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.932971][ T6457] netlink: 108 bytes leftover after parsing attributes in process `syz.2.129'. [ 72.945356][ T5942] Bluetooth: hci0: Malformed Event: 0x2f [ 72.976360][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 72.981100][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 73.136575][ T40] audit: type=1400 audit(1773797817.026:304): avc: denied { map } for pid=6477 comm="syz.0.136" path="/45/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.145271][ T40] audit: type=1400 audit(1773797817.036:305): avc: denied { wake_alarm } for pid=6479 comm="syz.1.137" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.147181][ T6480] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 73.213104][ T6483] netlink: 'syz.1.138': attribute type 2 has an invalid length. [ 73.268946][ T40] audit: type=1400 audit(1773797817.166:306): avc: denied { getopt } for pid=6488 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.310092][ T40] audit: type=1400 audit(1773797817.206:307): avc: denied { create } for pid=6490 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.331698][ T6491] tmpfs: Unknown parameter 'mn˩' [ 73.373559][ T40] audit: type=1400 audit(1773797817.266:308): avc: denied { create } for pid=6495 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.520226][ T6507] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 73.531004][ T40] audit: type=1400 audit(1773797817.426:309): avc: denied { relabelto } for pid=6505 comm="syz.1.144" name="48" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 73.538118][ T6000] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.539759][ T40] audit: type=1400 audit(1773797817.426:310): avc: denied { associate } for pid=6505 comm="syz.1.144" name="48" dev="tmpfs" ino=257 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 73.586514][ T6516] netlink: 'syz.1.147': attribute type 10 has an invalid length. [ 73.627273][ T6524] netlink: 'syz.2.150': attribute type 11 has an invalid length. [ 73.696358][ T6000] usb 5-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 73.703074][ T6000] usb 5-1: config 1 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.712770][ T6000] usb 5-1: config 1 interface 0 has no altsetting 0 [ 73.733885][ T6000] usb 5-1: New USB device found, idVendor=0458, idProduct=9317, bcdDevice=f5.2f [ 73.741015][ T6000] usb 5-1: New USB device strings: Mfr=66, Product=2, SerialNumber=3 [ 73.751747][ T6000] usb 5-1: Product: 퇿䃜䙕臸봥呋丕䝢问ᛏ䓍侫ǯ⣷ᲇ菶눸蒜葅㻋솰嫐ꓮ⎜崥륧䋡吩缰摺셢Ⴑَ⠲⿭ɮ王苚䷏ʔ➲尵꛻៑픖큵랓靶게鳳ч矄ᩊ䊸ꑤ鯺䥙㶾㜏翸碎ᗲ擊즮 [ 73.763260][ T6000] usb 5-1: Manufacturer: syz [ 73.765064][ T6000] usb 5-1: SerialNumber: Ќ [ 73.968264][ T5942] Bluetooth: hci0: command 0x0419 tx timeout [ 74.283629][ T6566] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 74.614037][ T6000] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 74.621930][ T6000] usb 5-1: USB disconnect, device number 2 [ 74.688078][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 74.758108][ T5942] Bluetooth: hci2: command 0x0419 tx timeout [ 74.759430][ T5943] Bluetooth: hci3: command 0x0419 tx timeout [ 74.888508][ T6576] netlink: 'syz.2.164': attribute type 3 has an invalid length. [ 74.910141][ T6576] team0 (unregistering): Port device team_slave_0 removed [ 74.918568][ T6576] team0 (unregistering): Port device team_slave_1 removed [ 75.144124][ T6591] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 75.156881][ T6591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.168357][ T6591] bond1: (slave geneve2): making interface the new active one [ 75.172024][ T6591] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 75.242399][ T6594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.259742][ T6594] overlay: ./file1 is not a directory [ 75.478553][ T6015] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.660365][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 75.663911][ T6015] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 75.666614][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.670952][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.674501][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.679003][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.684700][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.689048][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.718604][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.878087][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 75.883298][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.887818][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.892047][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.897753][ T39] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 75.901298][ T6015] usb 5-1: usb_control_msg returned -32 [ 75.901755][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.903258][ T6015] usbtmc 5-1:16.0: can't read capabilities [ 75.909649][ T39] usb 7-1: config 0 descriptor?? [ 76.048148][ T5943] Bluetooth: hci0: command 0x0419 tx timeout [ 76.281844][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.284030][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.314921][ T6652] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 76.320872][ T6652] team0: Device vxcan1 is of different type [ 76.327252][ T39] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.332399][ T39] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.334971][ T39] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.337400][ T39] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.340008][ T39] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 76.347620][ T39] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 76.380417][ T39] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 76.383285][ T39] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 76.442988][ T6660] __nla_validate_parse: 6 callbacks suppressed [ 76.443003][ T6660] netlink: 604 bytes leftover after parsing attributes in process `syz.1.191'. [ 76.538615][ T6614] random: crng reseeded on system resumption [ 76.551213][ T5937] usb 7-1: USB disconnect, device number 2 [ 76.560477][ T6000] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.564189][ T6000] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.576686][ T6000] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.580415][ T6000] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.669390][ T5943] Bluetooth: hci3: Malformed Event: 0x2f [ 76.760191][ T5943] Bluetooth: hci1: command 0x0419 tx timeout [ 76.822497][ T5943] Bluetooth: hci2: unexpected event for opcode 0x011a [ 76.838043][ T5943] Bluetooth: hci3: command 0x0419 tx timeout [ 76.980725][ T6015] usb 5-1: USB disconnect, device number 3 [ 77.143360][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 77.364031][ T5943] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 77.720698][ T6735] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 77.720698][ T6735] program syz.3.212 not setting count and/or reply_len properly [ 77.766096][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 77.773634][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 77.817974][ T6743] trusted_key: encrypted_key: insufficient parameters specified [ 77.863822][ T6015] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.988075][ T6015] usb 5-1: device descriptor read/64, error -71 [ 78.038813][ T232] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 78.072015][ T6748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.073046][ T6757] program syz.3.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.078389][ T6758] program syz.3.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.082488][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 78.082502][ T40] audit: type=1400 audit(1773797821.976:359): avc: denied { lock } for pid=6756 comm="syz.3.216" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.105045][ T6758] blktrace: Concurrent blktraces are not allowed on sg0 [ 78.164576][ T40] audit: type=1400 audit(1773797822.056:360): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.222189][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.225583][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.233707][ T113] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.237435][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.237996][ T6015] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.238061][ T113] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.238084][ T113] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.238101][ T113] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.241319][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 78.260353][ T6765] Bluetooth: MGMT ver 1.23 [ 78.262770][ T40] audit: type=1400 audit(1773797822.156:361): avc: denied { write } for pid=6764 comm="syz.3.218" path="socket:[13876]" dev="sockfs" ino=13876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.301743][ T6767] Device name not specified. [ 78.301743][ T6767] [ 78.313240][ T40] audit: type=1400 audit(1773797822.206:362): avc: denied { setattr } for pid=6766 comm="syz.3.219" name="NETLINK" dev="sockfs" ino=14854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.321644][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 78.324503][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 78.378012][ T6015] usb 5-1: device descriptor read/64, error -71 [ 78.488357][ T6015] usb usb5-port1: attempt power cycle [ 78.588093][ T831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.608453][ T40] audit: type=1400 audit(1773797822.496:363): avc: denied { shutdown } for pid=6772 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.615924][ T40] audit: type=1400 audit(1773797822.506:364): avc: denied { name_connect } for pid=6772 comm="syz.1.222" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.624352][ T40] audit: type=1400 audit(1773797822.506:365): avc: denied { bind } for pid=6772 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.705270][ T40] audit: type=1400 audit(1773797822.596:366): avc: denied { read } for pid=6777 comm="syz.1.223" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.714568][ T40] audit: type=1400 audit(1773797822.596:367): avc: denied { open } for pid=6777 comm="syz.1.223" path="/74/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.719292][ T6779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.728339][ T6779] block device autoloading is deprecated and will be removed. [ 78.734125][ T40] audit: type=1400 audit(1773797822.626:368): avc: denied { ioctl } for pid=6777 comm="syz.1.223" path="/74/file0/file0" dev="fuse" ino=64 ioctlcmd=0x930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.745482][ T831] usb 7-1: Using ep0 maxpacket: 8 [ 78.748670][ T6778] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 78.754139][ T6778] team0: Device vxcan1 is of different type [ 78.756698][ T831] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.759897][ T831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.763811][ T831] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.767471][ T831] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.772892][ T831] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.776994][ T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.803643][ T6781] efs: device does not support 512 byte blocks [ 78.806190][ T6781] device does not support 512 byte blocks [ 78.806190][ T6781] [ 78.839063][ T5943] Bluetooth: hci1: command 0x0419 tx timeout [ 78.840024][ T6015] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.858571][ T6015] usb 5-1: device descriptor read/8, error -71 [ 78.921327][ T6787] capability: warning: `syz.1.227' uses 32-bit capabilities (legacy support in use) [ 78.990099][ T831] usb 7-1: GET_CAPABILITIES returned 0 [ 78.992079][ T831] usbtmc 7-1:16.0: can't read capabilities [ 79.108032][ T6015] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.128626][ T6015] usb 5-1: device descriptor read/8, error -71 [ 79.195627][ T831] usb 7-1: USB disconnect, device number 3 [ 79.248252][ T6015] usb usb5-port1: unable to enumerate USB device [ 79.788537][ T6794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.795750][ T6802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 79.798842][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.803776][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 79.815848][ T6803] vhci_hcd: connection closed [ 79.816770][ T88] vhci_hcd vhci_hcd.2: stop threads [ 79.821789][ T88] vhci_hcd vhci_hcd.2: release socket [ 79.824127][ T88] vhci_hcd vhci_hcd.2: disconnect device [ 79.843049][ T6806] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.120064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 80.218135][ T29] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 80.363977][ T6817] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 80.366196][ T6817] PKCS7: Only support pkcs7_signedData type [ 80.383569][ T29] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 80.388352][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 80.393998][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.40 [ 80.399183][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.402884][ T29] usb 6-1: Product: 䛦嘔噕꿚䗦툎躒㲊쥜횷貼ﴛ嵯ⱀ⾿락䚛챵䈝䱞腳൰畟׊䞫ꌅ䍓㏉⢃㨙횿홍鴦觬큀ᄆ쎱᪞៨䛿ͻ軥뎩쳯䎧珔ዼ】㳜ǧヷ哣蜉憐韃⫙ [ 80.411352][ T29] usb 6-1: Manufacturer: ﮱ嬶쎁뵯腂묞ᛏ塠谠룏煤∪宮歛䖌㦬ዞ鎾糃 [ 80.416515][ T29] usb 6-1: SerialNumber: С [ 80.425848][ T6815] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 80.630589][ T5943] Bluetooth: hci1: Malformed Event: 0x2f [ 80.637843][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 80.640546][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 80.648203][ T29] usb 6-1: USB disconnect, device number 2 [ 80.681250][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.686348][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.693273][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.698608][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.703560][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.709654][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6830 comm=syz.2.239 [ 80.868745][ T6844] macvtap1: entered promiscuous mode [ 80.871426][ T6844] macvtap1: entered allmulticast mode [ 80.873268][ T6844] veth1_vlan: entered allmulticast mode [ 81.009049][ T5943] Bluetooth: hci0: command 0x0419 tx timeout [ 81.372143][ T88] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.491582][ T88] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.515191][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.520327][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.523787][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.527045][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.530843][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.602054][ T88] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.716040][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 81.813404][ T6888] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 81.930743][ T88] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.952380][ T6893] __nla_validate_parse: 3 callbacks suppressed [ 81.952392][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 81.964862][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 81.967747][ T6893] netlink: 'syz.2.260': attribute type 7 has an invalid length. [ 82.142803][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145735][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.148804][ T6870] bridge_slave_0: entered allmulticast mode [ 82.151502][ T6870] bridge_slave_0: entered promiscuous mode [ 82.182198][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.185376][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.193494][ T6870] bridge_slave_1: entered allmulticast mode [ 82.203679][ T6870] bridge_slave_1: entered promiscuous mode [ 82.270641][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.280819][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.285022][ T88] bridge_slave_1: left allmulticast mode [ 82.287782][ T88] bridge_slave_1: left promiscuous mode [ 82.292928][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.312724][ T88] bridge_slave_0: left allmulticast mode [ 82.315213][ T88] bridge_slave_0: left promiscuous mode [ 82.318001][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.532677][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.537351][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.541777][ T88] bond0 (unregistering): Released all slaves [ 82.569586][ T6870] team0: Port device team_slave_0 added [ 82.572717][ T6870] team0: Port device team_slave_1 added [ 82.585764][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.588172][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.596474][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.601487][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.603796][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.612239][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.642302][ T6870] hsr_slave_0: entered promiscuous mode [ 82.650006][ T6870] hsr_slave_1: entered promiscuous mode [ 82.653061][ T6870] debugfs: 'hsr0' already exists in 'hsr' [ 82.655298][ T6870] Cannot create hsr debugfs directory [ 82.658774][ T6911] sd 0:0:0:0: PR command failed: 1026 [ 82.660493][ T6911] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 82.662680][ T6911] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 82.840850][ T6870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.853611][ T6870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.869317][ T6870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.873602][ T6870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.889322][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.891688][ T6870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.894635][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.896992][ T6870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.941677][ T88] hsr_slave_0: left promiscuous mode [ 82.953511][ T88] hsr_slave_1: left promiscuous mode [ 82.957222][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.965444][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.973940][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.977126][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.996384][ T88] veth1_vlan: left allmulticast mode [ 82.999266][ T88] veth1_macvtap: left promiscuous mode [ 83.001159][ T88] veth0_macvtap: left promiscuous mode [ 83.002958][ T88] veth1_vlan: left promiscuous mode [ 83.004692][ T88] veth0_vlan: left promiscuous mode [ 83.040727][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 83.113877][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 83.113889][ T40] audit: type=1400 audit(1773797827.006:400): avc: denied { mounton } for pid=6955 comm="syz.2.272" path="/proc/170/task" dev="proc" ino=14323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.211239][ T88] team0 (unregistering): Port device team_slave_1 removed [ 83.223958][ T88] team0 (unregistering): Port device team_slave_0 removed [ 83.325235][ T232] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.329337][ T232] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.412394][ T40] audit: type=1400 audit(1773797827.306:401): avc: denied { create } for pid=6965 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.421091][ T40] audit: type=1400 audit(1773797827.316:402): avc: denied { bind } for pid=6965 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.441077][ T40] audit: type=1400 audit(1773797827.316:403): avc: denied { write } for pid=6965 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.465272][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.482442][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.490230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.492995][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.498932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.501685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.568891][ T5943] Bluetooth: hci3: command tx timeout [ 83.591307][ T6982] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 83.593983][ T40] audit: type=1804 audit(1773797827.486:404): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.277" name="/newroot/57/file0" dev="tmpfs" ino=324 res=1 errno=0 [ 83.595332][ T6982] ref_ctr increment failed for inode: 0x144 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803fe13d40 [ 83.630824][ T6982] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 83.634015][ T6982] ref_ctr decrement failed for inode: 0x144 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803fe13d40 [ 83.637880][ T6982] uprobe: syz.3.277:6982 failed to unregister, leaking uprobe [ 83.741135][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.863470][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 83.918297][ T40] audit: type=1400 audit(1773797827.816:405): avc: denied { ioctl } for pid=7012 comm="syz.2.283" path="socket:[16272]" dev="sockfs" ino=16272 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.926835][ T7005] trusted_key: encrypted_key: master key parameter '' is invalid [ 83.948071][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.961359][ T6870] veth0_vlan: entered promiscuous mode [ 83.967658][ T6870] veth1_vlan: entered promiscuous mode [ 83.995223][ T6870] veth0_macvtap: entered promiscuous mode [ 84.000149][ T6870] veth1_macvtap: entered promiscuous mode [ 84.008967][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.016014][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.025000][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.285'. [ 84.028469][ T7022] Unknown options in mask b7f2 [ 84.028968][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.042237][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046120][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.060051][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.098444][ T59] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 84.100561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.101881][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.101905][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.101918][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.102705][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.102731][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.102744][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.103522][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.103542][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.103555][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.104332][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.104352][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.104365][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.104469][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.105248][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.105282][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.105302][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.106259][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.106290][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.106310][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.107265][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.107297][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.107316][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.110438][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.127907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.129764][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.133984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.193696][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.198271][ T59] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.202181][ T59] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.205617][ T59] usb 6-1: Product: syz [ 84.206253][ T40] audit: type=1400 audit(1773797828.096:406): avc: denied { mounton } for pid=6870 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.206976][ T59] usb 6-1: Manufacturer: syz [ 84.216507][ T59] usb 6-1: SerialNumber: syz [ 84.221970][ T59] usb 6-1: config 0 descriptor?? [ 84.228282][ T59] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.249558][ T40] audit: type=1400 audit(1773797828.146:407): avc: denied { create } for pid=7034 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.257047][ T40] audit: type=1400 audit(1773797828.146:408): avc: denied { ioctl } for pid=7034 comm="syz.4.255" path="socket:[16315]" dev="sockfs" ino=16315 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.384801][ T40] audit: type=1400 audit(1773797828.276:409): avc: denied { getopt } for pid=7045 comm="syz.2.290" lport=58203 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.409595][ T7041] kvm: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x87 [ 84.413045][ T7041] kvm: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x87 [ 84.429086][ T59] usb 6-1: USB disconnect, device number 3 [ 84.430233][ T7041] kvm: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x87 [ 84.436138][ T59] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 84.451116][ T7041] kvm: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x87 [ 84.454178][ T7041] kvm: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x87 [ 84.469347][ T7041] kvm_intel: kvm [7040]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x87 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa5000) [ 85.378805][ T1117] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.381000][ T1117] ata1: failed to read log page 10h (errno=-5) [ 85.383251][ T1117] ata1.00: NCQ disabled due to excessive errors [ 85.385917][ T1117] ata1.00: exception Emask 0x1 SAct 0x40000002 SErr 0x0 action 0x0 [ 85.389990][ T1117] ata1.00: irq_stat 0x41000000 [ 85.392176][ T1117] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.394738][ T1117] ata1.00: cmd 61/10:08:46:41:08/00:00:00:00:00/40 tag 1 ncq dma 8192 out [ 85.394738][ T1117] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.402375][ T1117] ata1.00: status: { DRDY } [ 85.404447][ T1117] ata1.00: error: { ABRT } [ 85.406507][ T1117] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.411599][ T1117] ata1.00: cmd 61/28:f0:9e:2f:08/05:00:00:00:00/40 tag 30 ncq dma 675840 out [ 85.411599][ T1117] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.419299][ T1117] ata1.00: status: { DRDY } [ 85.421362][ T1117] ata1.00: error: { ABRT } [ 85.424435][ T1117] ata1.00: configured for UDMA/100 [ 85.427094][ T1117] ata1: EH complete [ 85.560729][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 85.565512][ T9] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 85.569028][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 85.572727][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.576847][ T9] Workqueue: events l2cap_info_timeout [ 85.579028][ T9] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 85.581413][ T9] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 85.588950][ T9] RSP: 0018:ffffc900000c79f0 EFLAGS: 00010282 [ 85.591378][ T9] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.594494][ T9] RDX: 0000000000000000 RSI: ffffffff8957c321 RDI: dffffc000000004c [ 85.597588][ T9] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 85.600704][ T9] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c321 [ 85.603758][ T9] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 85.606862][ T9] FS: 0000000000000000(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000 [ 85.610340][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.612959][ T9] CR2: 00007fe2eea720c0 CR3: 000000002ea0a000 CR4: 0000000000352ef0 [ 85.616060][ T9] Call Trace: [ 85.617348][ T9] [ 85.618543][ T9] __kasan_check_byte+0x13/0x50 [ 85.620512][ T9] lock_acquire+0x148/0x380 [ 85.622349][ T9] ? __pfx___cancel_work+0x10/0x10 [ 85.624382][ T9] lock_sock_nested+0x41/0xf0 [ 85.626285][ T9] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 85.628354][ T9] l2cap_sock_ready_cb+0x43/0x1a0 [ 85.630376][ T9] l2cap_conn_start+0x123/0xb40 [ 85.632338][ T9] ? __pfx_l2cap_conn_start+0x10/0x10 [ 85.634464][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 85.636488][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.638570][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.640897][ T9] ? finish_task_switch.isra.0+0x200/0xb80 [ 85.643222][ T9] l2cap_info_timeout+0x81/0xa0 [ 85.645186][ T9] process_one_work+0xa23/0x19a0 [ 85.647170][ T9] ? __pfx_process_one_work+0x10/0x10 [ 85.648782][ T9] ? __pfx_l2cap_info_timeout+0x10/0x10 [ 85.650415][ T9] worker_thread+0x5ef/0xe50 [ 85.651800][ T9] ? kthread+0x13a/0x450 [ 85.653208][ T9] ? __pfx_worker_thread+0x10/0x10 [ 85.654730][ T9] kthread+0x370/0x450 [ 85.655967][ T9] ? __pfx_kthread+0x10/0x10 [ 85.657345][ T9] ret_from_fork+0x754/0xd80 [ 85.658719][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 85.660226][ T9] ? __switch_to+0x7b4/0x1120 [ 85.661637][ T9] ? __pfx_kthread+0x10/0x10 [ 85.663040][ T9] ret_from_fork_asm+0x1a/0x30 [ 85.664459][ T9] [ 85.665404][ T9] Modules linked in: [ 85.667045][ T9] ---[ end trace 0000000000000000 ]--- [ 85.669346][ T5943] Bluetooth: hci3: command tx timeout [ 85.671313][ T9] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 85.673196][ T9] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 85.680908][ T9] RSP: 0018:ffffc900000c79f0 EFLAGS: 00010282 [ 85.683377][ T9] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.686515][ T9] RDX: 0000000000000000 RSI: ffffffff8957c321 RDI: dffffc000000004c [ 85.690063][ T9] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 85.693324][ T9] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c321 [ 85.696486][ T9] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 85.699836][ T9] FS: 0000000000000000(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000 [ 85.703240][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.705817][ T9] CR2: 00007fe2eea720c0 CR3: 0000000022c28000 CR4: 0000000000352ef0 [ 85.709000][ T9] Kernel panic - not syncing: Fatal exception [ 85.712148][ T9] Kernel Offset: disabled [ 85.713890][ T9] Rebooting in 86400 seconds..