last executing test programs: 3m13.94920438s ago: executing program 2 (id=2836): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xa0}, 0x1, 0xfffff000, 0x0, 0x20048b4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r6, 0xb) 3m12.851888531s ago: executing program 2 (id=2837): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r0, 0x0, 0x0, 0x404c010) times(&(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0xf06, &(0x7f00000000c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf2502100000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) 3m10.8929387s ago: executing program 2 (id=2844): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) r4 = dup2(r1, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="6566460f3a61400350b805000000b9b78c096a0f01d9f20f20e066bad00466b839a166ef66baf80cb8ec85a781ef66bafc0cecc7442400d6b00132c744240200000000c7442406000000000f011424660f3a152307c4036d1829340f01c266bad004ec", 0x63}], 0x1, 0x23, &(0x7f0000000300), 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000740)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 3m10.732411244s ago: executing program 2 (id=2846): mkdir(&(0x7f0000000040)='./file0\x00', 0xc3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) alarm(0x8000000000000001) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) inotify_add_watch(r4, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 3m7.193790975s ago: executing program 2 (id=2855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, 0x0, &(0x7f0000002400)) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0xfffffffffffffffe}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x0, 0x0}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) setpgid(r2, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="9b5b99ca6183b1aaacf8cdc15bb1f67133bde5e2b518fb2aae97d40b717b3f40762ffcee10931a42435be262ffdb553186a884dd46b703692c164444332e20328931f4c57a7fe59d6d0286d3616e12469f0a3ca13a147f6983cb856d976363a9532868d380195e5f9f2dc50d11c4bfe2df5776aecbb96aa883668e51db4a91a0592de47c4df6ddb0504c53a2295f764ded779313f6ef9f4a9ae514f5b331eb9867b9f324eb9dd1a964dfe666a5a408161aa417734df8ab9b582863d534e9f29a333d27850b25a58fffa1ede22752e06a7735a5e21c69b952802174cc21d519621a4b9ceff73b5e265e", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)="2414be56599defc13b9677adc530287f4a1440cd608c3be0bb0cb5c81105ba0ec3e23cdcb7f3052bfff6b2704d6eecbfaef231c5c7a7fa67ad6848773d5435becd1110be6a42840d8e92c8131a0f0a77f364a10f040600e5a7365ab6af27b9f1ba197750a06afeb4dc6f63549d0897ae6a597b803815f5728f44b63a965446a48527a1301662b742dfd6f8314aa4204d37c246dc", 0x94, r0}, 0x68) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0xf0, 0x230, 0xffffffff, 0x398, 0x398, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv4=@local, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @port=0x4e20, @port=0x4e24}}}, {{@ipv6={@loopback, @remote, [0xff, 0xffffffff, 0xff, 0xff], [0xff, 0xff, 0xffffff00, 0xffffff00], 'batadv_slave_0\x00', 'veth0\x00', {0xff}, {0xff}, 0x40eeeb8d891aa773, 0x3, 0x2, 0x5a}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "25da"}}, @common=@icmp6={{0x28}, {0x8, "d423", 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x15, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@dev={0xfe, 0x80, '\x00', 0x12}, @port=0x4e22, @port=0x4e24}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x7, 0x3], 0x80000001, 0x1}}, @common=@hbh={{0x48}, {0x2, 0x2, 0x1, [0x5, 0x3, 0x78, 0x1, 0x3, 0x8, 0x5, 0x7, 0x22fa, 0x86, 0xfffc, 0xfff, 0x0, 0x3, 0x401]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x10, @ipv6=@rand_addr=' \x01\x00', @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x66, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv4=@broadcast, @port=0x4e21, @gre_key=0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8c010000cae614fbbadbf8746eaf1d805a62c4789970feca2d7606c5dab4fc15f9a0a476e6317dd8141635bb82eea27f171cc17729707baa39d7284ab35d060f6917f89834022deefefdee9d6adc3454f2899543f374d29b20d43f5418c71aaefa1d0b68f3324f254111dac317101155d8ff6a0000000000000000000000000000549d", @ANYRES16=0x0, @ANYBLOB="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"], 0x18c}}, 0x808) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m7.110007328s ago: executing program 2 (id=2856): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0xc000002, 0x0, 0x0, 0x2, 0xffff7fff}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x1000, &(0x7f000000e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0xffffffec) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x4040400) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0xffffffff, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000180000000100000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000000000000000000000b75dc08af5a1ce5f68aede68f2d2c0d0d1c319e093f722d35f607e6852b0e82d5c85232a4aee7ab6372f8926cf3cf3572394d638ac84b9650ccdd99ccb73371426eb3c"], 0x50) socket$nl_route(0x10, 0x3, 0x0) 2m51.471956602s ago: executing program 32 (id=2856): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0xc000002, 0x0, 0x0, 0x2, 0xffff7fff}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x1000, &(0x7f000000e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0xffffffec) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x4040400) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0xffffffff, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000180000000100000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000000000000000000000b75dc08af5a1ce5f68aede68f2d2c0d0d1c319e093f722d35f607e6852b0e82d5c85232a4aee7ab6372f8926cf3cf3572394d638ac84b9650ccdd99ccb73371426eb3c"], 0x50) socket$nl_route(0x10, 0x3, 0x0) 2m24.618091454s ago: executing program 0 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5992000000070000140003006d6163767461703000000000000000000500270004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8044) 2m23.783021924s ago: executing program 0 (id=2962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0xf0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x101, @mcast2, 0x8}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 2m22.716899696s ago: executing program 0 (id=2966): exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x194) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) getrlimit(0xe, &(0x7f00000001c0)) r1 = open(0x0, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x40000004}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000005c0)={0x78, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x20000080) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 2m20.480941138s ago: executing program 0 (id=2969): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x5) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870e000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={{0xa, 0x2, 0x8, 0x1, '\x00', 0x1}, 0x4, 0x3, 0x10001, 0x0, 0x5, 0x76e, 'syz0\x00', &(0x7f0000000540)=['&-{+&\\\x00', '\x00'/12, '\x00\x00\x00\xbd9\xf7\xf0\xcbb\xd8\xff\xf8\x10\xb3\xef\xc5\x94\x1b\xb0\xa0\xb4\xde\xe8\xa3*\x0e\xec*\f=\xd4\\%\x04V\xdf\xfe\x1c\xf0\a\xb2\xce^\xcb$\xf0\x9a\x81_\xcc\x13\x02s\x8e\xfa\xdf\x18\x1fw\x9dT\x9fR\xb99\xefi\xb34\x13\x9b&\xdfr\xca5W;\b\xa7\x04z', 'map_files\x00\xf4\xf6Si\xa9G\x82Q\xc6\"\xc8\xb9\xf1\xde\x9a\xd0\n\x90\xbf\xcd\x19\xa1\x92\xe0\xd4\xeb\xca\x13', ',\x00'], 0x8d}) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000080)=""/167, 0x0) r3 = io_uring_setup(0x650d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x25, 0xab}) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000005c0)={0x1, 0x1, 0x1000000, &(0x7f0000000540)=[{0x0}], 0x0}, 0x20) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m48.59831197s ago: executing program 4 (id=3041): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2000}) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xf01c, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42101) (async) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x42101) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRESOCT, @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRESHEX=r7, @ANYRES16=r8, @ANYRES32=0x0], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f00003ac000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) r11 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) inotify_init() keyctl$read(0xb, r11, &(0x7f00000001c0)=""/141, 0x8d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1m47.772712865s ago: executing program 4 (id=3042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x3, 0xd, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000340)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000580)={{0x214, 0x2, 0x49, 0x8001, 0x800}, 0x0}) 1m46.717475647s ago: executing program 4 (id=3045): exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x194) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) getrlimit(0xe, &(0x7f00000001c0)) r1 = open(0x0, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x40000004}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000005c0)={0x78, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x20000080) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 1m42.895182408s ago: executing program 4 (id=3047): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = dup(0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1405, 0x400, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x70bd2e, 0x48, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x3c}}, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m39.511325118s ago: executing program 4 (id=3058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m38.618540499s ago: executing program 1 (id=3060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x10000000, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffc, 0x800000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x88, 0x0, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m38.291068342s ago: executing program 1 (id=3062): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m37.841362877s ago: executing program 1 (id=3066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0xe0, 0x3, 0x2}, 0x18, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$TCFLSH(0xffffffffffffffff, 0x89f1, 0xfffffffdfffffffb) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x19, 0x0, &(0x7f0000000180)="e0857f9ff9cf9a0551040673d671c2580bd4af38f0ae2d666b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x5}}}, 0x24}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2000c014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x144, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 1m37.694966445s ago: executing program 1 (id=3067): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000005c80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @private=0xa010102, @local, {[@cipso={0x86, 0x7d, 0xffffffffffffffff, [{0x0, 0xc, "0800dd40311d00000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "e7060900001000000001010000df3be1"}, {0x6, 0x5, "cfa11c"}, {0x0, 0x10, "000000000000e2e7000000000000"}, {0x6, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x22}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x9}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xffffffff, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_emit_ethernet(0x239d, &(0x7f00000010c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "b69e59", 0x2367, 0x3a, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, {[@routing={0x62, 0x8, 0x2, 0x6f, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @loopback, @private0]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x6, 0x5, 0xffff, 0x7, [{0x1f, 0x14, "127ac7fe55d86122fa58510215f052c4a81ee762800c45f3292a05f7ff02ddd05ee5f50ded02ee42f616bfb83fadffa668e3e80f41913dac05289232f0d300d3d589120a5dc74e1e099eda737d43a3df041abd304363c3a4871a8456ba5400aea9db6a1a0a26e5fa795ca793716a835214227c685e1ac1f2160bc2d45031a38d03bbc88c0565cb2027d439ec0ef398c6196bfa0a743b10234a90ee96f70199e7"}, {0x18, 0x19, "ddfd267e22e65ffc5a37885d5fa13ec178a0aa911738977dccb208a28ae07ec95c4fa16909638b0509dbbdeff8136e7155e8418f1cdf3c026e65d51adbb2cea10792e91421142ff6edbf7fa6a6aff1363149848ff5838c235199b3da9edd60b4043d0ccdaaff95fb12aeea6f1e81283c724d003d3ac54324a8479475c75f8802f8ac4388a0865fff640ae2678aa8f2d6bf1e80a7982e392e86e59412247bed2d406f9c9a634d7e32c783fdb8a24bf294f2b4552abe2886cbd4de1aac8f917c91b0531de7486267"}, {0x2, 0x1d, "5ec9f598ce7e98777077ec677b7275d5bb300e8f717a257ed938ec28779119b0c5d017531635d071b6d9695d60b4934e7bac3cd8f56564526aabac0804b65d13bacf2c5bb3bec6d649ac7720c4a0c0f49d0f3c39a2f4ea89e64495def0239a0f40fc3df12e9e63e3e62674cc394236cb0992a600f97970d887d38d8c4513e64e3dacfe0f60f474fd3d523a27da50da1e1966908fecd95ae6b43543628c3b740507ef7f46867bf301acc28e5eee98dd5d4291a49d475e39b00cd8a3012845b0675abb3d57c648cd8ef2a6fd35dbb7ea19cba5a748c6097b5726b619df4f56a5436e4ae7a1948d65bb022b10d2d9"}, {0x2, 0xa, "b7ec0ca62dd318d8907dfd010f0f9dc284d97d23de476544e05b86074fda60b8388fe43e50b71e7692cf5f5a85174d6dbb94990d576ead39c0fe00a3240e8c1e365db40f44effa7c49627a72c491de6fe1600f"}, {0x18, 0xb, "b1df21771de1b426d410665a47b42fca34e71c2852b8d02f50aeb6bfd917e823e1acec2715a6c85d1903d850f1d9be3ae6a43c413f44a3ca4a8a6806cf886c75a550a59fb6058afc36df175a5c3aac72b038af7b5ddade313a7e"}, {0x18, 0x200, "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"}, {0x1, 0x200, "02adc3768db850120b4b9a0481caf2077de4df9c9359d4e1c204d9b2bc1004548a1e752f95062a23edbc1a37ab7eeafd840f695e0f5c5ea850ec9319c1da93e6e5044eb1f694868f0862fa07304cad68151519e05810c2c6121b14b6542906570921a327d7f49469ae4bc1469034e6d311d1364d31573c50e8e025ebecf8839afdf63b5b012dfd37f7c7054c180448e4fd029d644f0ed8bd31a9d73cf1f74f3810b570eb3ffdd770f0d4308ee88deb3966453d2ef002fceae099325b697a4c18af2abb1f372c7efe7a3e980930d6856a78175dadc894f4f371604131d43ab3f23f7780af0b71be2a0903e79218a6e2bc843a8f39bf462175f67c9423dd22c3e8df7caeef6f6abb31397c4c4e0c3107edc76c23911a7e036d9925c7b00b636dd24e34640261e8f77957c10ba6d661ed3591d6b60189247fd523e29a5c585bc8c93ea8dd2103371eea8f32043d05e17e629ee3f445b769b8843fad12119478cddfcdc61fcb0d8571284e62707789ddbd225a29dbc5ea1fdf10af8c6104b5c6171ec5b7c0d2b6701307fc6a76197779bf9762c4c3e7c7beccc6b24cd788e0d03577ed9340c9f8708edc933471f0817c37dd2624a31313b58d3a8a07152ccdd884f53d5b25fcd69155acfb5b5c3933358abc354bf1cf9662d5eba258ec5f5b4c547a1574082f4e76920b676bccc1b2a1d7096de85bd85ca48bbf0ae0298b67b65974e5789690c91c12b5cccd0ed600d5bcf8ee4343fb55e9d1f083e60dc8d982456c7a8bde71a3e4034f843f6474502c39e591ffbe4a6601052b5a269a378a3c08beff40516fdb71557c7b3059a874baac9a058e12bf8771e655af88c1fe419d1c800f625a82fd077bc4cfd9b194dc87804bc3ad62b225e267342c27152d878d324740d05871cb1543cccccac40d839fc39b2d2e15d02f151864f38f8438f30b5fa59cb076b97c4e4ed429ad5408d58e384b8d077398dabb36a0f8a8ebc61a88d441fec94c7b08a71f3b864c4ea561b4ab96c674a9565312e23e8c21464831b6cf88b371a6f3fc9399ccb3a8a40564a330527cb3d8583d2734c3b53fa8bdb902d9e8bfddd49bd634147b943b6f111852efbfb922a68793c607f34ffe2977514dee6b22aa627b27d3e84c2f1bf03e9f5eecbd84d838a60698d774b0c57038af031e785c11aecabc252b0e2e42b8b2de6df88cf88f7a11b6fce74bf80f5437cb38a28b16b37e822a42a31fd2fcd7cd2f498be3ed33f37400017414ea978abdf74959ce8027afc49b1c5cbef538cdeb8e75c3c31df7d2e2954aea66ae66261c684b6802430b4f19084d00a896f8cc8919716dfd8890f52d2335d28d823bbfe881a26d0611acd2811e4be48503681f74a4d7aa2f6bda8e369be7b8cfc8e850036c78d2704e87465fc7671adea9033abec1f14e314c76596eb1c95a4c198a3085d59a1a1ee5bd7dd1c8cb04c8f82730293af1dfff0d63f1e850636f9f83a9673ce99d472c1adf1f7d18e872034eab375cacdb0924b71379f9ddfdbf8ba41b7b4b8af4d801318d07871d98a33fdf7c8723d9860d8c61b8ea0b6e47e435ef57cd1f6838e1de058f1f432ec8b2b31906e6540c883190ce5aafd36bfc322606dfc5b05074b6056ecca597580351f9544e0cdbe9302feace3e7216c6a047b6e4907058279734c3046f67ad54eac76596080f9bd614e56e9156cbd78beea3af3058f60e2735f27d5fe312f3359ffaa26734cf9b6f01ee30b3745ef864857f10ac1895a702d61febffc44b5a4cdeb484998cf5d3a23014009e63577574dfcb0d6e2d3c2ec92197eae2c230d5bcff9d83f96d9305130de5a7255956578dff6bfc71e3ed4ab10f32dec959dffa90709ff6ebd24fc9f195340ea1c4367290fa27ff2495f469137c63bc955e06768d77c972334921e0eebb4655b50ae544af525c587e873a4025b36ecc6a3553c13f83c378715e69e67258f79b01ab16b20935bb02b2427e37a1fbf4533a31d5d7a754486142f61e640f3d323adda773ab2f2f7801bec586bbde08a98bfc7d092f3bf1af75f99d434fc620232d527e801daa3c36bf75ea40dbd378a0fc210fd9f6192e0e75ab08262657b219e0b1535713f5aab3e43af2f1c7e5c8d06e586239fa14c04375497a03241cc6993de2d1a6e0a5374463ebbfa85e1e0b32580bee7d60c3758762053bb6559f371f207ad8f0540a8f8d20bfb95614a88013f754f8db74a371846e65905891225c3e9db8578f7ae1483f67de3cd5bc42c3058296e823fddaaad9d0025f53b65b61adb033eeccb83fe8c4e2fd64cff77a09da2b1332dcae10b41b557fafb1753205b27b305c1ea425af224622d99b5384ba85127a20292f9b7c380aadea9f2b12ab1fab67b42ab3d466dfed7dbe42a958e83f64c8e52f9144d36f587e45e86041ec940b43e788777720279fcdc6bdab87a7ff29bc72c2aee55cef50c65b3f4d6405086e56d1e344f24c55145570b8779b0db788ad56eaaf1747a3083246cddbf814b39eadcb79ff9a5c772805b9d22bbb50899eac497ffacb6c9cdb6cfb5b7e720479c4afd7c5084e6724b8bbfb4add8b92b57f038dcc25f30432f5548f55c51596b1c76bb3f03ff923823187fb375b6841473d6203b2dc5996cdd8f3d40f78ec56c4a4e6ee5e98dda6b748fd3e8d1dd7f24b907264c489b8dd6cbe4f9069e2045fb10084698969ad7cb18c386df9628465e37cd40f56ae14c4a50e1972a28ce8b8c826d6b093b92ac27b5da0a253b2a77668b50a6e2ab82b9ed912379f9e31659e3ef46fad2adfe4a12ceedfb8860e13afb9ff4097a8c8fb3a9998fd36ad2f047f4300d5d324cce4a15ea2924492e148585843a02ca98a993bae980b74d5c8b4cd48952f21021adf8f4861cdb902ace4a2a0b01bb6fab5f04ad270c54808984cdf7ddb1d2d662936022b11c6acd72ff712019bd488cddf375cdccfc0e122a190a47367d35aa0c1cfa7e86ce746563a8ee5050929a5ad05003d98cbab8a205421027f290e08e457139efab9989c332e841fafcf92644e210d6508bd84b4942c55f713c66863b8cf1946fd2b77a5a41263185605f95fdd2cdb32eb161c91fe1bbec2039cd4648a38f6542c844aee2ee450ee3b5e0efaae6e6404937ebcf358af1455269ca4d7266aa0ef80d7760696193a3fca51264b5b3a94fff6ac9d912eb813c62be95b5f3ccd771e81bc71988931e98991be21fe03c0491cac0c8c326fa58c6804c0f7cbe07df178282b564e1d2db1f432107a5fb247ed4fe7c6a7b51a439879ade397a42e71d618e99f3782f48f404b083a4ddfdc4c862652f26d05f93b340081586cb7cdbf2b8c7132407958bdaf472c20bebd0ab70973af1bb3b5214f4f4284b2d4a3a4486277669e857eb6dba5aba02b728e03b0c3b07966b4f41ba633fde35ea7586d9c89311dc3b9ce921fbf0a7616533488acd44b3b51bacc6bbaa914dfc2b8ea9fd74f5d64721154ec675d060065a08640e4cec42c1f595a671a3a1492224d6d928b141c4c90bd49112fa260e599006960df480cadd067e0e89a79eb404fbaafb509b6458b2e1997f4b21df742fff9b10d51921d2c9a2e132572e9b2af686fb5b82e83c4794caee0e4171cf51e0e2f22830b1ccb8b5fcaf57f82ccefe8a1bea43f96e81a3dc77f2dc42df35178ee7b406c29ab6fb0e7d6e4b2f80f844cde0e72acc0ede4c8e53700e742938d432184164266fada247ca615420d8bf8dd5c41c0d8ea4751d57cd4b56106f1eff29f69cf58959234e82ce68d1702bb2386bd59d8b73ab3efc240128b2312b83498b7e77437a4f96501dea5db6f22c432724a71f4f65853bcb823981107faa0ae1e096765ef9f14e82910fd31a80e69dc2f0f6d84dd5482c97dc5bc8c88ec39eae425869b8fa0f01cd9d04552756627b5264dfdb9387a25453825760cf24cb3d0f139af97dc903ca25ba8bf18b3b3752193166484ea04a5bea176895cf775602511be631d231c3216433540068ff86c4391c2e5558c23fb9ca20166600eb9c297410fed1adfd396dfc6da58ade6d7f41e3bd34db80de4472d2c228060159c81a0426edc1133f5dc9af15517a6a574aa974e3bec659433df23057bcac343f301bd0957bcf408c6392e187c31eef8f97f9ed38a4397402ead7cd420afda1d584ec45dd49d35243d6005e12f460cc757133a8c056fb53463316a974258fe991f6af15330077cacffcc02d86bd8ba61563c2460f2ac0cae52167b86ae8eb30d4eb90908a19d7035a104fc2f31b9d732bbe91d498b7df43818d20ee0929fd77235719ecc7a8185660cc56097f2f1e2c69b609392aa234e6f2ceea0146dfcac7f10b97686339ca468b9c8d2defad0f1773289f2475e2cf5a837397fa7017e5236325851dc922b4635d530a96d09e24ffb87a502e6fbbfa2249518210de0714d6004cf371e34855a09a00173c75a36a5d2ff4f3109b123953fb6ba56e79f35fcbdc169c9a67d5d7071b0ff6a83d0704a4610e2ea5fc8fcfb8bf1e077f698a9f51cec4bf88c4fcab0c0ec9e5e63ab0461d32cdc9aa26b4749f5122229eb182f2d4e5ae5565c111bb11b2f3d56e73e589a0b2418474e94f1e066f351a17eac213ac052462fc3c9c105a14087ffa76c3ca6b6c97140c6627a54abe890c63c42bdddeaebf082d530ffb598317dd4ed866e0ffa3668e3e83d6f77deb9c97e842f04f8dc664a7e9cfa1013ed841417b0119ea5bae8ede885f3b87af8ea8246989a8659ddb11d6d18cdf9bb9598541250ec53f4b95ee77f9ed94c64c05a1a68cee316d59baf57973c95939b33603874c9cdf92400d525624d82b86f5faf5ea3ea50b72e1b322460f06cce47b172cdfe8c27a6c4f42a04fb8b8cd2ea946c4da16ce9317f0309a723f94ce2dbce21d0a7514f458fcd110b86ccda07d8950819ca80e30b1afe55cd1f097f7d7a3fd2ac137e02bfd5a1f9f233914976b0e5fa5243d2b2019b8e0de2219f0a89f9a6a022691db09b193440f119b9076102334fbd5c1f56475aff048dce1464979e920cee71f5834e8434fd257c8844e63319ca9b15164584072e6428bb13f0b91b77aabca1ea5de9654f198bab714907be6604ff9bc63fc4acf373f2f6892264ed1bfde7b1775172b815c6ce66f896c131d368a735a5efc4c52a2afcb3fa205fb27086bbb25bbfc6dc71fc42ea415fe302c821014ce1c67a7835b94bab96ea27212928823c9dbb412e60a4256bbf1c62777eeaf174ff0b79ddf64d7be18eb7d308bfc416baab4e392d07a90b8d1fb9ee0671e743de87c39ca5949d4829bb51351178977ce125b689de194d87d7d12c14bd31f92993b3b3ff7d960bc299b0efb9e760e464d61442fc48ab71f741ea9b0514ea86171801c7a6b8067f387e6984b721efd2ad200723b81b86dc9f303a5cad8db1b435d98a25b09ddf1a54828ea4f50162562183546ee08f2b47ac765005d0200fc84c3b4e0b97aab895484e75334ea8ffed03a60703e67b7564b3b958047710d6acc324f4352e5da30549a397f84b5a63513c94bb13febefc920ee4f169983e6c39043fe160b8a243bb7bdee55173d086dd39b25d806b346123a1d19f4e65200cab6e1ad724151ee07e123d39b9d7f80fd3fd41615300333bdecd19bbda1c9362da2de49ec123d4dc5e414822b3542267a95b0cab80e89c7bb9ff96ab74c194c0d73a6631dce4a4103eae7744a074c62ffef7b5bb5a78f4a79b074e2583da4d54ad86d1c045c200515295f18ecc76d435ba2e6968475674c911060458705c4d29089d2e04133eb67054fba8afb8"}]}}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000000c0)={0x1ff}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) 1m36.081687379s ago: executing program 3 (id=3069): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe7a7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5db}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc0aa}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendto$packet(r1, &(0x7f0000000400), 0x0, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) 1m35.724059621s ago: executing program 1 (id=3071): ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100)=[{0x80000000}], &(0x7f0000000140)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000380)={r0}) pipe(0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast1}], 0xb) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) syz_open_procfs(r1, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e2c, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xd473}, 0x0, {[0x2, 0x7, 0x3, 0x8001, 0xe10, 0xfffffffa, 0x3]}}, 0x5c) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') 1m34.046543143s ago: executing program 3 (id=3072): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x0, 0x148, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x8000000, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'xfrm0\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mknod(0x0, 0xc000, 0x86) 1m33.88123419s ago: executing program 3 (id=3073): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x1, 0x80000000, 0xffffffff, 0x4, 0x0, "bb8dd4a3c22327ea6c989b478823c28f3b642d", 0x5, 0x2}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100f6000002000000000200"/27], 0x24, 0x3) r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 1m33.863371267s ago: executing program 5 (id=3074): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe00, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1m33.61367938s ago: executing program 3 (id=3075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1100, 0xffeffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xa, 0x3, 0xf0ff}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m33.160813815s ago: executing program 3 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000001c0), 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000000)='/dev/fuse\x00', 0xc480, &(0x7f0000000180)={@align=0x7399, {0x7, 0x8d, 0x5, 0x100000001}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x1}, {[0x35, 0x3ff, 0x3]}, 0x6, 0x5, &(0x7f0000000340)=""/5}) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$tcp_mem(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) r8 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x348030e, 0x1) ioctl$BLKPG(r8, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x86, &(0x7f0000000640)={0x7fffffff, 0x0, 0x6}}) 1m32.771148896s ago: executing program 5 (id=3077): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) 1m32.128809786s ago: executing program 5 (id=3078): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x60000000, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) 1m31.965066073s ago: executing program 5 (id=3079): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000058500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000255e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) 1m29.510833802s ago: executing program 5 (id=3080): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x321}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x5) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870e000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={{0xa, 0x2, 0x8, 0x1, '\x00', 0x1}, 0x4, 0x3, 0x10001, 0x0, 0x5, 0x76e, 'syz0\x00', &(0x7f0000000540)=['&-{+&\\\x00', '\x00'/12, '\x00\x00\x00\xbd9\xf7\xf0\xcbb\xd8\xff\xf8\x10\xb3\xef\xc5\x94\x1b\xb0\xa0\xb4\xde\xe8\xa3*\x0e\xec*\f=\xd4\\%\x04V\xdf\xfe\x1c\xf0\a\xb2\xce^\xcb$\xf0\x9a\x81_\xcc\x13\x02s\x8e\xfa\xdf\x18\x1fw\x9dT\x9fR\xb99\xefi\xb34\x13\x9b&\xdfr\xca5W;\b\xa7\x04z', 'map_files\x00\xf4\xf6Si\xa9G\x82Q\xc6\"\xc8\xb9\xf1\xde\x9a\xd0\n\x90\xbf\xcd\x19\xa1\x92\xe0\xd4\xeb\xca\x13', ',\x00'], 0x8d}) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) 1m29.510487713s ago: executing program 3 (id=3081): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x58, 0x9, 0x2, 0x7}]}) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r0 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x6, @mcast2, 0xff}}, 0x9, 0x8, 0x7, 0x1, 0x3}, &(0x7f0000000400)=0x98) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000240)=@caif=@dbg={0x25, 0x18, 0x3b}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="0018a7ca1b6bff674a7ae2123c67e5f651e654914f0645a3dbbd3519869ff64a5352d1b34759278f343bf3f550a16c6454842f574e7f000000000000000aab262ca87af23a07ed34ce80d47d900467c89f74e9370b74b924d91e5e04ffe3fd734452e6e934299e001345eadf85f3394a8a562526ba2c4ea7a81a3f08221e3639d18647711d798b7ca845fc87a86d7f91de06da9ebe02ecf2c38189c44ea5587e9e8c2ad7c8754e08d47b14f464ebfd65b539ac5b426a", 0xb6}, {&(0x7f0000000500)="3da8c0a60831199d7c651df10204ce9dd280245b34fd0c100eede4033c5fd4e3eb8a9959e00dabf70539017ccf930f0a99c72dc71d8e3aa933a759c4a1f314521b129d45bae4da838c198b08674c5cb5db6b98dfc415597b8859215668b3afe9faad30d8da174991b87e5bd9e98004de0c92d61851d01d42fcf4b6331c5189d9b602ed85f8e07f855d1577835089a769", 0x90}, {&(0x7f0000000880)="35bac120116874dafb8708db21ef2b45af9ab327ee5807b746911e7c45513b9e150b15c49a1dbb2bbc001fa52ea7fdc7ed6463aafc5578f494bbffdcdbf71a2ab79c2c006afeadea179b108d7cd1e7499a27a5942878a264191450decd75631a4be744d252aca8d378f6ecf439332d63aade857c4bbc30d2350a2ae8e01377fef8d5798c553fd3d51c397825b4144a18c2068b0b0b8b4bf49886e896ba4fc41ddc9f33414cd1dab5ad77c6c2cc583a5acbeac56d0e4bdb18deab29e6305eb7fbcdca60f6df34f4e6305b002d92208fab87e6283c9c7221e95a576bbb1e81e52814723f", 0xe3}, {&(0x7f00000006c0)="caa2896980e3e017356a1a33d55d36ac15fccaee9ad6b1e444096acbd5f1850022707b18982c68e3352f4e9181dd5b1855f38fbb7c33f587c72c30924f91e10763ff458351d5ac344c1581a418ff18b6831838bfa8d3437bb641a41b5d1eef0e75fcde9917d8f124c678ad008d9348562d1c6d978669bdcd0e068d8cc947fbab897942c7", 0x84}], 0x4}, 0x20004052) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x100000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000200)=0x11, 0x13) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "d50727f8f7f3e2b2", "29f4ead384b9a0e8086f79268192c3ab", "05979924", "c148a4c794f3504a"}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 1m29.501959309s ago: executing program 1 (id=3082): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2743}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068986dd0300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x60c003, 0x18) chdir(&(0x7f0000000140)='./file0\x00') 1m29.45842242s ago: executing program 4 (id=3083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000046113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m29.400895065s ago: executing program 0 (id=2973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xe6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff2004d0600fe8000000000200000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5095"], 0x0) 1m28.094992476s ago: executing program 0 (id=3084): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001400)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x238, 0x8, 0xa6, 0x8, 0x20, 0xf9}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1m27.84970305s ago: executing program 5 (id=3085): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x80805, 0x0) 0s ago: executing program 33 (id=3084): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x40}}, './file0\x00'}) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001400)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x238, 0x8, 0xa6, 0x8, 0x20, 0xf9}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): 729.004573][ T30] audit: type=1400 audit(2000000683.399:770): avc: denied { write } for pid=15301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.041486][T15332] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 729.141746][T14959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.347419][T15352] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 729.369905][ T30] audit: type=1400 audit(2000000683.769:771): avc: denied { write } for pid=15344 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.528954][T14959] veth0_vlan: entered promiscuous mode [ 729.577764][ T7393] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 729.587493][T14959] veth1_vlan: entered promiscuous mode [ 729.673229][T14959] veth0_macvtap: entered promiscuous mode [ 729.684129][T14959] veth1_macvtap: entered promiscuous mode [ 729.711994][T14959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.741678][T14959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.796096][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.825066][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.865156][ T7393] usb 1-1: Using ep0 maxpacket: 32 [ 730.283443][ T7393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 730.303707][T15370] netlink: 'syz.4.2688': attribute type 1 has an invalid length. [ 730.324451][ T7393] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 730.326122][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.367322][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.378209][T15369] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 730.389733][T15369] overlayfs: missing 'lowerdir' [ 730.403766][ T7393] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 730.430811][ T7393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.458320][ T7393] usb 1-1: Product: syz [ 730.468701][ T7393] usb 1-1: Manufacturer: syz [ 730.474073][ T7393] usb 1-1: SerialNumber: syz [ 730.482094][ T7393] usb 1-1: config 0 descriptor?? [ 730.561997][T15349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.570794][T15380] loop8: detected capacity change from 0 to 8 [ 730.582405][T15370] bond4: entered promiscuous mode [ 730.604820][T15380] Dev loop8: unable to read RDB block 8 [ 730.611592][ T7393] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.612506][T15370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.629119][T15380] loop8: unable to read partition table [ 730.644355][T15380] loop8: partition table beyond EOD, truncated [ 730.672661][T15375] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 730.685885][ T30] audit: type=1400 audit(2000000685.089:772): avc: denied { write } for pid=15357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.690449][T15380] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 730.797209][T15375] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 730.812185][T15375] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 730.831365][ T7390] usb 1-1: USB disconnect, device number 87 [ 730.871623][ T30] audit: type=1400 audit(2000000685.269:773): avc: denied { read } for pid=15379 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 730.933355][ T30] audit: type=1400 audit(2000000685.289:774): avc: denied { write } for pid=15379 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 730.999294][ T30] audit: type=1400 audit(2000000685.289:775): avc: denied { nlmsg_write } for pid=15379 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 731.056126][ T30] audit: type=1400 audit(2000000685.319:776): avc: denied { search } for pid=15390 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.160875][ T30] audit: type=1400 audit(2000000685.329:777): avc: denied { search } for pid=15390 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.233826][ T30] audit: type=1400 audit(2000000685.329:778): avc: denied { search } for pid=15390 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.257060][T15397] loop8: detected capacity change from 0 to 7 [ 731.257642][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.277716][T15397] Dev loop8: unable to read RDB block 7 [ 731.287540][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.301282][T15397] loop8: unable to read partition table [ 731.324416][ T30] audit: type=1400 audit(2000000685.329:779): avc: denied { getattr } for pid=15390 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=11375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 731.335199][T15397] loop8: partition table beyond EOD, [ 731.367905][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.386014][ T30] audit: type=1400 audit(2000000685.329:780): avc: denied { write } for pid=15390 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.409021][T15397] truncated [ 731.415055][T15397] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 731.417612][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.642074][T15411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2695'. [ 732.301117][T15412] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2696'. [ 733.672878][T15438] qrtr: Invalid version 0 [ 734.046453][T15441] Device name cannot be null; rc = [-22] [ 734.407955][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 734.407971][ T30] audit: type=1400 audit(2000000688.809:843): avc: denied { create } for pid=15452 comm="syz.2.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 734.532026][ T30] audit: type=1400 audit(2000000688.839:844): avc: denied { execmem } for pid=15448 comm="syz.4.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 734.666740][ T30] audit: type=1400 audit(2000000688.929:845): avc: denied { create } for pid=15452 comm="syz.2.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.749633][ T30] audit: type=1400 audit(2000000688.959:846): avc: denied { write } for pid=15452 comm="syz.2.2704" name="ip_tables_names" dev="proc" ino=4026533299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 734.799042][T15464] input: syz0 as /devices/virtual/input/input57 [ 734.884752][ T30] audit: type=1400 audit(2000000688.969:847): avc: denied { ioctl } for pid=15452 comm="syz.2.2704" path="socket:[52900]" dev="sockfs" ino=52900 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 734.929514][T15472] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2707'. [ 735.096498][T15474] netlink: 'syz.0.2708': attribute type 11 has an invalid length. [ 735.100246][ T30] audit: type=1400 audit(2000000688.989:848): avc: denied { read } for pid=15459 comm="syz.0.2705" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 735.416561][T15477] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2711'. [ 735.686436][ T30] audit: type=1400 audit(2000000688.999:849): avc: denied { open } for pid=15459 comm="syz.0.2705" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 735.765318][ T30] audit: type=1400 audit(2000000688.999:850): avc: denied { ioctl } for pid=15459 comm="syz.0.2705" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 735.941539][ T30] audit: type=1400 audit(2000000689.129:851): avc: denied { read write } for pid=15463 comm="syz.2.2707" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 736.919005][T15488] qrtr: Invalid version 0 [ 736.963416][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 737.174637][T11112] Bluetooth: hci3: command 0x0c1a tx timeout [ 737.254144][T15495] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 737.280823][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 737.289029][ T30] audit: type=1400 audit(2000000689.129:852): avc: denied { open } for pid=15463 comm="syz.2.2707" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 737.406092][T14154] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 737.586757][T14154] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 737.595173][T14154] usb 3-1: config 1 has no interface number 0 [ 737.631463][T14154] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.755151][T14154] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 737.765220][T14154] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 737.785819][T14154] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 737.796778][T14154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.804826][T14154] usb 3-1: Product: syz [ 737.809772][T14154] usb 3-1: Manufacturer: syz [ 737.814427][T14154] usb 3-1: SerialNumber: syz [ 738.296501][T15490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 738.335993][T15490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 738.369645][T14154] usb 3-1: Expected 3 endpoints, found: 1 [ 738.972327][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.991653][T15526] syzkaller0: entered promiscuous mode [ 739.005264][T15526] syzkaller0: entered allmulticast mode [ 739.018682][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.195117][T15392] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 739.355079][T15392] usb 4-1: Using ep0 maxpacket: 32 [ 739.367801][T15392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 739.461300][T15392] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 739.794446][T15392] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 739.811531][T15392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.821993][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 739.822012][ T30] audit: type=1400 audit(2000000694.219:883): avc: denied { write } for pid=15543 comm="syz.4.2727" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 739.853114][T15392] usb 4-1: Product: syz [ 739.858232][T15392] usb 4-1: Manufacturer: syz [ 739.863119][T15392] usb 4-1: SerialNumber: syz [ 739.870420][T15392] usb 4-1: config 0 descriptor?? [ 739.877429][T15524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 739.889371][T15392] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.971024][ T30] audit: type=1400 audit(2000000694.369:884): avc: denied { create } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.129571][ T30] audit: type=1400 audit(2000000694.369:885): avc: denied { write } for pid=15541 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.189877][ T804] usb 4-1: USB disconnect, device number 87 [ 740.196981][T15392] usb 3-1: USB disconnect, device number 65 [ 740.292572][ T30] audit: type=1400 audit(2000000694.389:886): avc: denied { bind } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.325908][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 740.433156][ T30] audit: type=1400 audit(2000000694.389:887): avc: denied { setopt } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.454471][ T30] audit: type=1400 audit(2000000694.389:888): avc: denied { accept } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.474987][ T30] audit: type=1400 audit(2000000694.399:889): avc: denied { ioctl } for pid=15543 comm="syz.4.2727" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54310 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 740.581667][T15559] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 740.923974][ T30] audit: type=1400 audit(2000000694.399:890): avc: denied { write } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.943880][ T30] audit: type=1400 audit(2000000694.399:891): avc: denied { read } for pid=15539 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 740.967668][ T30] audit: type=1400 audit(2000000694.689:892): avc: denied { read } for pid=15550 comm="syz.2.2729" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 741.095036][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 741.135672][ T24] usb 1-1: config 0 has no interfaces? [ 741.246986][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.264525][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.342714][ T24] usb 1-1: Manufacturer: syz [ 741.351110][T15566] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 741.405397][ T24] usb 1-1: config 0 descriptor?? [ 741.704355][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.710959][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.891415][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 741.900434][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 741.910063][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 741.919082][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2733'. [ 742.192102][ T804] usb 1-1: USB disconnect, device number 88 [ 743.070634][T15599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 743.195114][T15392] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 743.350078][T15392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.378070][T15392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.430814][T15392] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 743.470213][T15392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.530242][T15392] usb 2-1: config 0 descriptor?? [ 743.677309][T15610] input: syz0 as /devices/virtual/input/input58 [ 743.959175][T15616] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 743.979367][T15392] stadia 0003:18D1:9400.001F: unbalanced delimiter at end of report description [ 744.004075][T15616] bond3: entered promiscuous mode [ 744.009182][T15616] bond3: entered allmulticast mode [ 744.014536][T15616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.030397][T15616] bridge6: entered promiscuous mode [ 744.035765][T15616] bridge6: entered allmulticast mode [ 744.041400][T15616] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 744.054856][ T53] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 744.064129][T15616] bridge7: entered promiscuous mode [ 744.070386][T15616] bridge7: entered allmulticast mode [ 744.076171][T15616] bond3: (slave bridge7): Enslaving as a backup interface with a down link [ 744.090459][T15616] bridge8: entered promiscuous mode [ 744.095970][T15616] bridge8: entered allmulticast mode [ 744.101800][T15616] bond3: (slave bridge8): Enslaving as a backup interface with a down link [ 744.149437][T15392] stadia 0003:18D1:9400.001F: parse failed [ 744.228442][ T53] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 744.286211][T15392] stadia 0003:18D1:9400.001F: probe with driver stadia failed with error -22 [ 744.805302][T15392] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 744.903256][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 744.903276][ T30] audit: type=1400 audit(2000000699.299:913): avc: denied { create } for pid=15629 comm="syz.4.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 745.079947][ T24] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 745.249887][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.274146][ T24] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 745.309113][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.328772][ T24] usb 4-1: Product: syz [ 745.341458][ T24] usb 4-1: Manufacturer: syz [ 745.354779][ T24] usb 4-1: SerialNumber: syz [ 745.382765][ T24] usb 4-1: config 0 descriptor?? [ 745.537761][T15392] usb 3-1: unable to get BOS descriptor or descriptor too short [ 745.540470][ T24] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 745.797774][T15392] usb 3-1: not running at top speed; connect to a high speed hub [ 745.816791][T15392] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 745.830012][T15392] usb 3-1: config 1 interface 0 has no altsetting 0 [ 745.838652][T15392] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.849734][T15392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.853244][ T30] audit: type=1400 audit(2000000700.229:914): avc: denied { ioctl } for pid=15635 comm="syz.0.2749" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 745.858464][T15392] usb 3-1: Product: у [ 745.888100][T15392] usb 3-1: Manufacturer: 벚隿ᕚ힔ê²å–±à¿³äžµè§·ì—«è¯¸â´§å†¨å€„䀗懟쓉젚㛮á穢뾬앾爔隮墕ⴿ쮷쟸ꯀ๪ìšá›™è‰’悌뺀Ҭꑘ㙧蹢ᄻ頳ä¦å¯®ì«­ç¬§ì†·èŠ¤è°±çŸá½ç¨¶å¿³ìˆ½æ·›è‹¨Ú½ë˜žÃªèŸ­æ£­êŒ‰ç¼ï»´âŒçŽ¨Ú‰âŸ›ïžˆê–¬ã ‡ä†½ì†‹è—½ì’â·° [ 745.908771][T15634] syzkaller0: entered promiscuous mode [ 745.913048][T15392] usb 3-1: SerialNumber: á [ 745.929839][T15625] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 745.938559][ T24] usb 2-1: USB disconnect, device number 88 [ 746.102583][T15634] syzkaller0: entered allmulticast mode [ 746.132285][ T30] audit: type=1400 audit(2000000700.229:915): avc: denied { set_context_mgr } for pid=15635 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 746.133370][T15642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2751'. [ 746.288662][T15392] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 746.343140][ T30] audit: type=1400 audit(2000000700.239:916): avc: denied { map } for pid=15635 comm="syz.0.2749" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 746.370264][T15392] usb 3-1: USB disconnect, device number 66 [ 746.383495][ T30] audit: type=1400 audit(2000000700.239:917): avc: denied { call } for pid=15635 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 746.419873][ T30] audit: type=1400 audit(2000000700.289:918): avc: denied { ioctl } for pid=15628 comm="syz.3.2748" path="socket:[55309]" dev="sockfs" ino=55309 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 746.545269][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 746.572274][ T30] audit: type=1400 audit(2000000700.669:919): avc: denied { mount } for pid=15637 comm="syz.0.2750" name="/" dev="configfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 746.607156][ T24] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 746.737598][T15648] nbd: socks must be embedded in a SOCK_ITEM attr [ 747.093023][T15653] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2753'. [ 747.219571][ T7409] usb 4-1: USB disconnect, device number 88 [ 747.549968][T15498] udevd[15498]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 747.640783][ T5807] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 747.707259][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 747.715298][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 747.728779][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.783173][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 747.795562][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 747.811592][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 747.819652][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 747.835988][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.855119][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.032342][T15498] udevd[15498]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 748.094097][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 748.101971][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 748.113485][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.126276][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.142739][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 748.155208][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.176734][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.189055][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.203986][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 748.216939][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.229879][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 748.242418][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 748.250727][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.262276][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.274885][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.295648][ T24] usb 2-1: string descriptor 0 read error: -22 [ 748.302229][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 748.330172][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.351774][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 748.451499][ T30] audit: type=1400 audit(2000000702.779:920): avc: denied { create } for pid=15659 comm="syz.0.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 748.451758][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 748.484994][ T5807] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 748.499487][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.555171][ T5807] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.555278][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 748.555355][ T5807] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 748.803299][ T5807] usb 5-1: string descriptor 0 read error: -22 [ 748.822012][ T5807] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 748.852789][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.864661][ T30] audit: type=1400 audit(2000000702.909:921): avc: denied { read } for pid=15666 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 748.901082][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 748.929497][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 748.941311][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 748.951947][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 748.969531][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 749.014658][T11112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 749.022160][T11112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 749.023148][ T30] audit: type=1400 audit(2000000702.919:922): avc: denied { open } for pid=15666 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 749.030039][ T5807] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 749.060724][T11112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 749.069825][T11112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 749.079616][T11112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 749.090453][T15670] netlink: 'syz.1.2751': attribute type 12 has an invalid length. [ 749.882582][T15646] netlink: 'syz.4.2752': attribute type 12 has an invalid length. [ 749.946693][ T7409] usb 5-1: USB disconnect, device number 104 [ 750.442341][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 750.442358][ T30] audit: type=1400 audit(2000000704.839:925): avc: denied { create } for pid=15688 comm="syz.0.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 750.551027][T15693] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 750.621120][ T30] audit: type=1400 audit(2000000705.019:926): avc: denied { execute } for pid=15691 comm="syz.4.2760" path=2F6D656D66643A76A6F56C6A362C72AFE8102FEC67EDE36880B821793677DADDB90A52E84099B98A0F5A09908B701084DCE286748ABAC6FBD20CEF26ADA84DE808B023AC29811E8A0C1144E36C875C1548647E5C1195F8E6A7C3BC182B92924E07A77F4E9B4CF8EB517302F9AD698F0FFF026E9D85EA1A2A1B49D81CE89B5953251D1086A00BEAD989DAA75764A445758C736DA12ED1B2491AB2FD419816CA8379F91AE706680776A8D8CEC81CAF8EA1EF61B12FEE313DBF4DEA770CA2871C281A2DEBFB56EB34D4435DC77B74F9D560495A0348D986E1324E1FD87BF57A40E0202864656C6574656429 dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 750.767058][ T30] audit: type=1400 audit(2000000705.139:927): avc: denied { create } for pid=15688 comm="syz.0.2759" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 750.864363][ T30] audit: type=1400 audit(2000000705.139:928): avc: denied { write } for pid=15688 comm="syz.0.2759" name="file0" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 750.953094][ T30] audit: type=1400 audit(2000000705.139:929): avc: denied { open } for pid=15688 comm="syz.0.2759" path="/562/file0" dev="tmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 751.013201][ T30] audit: type=1400 audit(2000000705.349:930): avc: denied { ioctl } for pid=15701 comm="syz.4.2762" path="socket:[55386]" dev="sockfs" ino=55386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.071522][ T30] audit: type=1400 audit(2000000705.389:931): avc: denied { map } for pid=15701 comm="syz.4.2762" path="/proc/1687/maps" dev="proc" ino=55388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 751.135661][T11112] Bluetooth: hci5: command tx timeout [ 751.141407][ T30] audit: type=1400 audit(2000000705.389:932): avc: denied { execute } for pid=15701 comm="syz.4.2762" path="/proc/1687/maps" dev="proc" ino=55388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 751.151159][T15709] trusted_key: encrypted_key: insufficient parameters specified [ 751.196372][ T30] audit: type=1400 audit(2000000705.519:933): avc: denied { getopt } for pid=15707 comm="syz.4.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 751.244003][T15666] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.251316][ T30] audit: type=1400 audit(2000000705.529:934): avc: denied { create } for pid=15707 comm="syz.4.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 751.273955][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.290112][T15666] bridge_slave_0: entered allmulticast mode [ 751.314448][T15666] bridge_slave_0: entered promiscuous mode [ 751.332270][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.387578][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.415664][T15666] bridge_slave_1: entered allmulticast mode [ 751.430305][T15666] bridge_slave_1: entered promiscuous mode [ 751.444329][T15721] syz_tun: entered allmulticast mode [ 751.567094][T15666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.585806][T15666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.157699][ T5727] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 752.248753][T15666] team0: Port device team_slave_0 added [ 752.256761][T14154] usb 2-1: USB disconnect, device number 89 [ 752.345234][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 752.379779][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 752.418251][ T5727] usb 5-1: config 0 has no interface number 0 [ 752.450589][T15666] team0: Port device team_slave_1 added [ 752.461281][ T5727] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 752.589059][ T5727] usb 5-1: config 0 interface 1 has no altsetting 0 [ 752.842174][T15666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.849428][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.853139][ T5727] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 752.928710][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.946528][T15666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.967889][ T5727] usb 5-1: Product: syz [ 752.979183][ T5727] usb 5-1: Manufacturer: syz [ 752.998060][ T5727] usb 5-1: SerialNumber: syz [ 753.006426][ T5727] usb 5-1: config 0 descriptor?? [ 753.020359][T15666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.028564][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.055174][T15666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.137681][T15666] hsr_slave_0: entered promiscuous mode [ 753.144283][T15666] hsr_slave_1: entered promiscuous mode [ 753.150594][T15666] debugfs: 'hsr0' already exists in 'hsr' [ 753.160058][T15666] Cannot create hsr debugfs directory [ 753.233739][T11112] Bluetooth: hci5: command tx timeout [ 753.261481][ T5727] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 753.287741][ T5727] cx231xx 5-1:0.1: Failed to read PCB config [ 753.294117][ T5727] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 753.320172][ T5727] usb 5-1: USB disconnect, device number 105 [ 753.825925][T15753] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 753.835007][T15752] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2775'. [ 753.865065][T14154] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 753.986403][T15761] trusted_key: encrypted_key: insufficient parameters specified [ 754.465132][T14154] usb 5-1: device descriptor read/64, error -71 [ 754.715183][T14154] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 754.869095][T14154] usb 5-1: device descriptor read/64, error -71 [ 754.891677][T15777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2779'. [ 754.985448][T14154] usb usb5-port1: attempt power cycle [ 755.150735][T15784] input: syz0 as /devices/virtual/input/input59 [ 755.201874][T15666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 755.205116][T15392] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 755.234613][T15666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.252218][T15666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 755.301885][T15666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.312414][T11112] Bluetooth: hci5: command tx timeout [ 755.322447][T15784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2781'. [ 755.337129][T15666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 755.633450][T15392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 755.650116][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 755.676995][T15666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.701648][T15666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 755.711011][T15392] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.742004][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 755.763857][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 755.788763][T15666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.799034][T15392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 755.935034][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 755.961445][T15392] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.976430][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 755.998135][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.012584][T15392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 756.020886][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 756.083975][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 756.084015][ T30] audit: type=1400 audit(2000000710.439:946): avc: denied { write } for pid=15791 comm="syz.1.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.084191][ T30] audit: type=1400 audit(2000000710.439:947): avc: denied { connect } for pid=15791 comm="syz.1.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.084314][ T30] audit: type=1400 audit(2000000710.439:948): avc: denied { name_connect } for pid=15791 comm="syz.1.2783" dest=64004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 756.084437][ T30] audit: type=1400 audit(2000000710.469:949): avc: denied { shutdown } for pid=15791 comm="syz.1.2783" lport=37084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 756.410680][T15392] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.482035][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 756.497839][T15392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 756.519278][T15804] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 756.528573][T15804] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 756.539631][T15804] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 756.552770][ T30] audit: type=1400 audit(2000000710.939:950): avc: denied { firmware_load } for pid=15791 comm="syz.1.2783" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 756.590495][T15392] usb 3-1: string descriptor 0 read error: -22 [ 756.607902][T15392] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 756.617321][T15392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.720107][T15392] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 756.870309][T15666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.901423][T15666] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.353398][ T5807] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 757.367942][ T5807] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 757.380034][T11112] Bluetooth: hci5: command 0x0419 tx timeout [ 757.403507][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.410868][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.458449][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.465708][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.504448][T15813] netlink: 'syz.2.2779': attribute type 12 has an invalid length. [ 757.882897][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2788'. [ 757.900628][T15821] 9p: Bad value for 'wfdno' [ 757.921999][T15821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.085228][T15392] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 758.258417][T15392] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 758.270303][T15392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.288974][T15392] usb 2-1: Product: syz [ 758.300562][T15392] usb 2-1: Manufacturer: syz [ 758.312193][T15392] usb 2-1: SerialNumber: syz [ 758.755549][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 758.773445][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 758.778079][T15666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.821544][ T30] audit: type=1400 audit(2000000713.219:951): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 758.841617][T15666] veth0_vlan: entered promiscuous mode [ 758.847025][T15666] veth1_vlan: entered promiscuous mode [ 758.897039][T15666] veth0_macvtap: entered promiscuous mode [ 758.923006][T15666] veth1_macvtap: entered promiscuous mode [ 758.944600][T15666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.037516][T15666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.074186][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.091692][T15836] input: syz0 as /devices/virtual/input/input60 [ 759.098580][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.115883][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.135353][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.191532][T15838] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2791'. [ 759.245394][ T5807] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 759.372800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.391854][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.476136][ T5807] usb 5-1: config index 0 descriptor too short (expected 26975, got 36) [ 759.493976][ T5807] usb 5-1: config 58 has too many interfaces: 100, using maximum allowed: 32 [ 759.528987][ T5807] usb 5-1: config 58 has an invalid descriptor of length 54, skipping remainder of the config [ 759.542030][ T5807] usb 5-1: config 58 has 0 interfaces, different from the descriptor's value: 100 [ 759.552941][ T5807] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 759.592962][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.691242][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.760679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.925065][ T7409] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 760.011611][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 760.045083][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 760.053878][ T5807] usb 5-1: string descriptor 0 read error: -71 [ 760.085214][ T5807] usb 5-1: USB disconnect, device number 109 [ 760.095123][ T7409] usb 1-1: Using ep0 maxpacket: 16 [ 760.112682][T15847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.133150][ T7409] usb 1-1: config 0 has no interfaces? [ 760.143058][ T7409] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 760.158870][ T7409] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 760.168321][T15847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.182924][ T7409] usb 1-1: Manufacturer: syz [ 760.199867][ T7409] usb 1-1: config 0 descriptor?? [ 760.606049][ T5807] usb 1-1: USB disconnect, device number 89 [ 760.657672][ T7409] usb 3-1: USB disconnect, device number 67 [ 761.214499][ T30] audit: type=1400 audit(2000000715.519:952): avc: denied { watch watch_reads } for pid=15819 comm="syz.1.2789" path="/15/file1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 761.271606][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 761.557436][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 761.586369][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 761.596301][T15392] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 761.616661][T15392] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 761.641870][T15392] usb 2-1: USB disconnect, device number 90 [ 761.661842][ T30] audit: type=1400 audit(2000000716.049:953): avc: denied { mounton } for pid=15859 comm="syz.0.2796" path="/575/file0" dev="tmpfs" ino=3063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 761.879081][ T30] audit: type=1400 audit(2000000716.129:954): avc: denied { ioctl } for pid=15862 comm="syz.4.2797" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 762.114873][ T30] audit: type=1400 audit(2000000716.189:955): avc: denied { read write } for pid=15862 comm="syz.4.2797" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 762.223031][ T30] audit: type=1400 audit(2000000716.189:956): avc: denied { open } for pid=15862 comm="syz.4.2797" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 762.256806][ T30] audit: type=1400 audit(2000000716.569:957): avc: denied { relabelfrom } for pid=15859 comm="syz.0.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 762.276989][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 762.299483][T15874] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.2799'. [ 762.309246][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2796'. [ 762.326286][ T30] audit: type=1400 audit(2000000716.569:958): avc: denied { relabelto } for pid=15859 comm="syz.0.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 762.389220][ T30] audit: type=1400 audit(2000000716.759:959): avc: denied { setopt } for pid=15875 comm="syz.2.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 762.494316][ T30] audit: type=1400 audit(2000000716.759:960): avc: denied { read } for pid=15875 comm="syz.2.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 762.532351][ T30] audit: type=1400 audit(2000000717.884:961): avc: denied { create } for pid=15880 comm="syz.3.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 764.142421][T15876] syzkaller0: entered promiscuous mode [ 764.162832][T15876] syzkaller0: entered allmulticast mode [ 764.231767][T15898] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2804'. [ 764.504068][T15899] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 765.085064][T14154] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 765.246188][T14154] usb 1-1: Using ep0 maxpacket: 16 [ 765.258166][T14154] usb 1-1: config 0 has no interfaces? [ 765.266527][T14154] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 765.295089][T14154] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 765.312110][T14154] usb 1-1: Manufacturer: syz [ 765.339679][T14154] usb 1-1: config 0 descriptor?? [ 765.445086][ T7409] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 765.512810][T15788] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 765.737801][T15788] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 765.737874][T15788] usb 2-1: config 0 has an invalid interface number: 212 but max is 62 [ 765.737906][T15788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 765.737934][T15788] usb 2-1: config 0 has no interface number 0 [ 765.827275][T15788] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 765.863967][T15788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.898930][T15788] usb 2-1: Product: syz [ 765.922966][T15788] usb 2-1: Manufacturer: syz [ 765.957266][T15788] usb 2-1: SerialNumber: syz [ 766.020960][T15788] usb 2-1: config 0 descriptor?? [ 766.106104][T15788] ftdi_sio 2-1:0.212: FTDI USB Serial Device converter detected [ 766.171610][T15788] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 766.286153][T15392] usb 2-1: USB disconnect, device number 91 [ 766.299028][T15392] ftdi_sio 2-1:0.212: device disconnected [ 766.491607][ T7409] usb 5-1: Using ep0 maxpacket: 32 [ 766.727944][ T7409] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.742834][ T7409] usb 5-1: config 0 has no interface number 0 [ 766.749555][ T7409] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.765835][ T7409] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.776272][ T7409] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 766.785740][ T7409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.796985][ T7409] usb 5-1: config 0 descriptor?? [ 766.818965][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 766.818986][ T30] audit: type=1400 audit(2000000722.214:974): avc: denied { map } for pid=15934 comm="syz.2.2815" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 766.860447][ T5727] usb 1-1: USB disconnect, device number 90 [ 766.878871][ T30] audit: type=1400 audit(2000000722.264:975): avc: denied { execute } for pid=15934 comm="syz.2.2815" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 767.045559][ T30] audit: type=1400 audit(2000000722.424:976): avc: denied { read } for pid=15914 comm="syz.4.2809" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 767.151188][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.249280][ T30] audit: type=1400 audit(2000000722.424:977): avc: denied { open } for pid=15914 comm="syz.4.2809" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 767.401268][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.532419][ T30] audit: type=1400 audit(2000000722.434:978): avc: denied { ioctl } for pid=15914 comm="syz.4.2809" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 768.783634][ T30] audit: type=1400 audit(2000000723.534:979): avc: denied { bind } for pid=15944 comm="syz.3.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 769.187860][T15788] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 769.286775][T15940] qrtr: Invalid version 0 [ 769.352154][ T30] audit: type=1400 audit(2000000723.534:980): avc: denied { connect } for pid=15944 comm="syz.3.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 769.408942][T15788] usb 1-1: device descriptor read/64, error -71 [ 769.437846][ T30] audit: type=1400 audit(2000000723.544:981): avc: denied { setopt } for pid=15944 comm="syz.3.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 769.501219][ T7409] usbhid 5-1:0.1: can't add hid device: -71 [ 769.516438][ T7409] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 769.560170][ T7409] usb 5-1: USB disconnect, device number 110 [ 769.594280][ T30] audit: type=1400 audit(2000000724.984:982): avc: denied { ioctl } for pid=15958 comm="syz.1.2822" path="socket:[56681]" dev="sockfs" ino=56681 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.708903][T15960] vlan1: entered allmulticast mode [ 769.715018][T15788] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 769.734061][ T30] audit: type=1400 audit(2000000725.124:983): avc: denied { bind } for pid=15961 comm="syz.4.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.806454][T15960] veth0_vlan: entered allmulticast mode [ 769.834648][T15959] vlan1: entered promiscuous mode [ 769.860002][T15959] binder: 15958:15959 ioctl c018620c 200000000240 returned -1 [ 769.881973][T15788] usb 1-1: device descriptor read/64, error -71 [ 770.901161][T15788] usb usb1-port1: attempt power cycle [ 771.200187][T15958] vlan1: left promiscuous mode [ 771.210810][T15958] vlan1: left allmulticast mode [ 771.217634][T15958] veth0_vlan: left allmulticast mode [ 771.719528][T15788] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 771.745505][T15788] usb 1-1: device descriptor read/8, error -71 [ 772.005020][ T5727] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 772.251809][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.251917][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.272383][ T5727] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 772.272483][ T5727] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 772.272570][ T5727] usb 2-1: Manufacturer: syz [ 772.365531][ T5807] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 772.386027][ T5727] usb 2-1: config 0 descriptor?? [ 772.505370][ T5807] usb 4-1: device descriptor read/64, error -71 [ 772.845032][T15788] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 772.866349][ T5807] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 772.950319][T15788] usb 1-1: Using ep0 maxpacket: 16 [ 772.956415][T15995] input: syz0 as /devices/virtual/input/input62 [ 772.979983][T15788] usb 1-1: config 0 has no interfaces? [ 772.993620][T15788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 773.006110][T15788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 773.051616][T15788] usb 1-1: Manufacturer: syz [ 773.057110][ T5807] usb 4-1: device descriptor read/64, error -71 [ 773.071970][T15788] usb 1-1: config 0 descriptor?? [ 773.110080][T15997] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2834'. [ 773.165228][ T5807] usb usb4-port1: attempt power cycle [ 773.847238][T16006] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2835'. [ 773.854102][ T5727] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0020/input/input63 [ 773.878317][T16004] ceph: No mds server is up or the cluster is laggy [ 773.889273][ T804] libceph: connect (1)[c::]:6789 error -101 [ 773.930095][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 773.945234][ T5807] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 774.059388][ T5807] usb 4-1: device descriptor read/8, error -71 [ 774.206511][T15979] overlay: ./file0 is not a directory [ 774.310444][ T5727] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0020/input/input64 [ 774.355170][ T5727] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0020/input/input65 [ 774.487818][ T5807] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 774.512374][ T5727] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0020/input/input66 [ 774.525234][ T5807] usb 4-1: device descriptor read/8, error -71 [ 774.548138][ T5727] uclogic 0003:256C:006D.0020: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 774.636618][ T5807] usb usb4-port1: unable to enumerate USB device [ 774.655693][ T5727] usb 2-1: USB disconnect, device number 92 [ 774.839813][T16013] fido_id[16013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 775.193756][T16021] comedi comedi1: pcl818: I/O base address or length out of range [ 775.653550][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2840'. [ 775.675019][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 775.711346][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 775.711365][ T30] audit: type=1400 audit(2000000731.104:989): avc: denied { bind } for pid=16022 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.906616][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 775.928834][ T804] usb 1-1: USB disconnect, device number 94 [ 775.940152][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 775.961979][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.007371][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.035477][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 776.073242][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 776.105528][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.132158][ T24] usb 5-1: config 0 descriptor?? [ 776.151370][ T30] audit: type=1400 audit(2000000731.544:990): avc: denied { connect } for pid=16029 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.198183][ T30] audit: type=1400 audit(2000000731.574:991): avc: denied { read } for pid=16029 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.313244][T16033] input: syz0 as /devices/virtual/input/input67 [ 776.328504][T16033] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2844'. [ 776.345065][ T5727] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 776.485440][ T5727] usb 2-1: device descriptor read/64, error -71 [ 776.783044][ T5727] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 776.956054][ T5727] usb 2-1: device descriptor read/64, error -71 [ 777.779413][ T5727] usb usb2-port1: attempt power cycle [ 777.907795][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0021/input/input68 [ 778.235553][ T5727] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 778.287996][ T5727] usb 2-1: device descriptor read/8, error -71 [ 778.383060][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0021/input/input69 [ 778.492598][ T30] audit: type=1400 audit(2000000733.874:992): avc: denied { watch watch_reads } for pid=16038 comm="syz.2.2846" path="/592/control" dev="tmpfs" ino=3140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 778.565040][ T5727] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 778.607602][ T5727] usb 2-1: device descriptor read/8, error -71 [ 778.636213][ T24] kye 0003:0458:5013.0021: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 778.728714][ T5727] usb usb2-port1: unable to enumerate USB device [ 778.741606][ T24] usb 5-1: USB disconnect, device number 111 [ 778.768796][ T30] audit: type=1400 audit(2000000734.164:993): avc: denied { create } for pid=16044 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 778.891433][ T30] audit: type=1400 audit(2000000734.184:994): avc: denied { create } for pid=16053 comm="syz.0.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 779.122753][T16051] fido_id[16051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 779.128844][T16060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2850'. [ 779.323328][ T30] audit: type=1400 audit(2000000734.194:995): avc: denied { read } for pid=16044 comm="syz.3.2848" path="socket:[57697]" dev="sockfs" ino=57697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 779.418564][ T30] audit: type=1400 audit(2000000734.484:996): avc: denied { setattr } for pid=16053 comm="syz.0.2850" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 779.509377][ T30] audit: type=1400 audit(2000000734.514:997): avc: denied { write } for pid=16053 comm="syz.0.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 779.533173][T16067] erspan0: entered promiscuous mode [ 779.560576][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 779.631760][ T30] audit: type=1400 audit(2000000735.024:998): avc: denied { create } for pid=16068 comm="syz.3.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 779.745063][ T7409] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 779.917153][ T7409] usb 1-1: unable to get BOS descriptor or descriptor too short [ 779.941979][ T7409] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 779.965136][T14154] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 779.974593][ T7409] usb 1-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 779.984495][ T7409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.993093][ T7409] usb 1-1: Product: syz [ 779.995322][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 779.997920][ T7409] usb 1-1: Manufacturer: syz [ 780.010305][ T7409] usb 1-1: SerialNumber: syz [ 780.022279][T16075] x_tables: duplicate underflow at hook 1 [ 780.028864][T16075] tipc: Enabling of bearer rejected, failed to enable media [ 780.070205][T16077] comedi comedi4: bad chanlist[0]=0xffff7fff chan=32767 range length=1 [ 780.145031][T14154] usb 2-1: Using ep0 maxpacket: 8 [ 780.153497][T14154] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 780.154972][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 780.163045][T14154] usb 2-1: config 179 has no interface number 0 [ 780.169383][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 780.173842][T14154] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 780.185704][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.193806][T14154] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 780.205206][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.215481][T14154] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 780.225728][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.236878][T14154] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 780.259459][T14154] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 780.273723][T16054] bond0: Error: Cannot enslave bond to itself. [ 780.280342][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.295710][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.299454][T14154] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 780.305333][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.328540][T14154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.340343][ T7409] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 780.443961][T16073] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 780.511793][ T7409] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 780.554242][ T7409] usb 1-1: USB disconnect, device number 95 [ 780.854539][T16084] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2857'. [ 780.940713][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.028522][T14154] usb 5-1: USB disconnect, device number 112 [ 781.249729][ T7409] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input70 [ 781.648354][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 781.648384][ T30] audit: type=1400 audit(2000000737.044:1002): avc: denied { write } for pid=16087 comm="syz.4.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 781.674878][T16088] raw_sendmsg: syz.4.2859 forgot to set AF_INET. Fix it! [ 781.874346][T16090] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2860'. [ 782.225238][T14154] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 782.561626][T16098] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 782.593158][T14154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.632504][T14154] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 782.660384][ T804] usb 2-1: USB disconnect, device number 97 [ 782.660461][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 782.674977][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 782.684367][T14154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.693275][T14154] usb 4-1: Product: syz [ 782.700229][T14154] usb 4-1: Manufacturer: syz [ 782.705719][T14154] usb 4-1: SerialNumber: syz [ 782.724408][T14154] usb 4-1: config 0 descriptor?? [ 782.758651][T14154] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 782.948481][T14154] usb 4-1: USB disconnect, device number 93 [ 783.254234][T16104] Bluetooth: MGMT ver 1.23 [ 783.294598][T16104] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 783.695402][ T804] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 783.836365][ T804] usb 1-1: device descriptor read/64, error -71 [ 783.945272][T14154] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 784.105180][ T804] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 784.185109][T14154] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 784.206002][T14154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.235068][T14154] usb 2-1: Product: syz [ 784.241351][T14154] usb 2-1: Manufacturer: syz [ 784.245515][ T804] usb 1-1: device descriptor read/64, error -71 [ 784.250358][T14154] usb 2-1: SerialNumber: syz [ 784.277357][T14154] usb 2-1: config 0 descriptor?? [ 784.365464][ T804] usb usb1-port1: attempt power cycle [ 784.498076][ T7409] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 784.689937][ T7409] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 784.702552][ T7409] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 784.714424][ T804] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 784.714725][ T7409] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 784.734041][ T7409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.747371][ T804] usb 1-1: device descriptor read/8, error -71 [ 784.748258][T16113] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 784.933236][T16120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2868'. [ 784.986040][ T804] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 785.013565][ T7409] usb 4-1: string descriptor 0 read error: -71 [ 785.026495][ T804] usb 1-1: device descriptor read/8, error -71 [ 785.043951][ T7409] hub 4-1:32.0: USB hub found [ 785.063139][ T7409] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 785.146546][ T804] usb usb1-port1: unable to enumerate USB device [ 785.237416][ T7409] usb 4-1: USB disconnect, device number 94 [ 785.305054][ T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 785.322027][T14154] usb 2-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 785.478009][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 785.487247][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 785.501292][ T24] usb 5-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 785.510967][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.520039][ T24] usb 5-1: Product: syz [ 785.525937][ T24] usb 5-1: Manufacturer: syz [ 785.530665][ T24] usb 5-1: SerialNumber: syz [ 785.733644][T14154] usb 2-1: f81604_read: reg: 200e failed: -EPROTO [ 785.757481][T16116] bond0: Error: Cannot enslave bond to itself. [ 785.766562][T14154] usb 2-1: USB disconnect, device number 98 [ 785.806360][ T30] audit: type=1400 audit(2000000741.204:1003): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 785.807332][T14154] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 785.944774][ T5272] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 785.978851][T14154] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 786.210353][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2870'. [ 786.385299][T16129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16129 comm=syz.3.2870 [ 786.420944][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 786.573438][ T30] audit: type=1400 audit(2000000741.964:1004): avc: denied { write } for pid=16131 comm="syz.3.2872" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 786.678988][T16135] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 786.702751][ T30] audit: type=1400 audit(2000000742.094:1005): avc: denied { write } for pid=16131 comm="syz.3.2872" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 787.595048][T16143] netlink: 'syz.1.2875': attribute type 10 has an invalid length. [ 787.886883][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 788.057159][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 788.138495][ T24] usb 5-1: USB disconnect, device number 113 [ 788.216411][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.935104][ T7409] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 790.135830][ T7409] usb 2-1: device descriptor read/64, error -71 [ 790.382242][T16152] qrtr: Invalid version 0 [ 790.565258][ T7409] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 790.736547][ T7409] usb 2-1: device descriptor read/64, error -71 [ 790.911074][ T7409] usb usb2-port1: attempt power cycle [ 791.393637][ T30] audit: type=1400 audit(2000000746.784:1006): avc: denied { ioctl } for pid=16181 comm="syz.3.2887" path="socket:[58102]" dev="sockfs" ino=58102 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 791.482341][T16187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2888'. [ 791.492097][ T7409] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 791.515729][ T7409] usb 2-1: device descriptor read/8, error -71 [ 791.689188][T16193] hugetlbfs: syz.3.2887 (16193): Using mlock ulimits for SHM_HUGETLB is obsolete [ 791.787582][ T7409] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 791.842921][ T7409] usb 2-1: device descriptor read/8, error -71 [ 791.865481][T15392] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 791.968224][ T7409] usb usb2-port1: unable to enumerate USB device [ 792.087796][T15392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.103196][T15392] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 792.119564][T15392] usb 1-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 792.129436][T15392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.138670][T15392] usb 1-1: Product: syz [ 792.143456][T15392] usb 1-1: Manufacturer: syz [ 792.148513][T15392] usb 1-1: SerialNumber: syz [ 792.366175][T16184] bond0: Error: Cannot enslave bond to itself. [ 792.387064][T15392] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 792.517162][T15392] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 792.596164][T16201] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2891'. [ 792.649788][T15392] usb 1-1: USB disconnect, device number 100 [ 792.943171][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.694673][T16206] input: syz0 as /devices/virtual/input/input71 [ 793.749418][T16206] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2892'. [ 794.630876][ T30] audit: type=1400 audit(2000000749.984:1007): avc: denied { accept } for pid=16222 comm="syz.3.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 794.652762][T16216] Cannot find del_set index 1 as target [ 794.656407][ T30] audit: type=1800 audit(2000000749.984:1008): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2900" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 794.678128][T16216] overlayfs: missing 'lowerdir' [ 794.680819][ T30] audit: type=1400 audit(2000000750.064:1009): avc: denied { create } for pid=16214 comm="syz.4.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 794.715069][ T30] audit: type=1400 audit(2000000750.064:1010): avc: denied { write } for pid=16214 comm="syz.4.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 794.735907][ T30] audit: type=1400 audit(2000000750.094:1011): avc: denied { unlink } for pid=16221 comm="syz.0.2899" name="#3d" dev="tmpfs" ino=3158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 794.771262][ T30] audit: type=1400 audit(2000000750.124:1012): avc: denied { getopt } for pid=16214 comm="syz.4.2896" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 794.783155][T16228] overlay: Unknown parameter 'smackfsdef' [ 794.811342][ T30] audit: type=1400 audit(2000000750.134:1013): avc: denied { mount } for pid=16221 comm="syz.0.2899" name="/" dev="overlay" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 794.868795][T16232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2897'. [ 795.181860][T15392] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 795.571980][T15392] usb 2-1: unable to get BOS descriptor or descriptor too short [ 795.599648][T15392] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 795.626122][T15392] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 795.637404][T15392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.645710][T15392] usb 2-1: Product: syz [ 795.651525][T15392] usb 2-1: Manufacturer: syz [ 795.661489][T15392] usb 2-1: SerialNumber: syz [ 796.538834][T16215] bond0: Error: Cannot enslave bond to itself. [ 796.710557][T15392] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 797.219661][T16258] loop8: detected capacity change from 0 to 7 [ 797.248603][T15392] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 797.268479][T16258] Dev loop8: unable to read RDB block 7 [ 797.302540][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.310230][T16258] loop8: unable to read partition table [ 797.325871][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.338562][T15392] usb 2-1: USB disconnect, device number 103 [ 797.352171][T16258] loop8: partition table beyond EOD, truncated [ 797.361307][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.388243][T16258] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 797.409080][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.480714][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.515293][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.595584][T11112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.603209][T11112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.611074][T11112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.630236][T11112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.638077][T11112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.702163][T11112] Bluetooth: hci0: command tx timeout [ 800.837814][T16299] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 801.094129][T16305] Bluetooth: MGMT ver 1.23 [ 801.397102][T16310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2920'. [ 801.677307][T14153] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 801.752532][T16317] netlink: 'syz.3.2922': attribute type 4 has an invalid length. [ 801.760452][T16317] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2922'. [ 801.793800][T11112] Bluetooth: hci0: command tx timeout [ 801.907695][T16320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 802.356555][ T24] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 802.663108][ T24] usb 1-1: no configurations [ 802.682687][ T24] usb 1-1: can't read configurations, error -22 [ 802.874145][ T24] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 802.886685][T14153] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 802.904814][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 802.916632][T14153] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 802.928844][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 802.940455][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 802.953030][T14153] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 802.960775][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 802.971617][T14153] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 802.984192][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 802.995454][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 803.011124][T14153] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 803.026493][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 803.054998][T14153] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.067147][ T24] usb 1-1: no configurations [ 803.073234][ T24] usb 1-1: can't read configurations, error -22 [ 803.073283][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 803.080400][ T24] usb usb1-port1: attempt power cycle [ 803.090792][T14153] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 803.093348][T14153] usb 2-1: string descriptor 0 read error: -22 [ 803.139455][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.146188][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.198012][T14153] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 803.272071][T14153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.465581][ T24] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 803.616571][ T24] usb 1-1: no configurations [ 803.621677][ T24] usb 1-1: can't read configurations, error -22 [ 803.661791][T14153] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 803.800046][ T24] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 803.846513][ T24] usb 1-1: no configurations [ 803.846621][ T24] usb 1-1: can't read configurations, error -22 [ 803.847491][ T24] usb usb1-port1: unable to enumerate USB device [ 803.890728][T11112] Bluetooth: hci0: command tx timeout [ 803.904040][T16260] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.904427][T16260] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.905717][T16260] bridge_slave_0: entered allmulticast mode [ 804.048706][T16260] bridge_slave_0: entered promiscuous mode [ 804.158926][T16260] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.191314][T16260] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.206657][T16260] bridge_slave_1: entered allmulticast mode [ 804.308883][T16260] bridge_slave_1: entered promiscuous mode [ 804.456448][T16334] netlink: 'syz.1.2920': attribute type 12 has an invalid length. [ 804.612618][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2926'. [ 804.626413][T16339] 9p: Bad value for 'wfdno' [ 804.645535][T16339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.816725][T16260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.854407][T16260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.188908][T14153] usb 2-1: USB disconnect, device number 104 [ 805.211048][T16260] team0: Port device team_slave_0 added [ 805.227694][T16260] team0: Port device team_slave_1 added [ 805.234515][T16341] input: syz0 as /devices/virtual/input/input72 [ 805.432017][T16343] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2927'. [ 805.509684][T16260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.598984][T16260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.955276][T11112] Bluetooth: hci0: command tx timeout [ 806.376922][T16260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.433097][T16260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.444987][T16260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.471314][T16260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.801826][T16260] hsr_slave_0: entered promiscuous mode [ 806.809286][ T30] audit: type=1400 audit(2000000762.204:1014): avc: denied { mount } for pid=16355 comm="syz.1.2931" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 806.818312][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 806.835360][T16260] hsr_slave_1: entered promiscuous mode [ 806.849944][T16260] debugfs: 'hsr0' already exists in 'hsr' [ 806.855890][T16260] Cannot create hsr debugfs directory [ 806.863620][ T30] audit: type=1400 audit(2000000762.204:1015): avc: denied { read } for pid=16355 comm="syz.1.2931" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 806.929700][ T30] audit: type=1400 audit(2000000762.204:1016): avc: denied { open } for pid=16355 comm="syz.1.2931" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 806.995504][ T30] audit: type=1400 audit(2000000762.204:1017): avc: denied { ioctl } for pid=16355 comm="syz.1.2931" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 807.022671][ T30] audit: type=1400 audit(2000000762.324:1018): avc: denied { unmount } for pid=14959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 807.299828][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 807.323314][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 807.584110][T16345] qrtr: Invalid version 0 [ 808.398683][T16370] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 808.466158][T16374] input: syz0 as /devices/virtual/input/input73 [ 808.545156][ T7389] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 808.593753][T16374] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2935'. [ 808.719494][T16260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 808.760156][ T7389] usb 1-1: Using ep0 maxpacket: 16 [ 808.790013][ T7389] usb 1-1: config 0 has no interfaces? [ 808.816981][ T7389] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 808.846845][ T7389] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 808.847659][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.178060][T16260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.184979][ T7389] usb 1-1: Manufacturer: syz [ 809.207073][ T7389] usb 1-1: config 0 descriptor?? [ 809.242446][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.308012][T16260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.343855][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.368840][T16260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 809.412954][T16260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.917480][T16260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.955867][T16392] x_tables: ip6_tables: string.1 match: invalid size 160 (kernel) != (user) 200 [ 810.404653][T16260] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.452965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.460179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.514533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.521863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.786612][T16394] syzkaller0: entered promiscuous mode [ 810.847830][T16394] syzkaller0: entered allmulticast mode [ 810.850239][ T7389] usb 1-1: USB disconnect, device number 105 [ 810.886904][T16260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 811.440889][ T30] audit: type=1400 audit(2000000766.834:1019): avc: denied { block_suspend } for pid=16398 comm="syz.1.2941" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 811.545055][ T7409] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 811.715161][ T7409] usb 5-1: Using ep0 maxpacket: 16 [ 811.752070][ T7409] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.779921][ T7409] usb 5-1: config 0 has no interfaces? [ 811.822873][ T7409] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 811.843041][ T7409] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 811.864637][ T7409] usb 5-1: Manufacturer: syz [ 811.898641][ T7409] usb 5-1: config 0 descriptor?? [ 813.057658][T16419] qrtr: Invalid version 0 [ 817.571559][T16445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2949'. [ 817.591901][T16445] 9p: Bad value for 'wfdno' [ 817.620332][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.370078][T16260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.400129][ T7409] usb 5-1: USB disconnect, device number 114 [ 818.784705][T16459] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2952'. [ 821.131139][T16474] qrtr: Invalid version 0 [ 821.610764][T16260] veth0_vlan: entered promiscuous mode [ 821.650957][T16260] veth1_vlan: entered promiscuous mode [ 821.665190][ T804] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 821.750351][T16481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2957'. [ 821.791828][T16260] veth0_macvtap: entered promiscuous mode [ 821.803102][ T30] audit: type=1400 audit(2000000777.204:1020): avc: denied { setopt } for pid=16480 comm="syz.1.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 821.828700][T16260] veth1_macvtap: entered promiscuous mode [ 821.846628][ T804] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 821.855406][ T804] usb 4-1: config 0 has no interface number 0 [ 821.873982][T16260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.906359][ T804] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 821.909990][T16260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.953266][ T804] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 821.974048][ T6179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.989610][ T6179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.002427][ T804] usb 4-1: config 0 interface 153 has no altsetting 0 [ 822.032023][ T804] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 822.042272][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.050983][ T804] usb 4-1: Product: syz [ 822.055731][ T804] usb 4-1: Manufacturer: syz [ 822.060407][ T804] usb 4-1: SerialNumber: syz [ 822.119214][ T804] usb 4-1: config 0 descriptor?? [ 822.137184][ T804] sierra 4-1:0.153: Sierra USB modem converter detected [ 822.249623][ T6179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.429793][ T6179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.752757][ T804] usb 4-1: USB disconnect, device number 95 [ 822.770185][ T804] sierra 4-1:0.153: device disconnected [ 822.920055][T16496] macvtap0: entered allmulticast mode [ 822.968135][T16496] veth0_macvtap: entered allmulticast mode [ 823.428383][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.465972][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.240697][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.284105][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.594115][T16516] netlink: 2120 bytes leftover after parsing attributes in process `syz.3.2963'. [ 825.400186][T16524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2968'. [ 826.491617][T16525] qrtr: Invalid version 0 [ 826.657194][ T7409] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 827.087770][ T7409] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 827.158028][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 827.191140][ T7409] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 827.227094][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 827.272164][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 827.286896][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 827.315103][ T7409] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 827.331127][T16538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2904'. [ 827.344439][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 827.385665][ T7409] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 827.438770][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 827.505192][T14154] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 827.517031][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 827.633875][ T7409] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 827.649614][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 827.660595][ T7409] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 827.695627][T14154] usb 1-1: Using ep0 maxpacket: 16 [ 827.702731][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 827.724872][T14154] usb 1-1: config 0 has no interfaces? [ 827.738610][T14154] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 827.749292][ T7409] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 827.767172][T14154] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 827.791161][ T7409] usb 4-1: string descriptor 0 read error: -22 [ 827.802470][T14154] usb 1-1: Manufacturer: syz [ 827.809075][ T7409] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 827.833960][T14154] usb 1-1: config 0 descriptor?? [ 827.845851][ T7409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.875081][T15392] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 827.902250][ T7409] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 828.036317][ T30] audit: type=1400 audit(2000000783.434:1021): avc: denied { append } for pid=16546 comm="syz.4.2972" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.065298][T15392] usb 2-1: Using ep0 maxpacket: 32 [ 828.075445][T15392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.095376][T15392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.162954][T15392] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 828.192328][T16547] can0: slcan on ptm0. [ 828.208684][T15392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.222223][T15392] usb 2-1: config 0 descriptor?? [ 828.243965][T15392] hub 2-1:0.0: USB hub found [ 828.441446][T16552] netlink: 'syz.3.2968': attribute type 12 has an invalid length. [ 828.453362][T15392] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 828.540138][ T30] audit: type=1400 audit(2000000783.934:1022): avc: denied { setopt } for pid=16546 comm="syz.4.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 828.778213][ T804] usb 1-1: USB disconnect, device number 106 [ 829.133139][T15392] hid-generic 0003:046D:C31C.0022: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 829.220528][T15392] usb 2-1: USB disconnect, device number 105 [ 829.334079][T16563] fido_id[16563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 829.367975][ T30] audit: type=1400 audit(2000000784.754:1023): avc: denied { write } for pid=16553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.601723][ T5748] usb 4-1: USB disconnect, device number 96 [ 829.788922][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 829.874578][ T30] audit: type=1400 audit(2000000785.264:1024): avc: denied { write } for pid=16567 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.328283][T16578] netlink: 'syz.5.2977': attribute type 10 has an invalid length. [ 831.226391][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 831.229372][T16573] input input74: cannot allocate more than FF_MAX_EFFECTS effects [ 831.253958][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 831.280002][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 831.296997][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 831.313605][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 831.515104][T16546] can0 (unregistered): slcan off ptm0. [ 831.769562][T16595] input: syz0 as /devices/virtual/input/input75 [ 831.825265][T16599] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2981'. [ 832.447827][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 833.030736][ T30] audit: type=1400 audit(2000000788.424:1025): avc: denied { write } for pid=16592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.173146][ T30] audit: type=1400 audit(2000000788.564:1026): avc: denied { write } for pid=16632 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.545172][ T5609] Bluetooth: hci6: command tx timeout [ 833.709085][T16648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2986'. [ 833.846085][ T30] audit: type=1400 audit(2000000789.244:1027): avc: denied { write } for pid=16634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.031011][ T30] audit: type=1400 audit(2000000789.424:1028): avc: denied { write } for pid=16655 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.175381][ T5748] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 834.181749][ T5748] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 834.471242][ T804] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 834.475262][T14154] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 834.667249][T14154] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 834.676900][T14154] usb 2-1: config 0 has no interface number 0 [ 834.677041][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 834.705891][T14154] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 834.734935][ T804] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 834.750354][T16669] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2989'. [ 834.753465][ T804] usb 4-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 834.768651][T14154] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.772002][T14154] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 834.805426][T14154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.816441][T14154] usb 2-1: Product: syz [ 834.824173][T14154] usb 2-1: Manufacturer: syz [ 834.830279][T14154] usb 2-1: SerialNumber: syz [ 835.004951][T14154] usb 2-1: config 0 descriptor?? [ 835.009989][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.023243][T16628] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 835.075187][ T804] usb 4-1: Product: syz [ 835.084744][T14154] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 835.092314][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.113647][ T804] usb 4-1: Manufacturer: syz [ 835.147125][ T804] usb 4-1: SerialNumber: syz [ 835.175973][T14154] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 835.196945][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.213927][T16583] bridge_slave_0: entered allmulticast mode [ 835.242873][T16583] bridge_slave_0: entered promiscuous mode [ 835.265729][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.285922][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.303861][T16583] bridge_slave_1: entered allmulticast mode [ 835.331026][T16583] bridge_slave_1: entered promiscuous mode [ 835.426395][T16642] bond0: Error: Cannot enslave bond to itself. [ 835.444111][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.482355][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.500260][ T804] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 835.547957][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.575417][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.605794][T16583] team0: Port device team_slave_0 added [ 835.621831][T14154] usb 2-1: USB disconnect, device number 106 [ 835.627607][T16583] team0: Port device team_slave_1 added [ 835.643610][T14154] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 835.650558][ T804] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 835.676620][T14154] cyberjack 2-1:0.69: device disconnected [ 835.771377][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.787663][ T804] usb 4-1: USB disconnect, device number 97 [ 835.802472][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.841238][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.847333][T16679] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 835.877908][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.901322][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.923608][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.953250][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.128865][ T30] audit: type=1400 audit(2000000791.524:1029): avc: denied { write } for pid=16684 comm="syz.4.2997" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 836.162234][T16583] hsr_slave_0: entered promiscuous mode [ 836.171148][T16583] hsr_slave_1: entered promiscuous mode [ 836.188344][T16583] debugfs: 'hsr0' already exists in 'hsr' [ 836.194462][T16583] Cannot create hsr debugfs directory [ 837.765292][T16710] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3002'. [ 837.795413][ T804] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 838.518240][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 838.551102][ T804] usb 2-1: config 0 has no interfaces? [ 838.623555][ T804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 838.661659][ T804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 838.694129][ T804] usb 2-1: Manufacturer: syz [ 838.718251][ T804] usb 2-1: config 0 descriptor?? [ 838.835008][ T30] audit: type=1400 audit(2000000794.224:1030): avc: denied { read write } for pid=16715 comm="syz.5.3004" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 838.873120][T15392] hid-generic 0000:0000:0000.0023: item fetching failed at offset 0/44 [ 838.926590][ T30] audit: type=1400 audit(2000000794.224:1031): avc: denied { open } for pid=16715 comm="syz.5.3004" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 839.058581][T15392] hid-generic 0000:0000:0000.0023: probe with driver hid-generic failed with error -22 [ 839.407102][T16725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3005'. [ 839.423617][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 839.716272][ T5727] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 839.897555][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 839.955672][ T5727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 839.989428][ T5727] usb 4-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 840.005472][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.028646][ T5727] usb 4-1: Product: syz [ 840.046756][ T5727] usb 4-1: Manufacturer: syz [ 840.065286][ T5727] usb 4-1: SerialNumber: syz [ 840.407465][ T30] audit: type=1400 audit(2000000795.794:1032): avc: denied { mount } for pid=16740 comm="syz.5.3008" name="/" dev="autofs" ino=60882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 840.436213][T16733] syzkaller0: entered promiscuous mode [ 840.444171][T16733] syzkaller0: entered allmulticast mode [ 840.496207][ T30] audit: type=1400 audit(2000000795.894:1033): avc: denied { map } for pid=16740 comm="syz.5.3008" path="socket:[60884]" dev="sockfs" ino=60884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 840.527386][T16718] bond0: Error: Cannot enslave bond to itself. [ 842.107539][ T5727] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 842.263457][ T5727] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 842.284409][ T5727] usb 4-1: USB disconnect, device number 98 [ 842.332642][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.496640][ T30] audit: type=1400 audit(2000000797.874:1034): avc: denied { cmd } for pid=16746 comm="syz.3.3011" path="socket:[61904]" dev="sockfs" ino=61904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 842.535866][ T30] audit: type=1326 audit(2000000797.934:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16746 comm="syz.3.3011" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc621b9cdd9 code=0x0 [ 844.842445][T16743] ipvlan2: entered allmulticast mode [ 844.847939][T16743] syz_tun: entered allmulticast mode [ 845.142059][ T30] audit: type=1400 audit(2000000800.524:1036): avc: denied { bind } for pid=16752 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 845.245174][ T30] audit: type=1400 audit(2000000800.524:1037): avc: denied { node_bind } for pid=16752 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 845.409968][ T30] audit: type=1400 audit(2000000800.594:1038): avc: denied { map } for pid=16755 comm="syz.3.3014" path="socket:[61984]" dev="sockfs" ino=61984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 845.462013][ T5748] usb 2-1: USB disconnect, device number 107 [ 846.080989][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 846.121720][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.381629][ T5748] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 846.595231][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 846.627939][ T5748] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 846.649593][ T5748] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.702449][ T5748] usb 5-1: config 0 has no interface number 0 [ 846.756356][ T5748] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 846.806410][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.839122][T16583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 846.846183][ T5748] usb 5-1: Product: syz [ 846.853683][ T5748] usb 5-1: Manufacturer: syz [ 846.876302][ T5748] usb 5-1: SerialNumber: syz [ 846.900655][ T5748] usb 5-1: config 0 descriptor?? [ 846.917479][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.953364][T16583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.960913][ T5748] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 846.977780][ T5748] uvcvideo 5-1:0.105: No valid video chain found. [ 847.026927][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.058509][T16583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 847.093554][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 847.192211][T16583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 847.248214][ T5748] usb 5-1: USB disconnect, device number 115 [ 847.256655][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 847.469162][T16792] syzkaller0: entered promiscuous mode [ 847.492364][T16792] syzkaller0: entered allmulticast mode [ 848.175106][ T5748] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 848.371061][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 848.383067][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9105, setting to 1024 [ 848.411585][ T5748] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.425443][ T5748] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.434629][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.472589][ T5748] usb 5-1: config 0 descriptor?? [ 849.190620][ T30] audit: type=1400 audit(2000000804.114:1039): avc: denied { kexec_image_load } for pid=16807 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 849.467349][ T5748] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 849.486542][ T5748] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 849.502864][ T5748] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 849.521268][ T5748] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 849.541525][ T5748] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 849.569046][ T5748] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 849.640481][ T5748] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 850.244208][ T5748] usb 5-1: USB disconnect, device number 116 [ 850.529072][T16819] netlink: 'syz.5.3023': attribute type 1 has an invalid length. [ 850.839109][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3024'. [ 850.842786][ T30] audit: type=1400 audit(2000000806.234:1040): avc: denied { nlmsg_read } for pid=16821 comm="syz.4.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 850.934550][T16824] 9p: Bad value for 'wfdno' [ 851.140276][ T30] audit: type=1400 audit(2000000806.544:1041): avc: denied { map } for pid=16823 comm="syz.4.3025" path="socket:[62179]" dev="sockfs" ino=62179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 851.175552][ T30] audit: type=1400 audit(2000000806.544:1042): avc: denied { read accept } for pid=16823 comm="syz.4.3025" path="socket:[62179]" dev="sockfs" ino=62179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 852.273357][ T30] audit: type=1400 audit(2000000807.644:1043): avc: denied { read write } for pid=16828 comm="syz.4.3027" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 852.317129][ T30] audit: type=1400 audit(2000000807.644:1044): avc: denied { open } for pid=16828 comm="syz.4.3027" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 852.341506][ T30] audit: type=1400 audit(2000000807.644:1045): avc: denied { map } for pid=16828 comm="syz.4.3027" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 852.367993][ T30] audit: type=1400 audit(2000000807.644:1046): avc: denied { execute } for pid=16828 comm="syz.4.3027" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 852.770009][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3027'. [ 854.409395][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.605189][T16840] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3028'. [ 854.825021][ T7409] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 855.025542][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.201855][ T7409] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 855.207349][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.218202][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.285390][T15665] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.292662][T15665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.319897][ T7409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.357656][ T7409] usb 2-1: config 0 descriptor?? [ 855.378800][ T7409] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 855.400217][ T30] audit: type=1326 audit(2000000810.794:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.4.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37279cdd9 code=0x7ffc0000 [ 855.443733][ T30] audit: type=1326 audit(2000000810.794:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.4.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37279cdd9 code=0x7ffc0000 [ 855.486370][T16583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.502726][T16583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.556557][ T30] audit: type=1326 audit(2000000810.854:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.4.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc37279cdd9 code=0x7ffc0000 [ 855.705988][T16849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3031'. [ 855.963640][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 855.963660][ T30] audit: type=1326 audit(2000000811.354:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.4.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37279cdd9 code=0x7ffc0000 [ 855.963707][ T30] audit: type=1326 audit(2000000811.354:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.4.3031" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37279cdd9 code=0x7ffc0000 [ 856.763795][ T30] audit: type=1400 audit(2000000812.144:1098): avc: denied { write } for pid=16861 comm="syz.5.3034" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 856.797678][ T7409] gp8psk: usb in 128 operation failed. [ 856.821130][ T7409] gp8psk: usb in 137 operation failed. [ 856.829240][ T30] audit: type=1400 audit(2000000812.144:1099): avc: denied { open } for pid=16861 comm="syz.5.3034" path="/20/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 856.854026][ T7409] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.864567][ T7409] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 856.874094][ T7409] usb 2-1: media controller created [ 856.903873][ T30] audit: type=1400 audit(2000000812.144:1100): avc: denied { ioctl } for pid=16861 comm="syz.5.3034" path="/20/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 856.934638][ T7409] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.050512][ T30] audit: type=1400 audit(2000000812.444:1101): avc: denied { write } for pid=16867 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 857.088406][ T7409] gp8psk_fe: Frontend attached [ 857.099401][ T7409] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 857.122946][ T7409] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 857.138781][ T30] audit: type=1400 audit(2000000812.514:1102): avc: denied { listen } for pid=16867 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 857.215605][ T30] audit: type=1400 audit(2000000812.564:1103): avc: denied { accept } for pid=16867 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 857.282386][ T7409] gp8psk: usb in 138 operation failed. [ 857.292539][T16874] binder: 16873:16874 ioctl c0306201 200000000080 returned -14 [ 857.306201][ T7409] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 857.327075][T16874] binder: 16873:16874 ioctl c0306201 2000000003c0 returned -14 [ 857.340944][ T7409] gp8psk: found Genpix USB device pID = 203 (hex) [ 857.380876][ T7409] usb 2-1: USB disconnect, device number 108 [ 857.926264][T16884] netlink: 'syz.4.3038': attribute type 4 has an invalid length. [ 857.934135][T16884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3038'. [ 858.428575][T16882] syzkaller0: entered promiscuous mode [ 858.457247][T16882] syzkaller0: entered allmulticast mode [ 858.525589][ T7409] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 858.553895][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.160635][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3040'. [ 864.169711][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3040'. [ 864.179939][T16907] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3044'. [ 864.609398][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.701501][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.864378][T16583] veth0_vlan: entered promiscuous mode [ 864.937609][T16583] veth1_vlan: entered promiscuous mode [ 865.422256][T16583] veth0_macvtap: entered promiscuous mode [ 865.433466][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3051'. [ 865.475210][T16583] veth1_macvtap: entered promiscuous mode [ 866.581682][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.062930][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.248212][ T586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.272670][ T586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.328955][ T586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.374110][ T586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.501116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.560434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.887505][T16973] syzkaller0: entered promiscuous mode [ 868.913567][T16973] syzkaller0: entered allmulticast mode [ 868.957667][T15665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.984499][T15665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.389969][ T7409] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 869.398739][T16994] binder: 16993:16994 ioctl c0306201 0 returned -14 [ 869.582981][ T7409] usb 4-1: config 253 has too many interfaces: 251, using maximum allowed: 32 [ 869.602581][ T7409] usb 4-1: config 253 has 1 interface, different from the descriptor's value: 251 [ 869.621305][ T7409] usb 4-1: config 253 has no interface number 0 [ 869.672148][ T7409] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 869.714326][ T7409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.743172][ T7409] usb 4-1: Product: syz [ 869.759591][ T7409] usb 4-1: Manufacturer: syz [ 869.800154][ T7409] usb 4-1: SerialNumber: syz [ 869.898160][ T7409] ftdi_sio 4-1:253.212: FTDI USB Serial Device converter detected [ 869.929803][ T7409] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 870.211380][ T7409] usb 4-1: USB disconnect, device number 99 [ 870.250025][ T7409] ftdi_sio 4-1:253.212: device disconnected [ 870.490903][T17001] qrtr: Invalid version 0 [ 873.197556][T17018] xt_l2tp: v2 tid > 0xffff: 134217728 [ 873.882208][T17027] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 873.891178][T17027] overlayfs: missing 'lowerdir' [ 874.365059][ T30] audit: type=1400 audit(2000000829.754:1104): avc: denied { ioctl } for pid=17028 comm="syz.3.3076" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 875.128193][T17036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3078'. [ 877.547350][T17038] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3079'. [ 879.296678][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 879.766486][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 883.029768][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 886.347044][T17062] netlink: 'syz.4.3083': attribute type 13 has an invalid length. [ 890.644889][ C1] sched: DL replenish lagged too much [ 893.505031][T17062] netlink: 'syz.4.3083': attribute type 12 has an invalid length. [ 926.455226][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.467948][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.474846][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 988.481862][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17061/1:b..l [ 988.490940][ C1] rcu: (detected by 1, t=10503 jiffies, g=108581, q=1760 ncpus=2) [ 988.498932][ C1] task:syz.5.3085 state:R running task stack:27128 pid:17061 tgid:17061 ppid:16260 task_flags:0x400040 flags:0x00080002 [ 988.514295][ C1] Call Trace: [ 988.517611][ C1] [ 988.520568][ C1] __schedule+0x10e9/0x6820 [ 988.525120][ C1] ? __pfx___schedule+0x10/0x10 [ 988.529988][ C1] ? do_raw_spin_lock+0x128/0x260 [ 988.535047][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 988.540454][ C1] preempt_schedule_common+0x42/0xc0 [ 988.545888][ C1] preempt_schedule_thunk+0x16/0x30 [ 988.551133][ C1] ? nl80211_netlink_notify+0x2fd/0x970 [ 988.556728][ C1] __local_bh_enable_ip+0xff/0x120 [ 988.561908][ C1] nl80211_netlink_notify+0x2fd/0x970 [ 988.567459][ C1] notifier_call_chain+0x99/0x400 [ 988.572617][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 988.578363][ C1] netlink_release+0x167a/0x2030 [ 988.583350][ C1] ? netlink_release+0x1e0/0x2030 [ 988.588405][ C1] ? __pfx_netlink_release+0x10/0x10 [ 988.593707][ C1] ? __pfx_locks_remove_file+0x10/0x10 [ 988.599203][ C1] __sock_release+0xb3/0x260 [ 988.603858][ C1] ? __pfx_sock_close+0x10/0x10 [ 988.608754][ C1] sock_close+0x1c/0x30 [ 988.612921][ C1] __fput+0x3ff/0xb50 [ 988.617107][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.622351][ C1] task_work_run+0x150/0x240 [ 988.626978][ C1] ? __pfx_task_work_run+0x10/0x10 [ 988.632119][ C1] ? rcu_is_watching+0x12/0xc0 [ 988.636935][ C1] exit_to_user_mode_loop+0x100/0x4a0 [ 988.642359][ C1] ? do_syscall_64+0x52d/0xf80 [ 988.647156][ C1] do_syscall_64+0x706/0xf80 [ 988.651756][ C1] ? clear_bhb_loop+0x40/0x90 [ 988.656468][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.662408][ C1] RIP: 0033:0x7f2a78b9cdd9 [ 988.666842][ C1] RSP: 002b:00007ffdc0cec348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 988.675270][ C1] RAX: 0000000000000000 RBX: 00007f2a78e17da0 RCX: 00007f2a78b9cdd9 [ 988.683262][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 988.691255][ C1] RBP: 00007f2a78e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 988.699364][ C1] R10: 00007f2a78e17cb0 R11: 0000000000000246 R12: 00000000000d6e21 [ 988.707365][ C1] R13: 00007f2a78e1609c R14: 00000000000d6b74 R15: 00007f2a78e16090 [ 988.715368][ C1] [ 988.718389][ C1] rcu: rcu_preempt kthread starved for 934 jiffies! g108581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 988.729504][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 988.739533][ C1] rcu: RCU grace-period kthread stack dump: [ 988.745432][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 988.758955][ C1] Call Trace: [ 988.762245][ C1] [ 988.765172][ C1] __schedule+0x10e9/0x6820 [ 988.769704][ C1] ? __pfx___schedule+0x10/0x10 [ 988.774575][ C1] ? find_held_lock+0x2b/0x80 [ 988.779294][ C1] ? schedule+0x2bf/0x390 [ 988.783662][ C1] schedule+0xdd/0x390 [ 988.787753][ C1] schedule_timeout+0x127/0x280 [ 988.792618][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 988.797997][ C1] ? __pfx_process_timeout+0x10/0x10 [ 988.803286][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 988.809115][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 988.814617][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 988.819418][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 988.824751][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 988.830224][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 988.835189][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 988.840421][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 988.846240][ C1] rcu_gp_kthread+0x179/0x230 [ 988.850929][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 988.856147][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 988.862003][ C1] ? __kthread_parkme+0x18c/0x230 [ 988.867055][ C1] ? kthread+0x13a/0x450 [ 988.871316][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 988.876546][ C1] kthread+0x370/0x450 [ 988.880670][ C1] ? __pfx_kthread+0x10/0x10 [ 988.885299][ C1] ret_from_fork+0x72b/0xd50 [ 988.889901][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 988.895028][ C1] ? __switch_to+0x800/0x1100 [ 988.899716][ C1] ? __pfx_kthread+0x10/0x10 [ 988.904315][ C1] ret_from_fork_asm+0x1a/0x30 [ 988.909103][ C1] [ 988.912130][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 988.918456][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.928970][ C1] Tainted: [L]=SOFTLOCKUP [ 988.933300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.943365][ C1] RIP: 0010:ip_sabotage_in+0x0/0x290 [ 988.948670][ C1] Code: 0c f8 e9 c1 fb ff ff 4c 89 ef e8 9b 31 0c f8 e9 13 fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 55 41 54 49 89 d4 55 53 48 89 f3 48 83 ec 08 e8 a7 [ 988.968294][ C1] RSP: 0018:ffffc90000a08a40 EFLAGS: 00000246 [ 988.974385][ C1] RAX: ffffffff8a6a1220 RBX: ffff888044f23400 RCX: ffffffff89ab6744 [ 988.982366][ C1] RDX: ffffc90000a08ad8 RSI: ffff8881915dba00 RDI: 0000000000000000 [ 988.990348][ C1] RBP: ffff888044f23400 R08: 0000000000000004 R09: 0000000000000000 [ 988.998360][ C1] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000000000 [ 989.006335][ C1] R13: ffff8881915dba00 R14: ffff888044f23408 R15: dffffc0000000000 [ 989.014307][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 989.023239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.029837][ C1] CR2: 000020000062a000 CR3: 00000000794fa000 CR4: 00000000003526f0 [ 989.037833][ C1] Call Trace: [ 989.041120][ C1] [ 989.043968][ C1] nf_hook_slow+0xbf/0x220 [ 989.048402][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 989.053542][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 989.058812][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 989.064486][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 989.069726][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 989.074416][ C1] ipv6_rcv+0xa4/0x3d0 [ 989.078512][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 989.083228][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 989.089159][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 989.095604][ C1] ? lock_acquire+0x1b1/0x370 [ 989.100321][ C1] ? process_backlog+0x32a/0x1580 [ 989.105373][ C1] ? process_backlog+0x32a/0x1580 [ 989.110403][ C1] __netif_receive_skb+0x1f/0x120 [ 989.115448][ C1] process_backlog+0x37a/0x1580 [ 989.120354][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 989.125776][ C1] net_rx_action+0xa40/0xf20 [ 989.130435][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 989.135554][ C1] ? find_held_lock+0x2b/0x80 [ 989.140243][ C1] ? clockevents_program_event+0x23e/0x820 [ 989.146093][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 989.151318][ C1] ? sched_clock+0x38/0x60 [ 989.155748][ C1] ? sched_clock_cpu+0x6c/0x570 [ 989.160612][ C1] ? rcu_is_watching+0x12/0xc0 [ 989.165383][ C1] handle_softirqs+0x1ea/0xa00 [ 989.170157][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 989.175448][ C1] ? _raw_spin_unlock+0x28/0x50 [ 989.180317][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 989.185988][ C1] __irq_exit_rcu+0x162/0x210 [ 989.190715][ C1] irq_exit_rcu+0x9/0x30 [ 989.194991][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 989.200632][ C1] [ 989.203566][ C1] [ 989.206512][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 989.212519][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 989.218188][ C1] Code: 46 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 80 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 989.237911][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 989.244002][ C1] RAX: 0000000004f8b12b RBX: ffff88801e682500 RCX: ffffffff8b8a1045 [ 989.252060][ C1] RDX: 0000000000000000 RSI: ffffffff8df1fea8 RDI: ffffffff8c1c3600 [ 989.260101][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 989.268089][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 989.276079][ C1] R13: ffffed1003cd04a0 R14: 0000000000000001 R15: ffffffff90d79b50 [ 989.284110][ C1] ? ct_kernel_exit+0x125/0x180 [ 989.289000][ C1] default_idle+0x9/0x10 [ 989.293294][ C1] default_idle_call+0x6c/0xb0 [ 989.298078][ C1] do_idle+0x464/0x590 [ 989.302192][ C1] ? __pfx_do_idle+0x10/0x10 [ 989.306828][ C1] ? do_idle+0x9/0x590 [ 989.310931][ C1] cpu_startup_entry+0x4f/0x60 [ 989.315758][ C1] start_secondary+0x21d/0x2d0 [ 989.320573][ C1] ? __pfx_start_secondary+0x10/0x10 [ 989.325897][ C1] common_startup_64+0x13e/0x148 [ 989.330974][ C1] [ 989.975276][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.017681][ T1309] ieee802154 phy1 wpan1: encryption failed: -22