last executing test programs: 1m15.227363103s ago: executing program 2 (id=949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "e84f56c62df32820", "ce40a131f827b893e1f2b157d5a9f0f6", "14325cdd", "df8f95f49be5cd5a"}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000040)={{0x4, 0x3, 0x2, 0x81, 0x8}, [{0x2, 0x1, 0x54, 0x4}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r1, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001a0049bc2dbd7000fedbdf250a208002ff00000100000000050014000800000008001900", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x3c}}, 0x40000) setreuid(r1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40084) 1m15.22654237s ago: executing program 2 (id=951): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000200000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000d00)={0x0, [{0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x41c1, 0x0}, {0x1, 0xc0, 0x2, &(0x7f00000006c0)="d60d68633b1b18c029347e2e846b70857fb53e9d683640c7"}, {0x3, 0x0, 0xd5cd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x18a, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6e5, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xad56, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000002bc0)=0x4, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m15.001957634s ago: executing program 2 (id=956): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xff00, 0x14, &(0x7f0000000600), 0x2}, 0x80) 1m14.936228966s ago: executing program 2 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1m14.606474093s ago: executing program 2 (id=960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff, 0x300, 0x1f00}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./cfg/usb_gadget/g1/bcdUSB\x00', &(0x7f0000000280)='omfs\x00', 0x20000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24008844, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1978, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') link(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r3, &(0x7f0000000130)='0x0', 0x3) r4 = open(&(0x7f0000000300)='./cfg\x00', 0x420200, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0089364, &(0x7f0000000180)) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0x2100, 0x280000000}) 1m14.536166539s ago: executing program 2 (id=962): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc0400000005010200000000000000000100000a54020100020000000cd80000080308000300270073797a30000000000000000000000000000000000000000000000000000000007771ed767577c46244729ba238281f43a70c46b86fe9271284a5f83fa75827187801537634028a1390bc0622fd63330ca478d532c87bcc3b47cf2a9477617b1da61b04000100000000700000090000000300000009000000b700cf0e0000000044ffffff0200ffff03000000040000000700c47603000000060000000c00080000000000020000000600040002000000000000000100090001000000020000004d003d4203000000070000000104060000000000070000000800040000000000000001000300ff0700000000750d000005000b000200000003000000070009000100000004000000ffff010001000000ff0f000000300500010000008f0900000600ffff0200000005000000c20c02000300000001800000040008000000000053000000070000400100000075fbffff090008000100000007000000050044000000000000040000008002000000000005000000060000f002000000060000000100ffff01000000070000001f79070002000000450000000500050002000000030000001302060000000000070000000900090003000000c4040000cf4d165f03000000040000000900030000000000080000004000030002000000070000000d00060001000000080000000000030003000000060000000900feff000000006309000001000500030000000d6c0000050008000700000000000080ffff03009f76f6a52b0800000300ff0f01000000090000001ce602000100000002000000540201000300000004000000080108000200270073797a3000000000000000000000000000000000000000000000000000000000d68eac673c2de2acf7f8e25a8240fff8cb9c93ae61f01de2bcadf6df53b22dffc57f1c7c5246ea3cea53b3f3af136598be647da8f1c40aa7c90990495e2a936b0800feff02000000030000000700050002000000ffffff7f0900010000000000050000000800800001000000f7ffffff0400ff0702000000030000000004ff010100000072f8ffff000080ff020000000900000003000700010000000400000006000500010000000101000084f303000200000000800000fe00090001000000020000000200080000000000020000000008463903000000050000000100ff0702000000b10700007f0000fc00000000080000000f0006000000000080000000fbad8efe00000000c00100000180360000000000fcffffff0800ff03020000000e00000005000300000000000700000008000800030000004a0100000104080003000000d82f00000000f8ff02000000714b00003e00feff00000000ff0100000c000180020000000c000000c707000003000000060000000700ff0003000000ff0100000400280003000000080000002d881dfe0200000005000000050002000100000010900000010001f003000000040000002400080b030000000400000004000200030000000600000008000400030000000008000001000400000000000300000000010500030000007f0000000500e10103000000030000000400030003000000ff000000000002000300000006000000e90d080003000000fdffffffec343adb62f1584425a170e418ef0b9cea978ca4dc60afb033b1913b07ebb30329a061cc34503b"], 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0xb, 0x80}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x8, 0xb3f, 0x0, 0x4b10, 0x800}, 0x14) 1m9.226015453s ago: executing program 1 (id=1018): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3ff, 0x40) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000080)={0x5, 0x0, r1}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000080)={0x5, 0x0, r1}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x4, 0x1]) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000100)={0x14}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x18700, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x18700, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000240)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000340)={&(0x7f0000000280)=[r4, r5, r6, r7], &(0x7f00000002c0)=[0x1, 0x80, 0x6, 0x0, 0x400, 0xffffffffffffffb1, 0x81, 0x1, 0x6, 0xffffffffffffffff], 0x3, 0x4, 0x4}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000380)=0x2008000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, r7, r4, 0x0, r8, r6], &(0x7f0000000440)=[0x9, 0x4], 0x6}) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000004c0)={0xf3, "652660d76b1598d2f0dd94b83a9c1f6c2a09e0dde8bceb12d4bb925a8e6704716f884aeaeb3dcef89ff2b36863884f35fd324b38d597e650fdf220894804cc4766f571e0c083924a98ad7189dc7f354fff9a09d9eae3617be513c10b07f27f9bdf9e2393ac5022d0825a3aacea8ba3ff936124bb9550644741c08243b34279b36e660384cfa95d3677a1e3d31897919ac8108c707a5e0c4b9fa6ed5b8508241aecdb5bc54411dfc88d589463a4bc2bcd66bf987343736b74003f1d29d642d451ea61e0e5e95c15dd5b5c61871012c25ebc9270ffe5130f7e60aacea6f6b6ca457b991a57655757826f23a6c4dee5b6d7360f94"}) (async) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000004c0)={0xf3, "652660d76b1598d2f0dd94b83a9c1f6c2a09e0dde8bceb12d4bb925a8e6704716f884aeaeb3dcef89ff2b36863884f35fd324b38d597e650fdf220894804cc4766f571e0c083924a98ad7189dc7f354fff9a09d9eae3617be513c10b07f27f9bdf9e2393ac5022d0825a3aacea8ba3ff936124bb9550644741c08243b34279b36e660384cfa95d3677a1e3d31897919ac8108c707a5e0c4b9fa6ed5b8508241aecdb5bc54411dfc88d589463a4bc2bcd66bf987343736b74003f1d29d642d451ea61e0e5e95c15dd5b5c61871012c25ebc9270ffe5130f7e60aacea6f6b6ca457b991a57655757826f23a6c4dee5b6d7360f94"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r9) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ftruncate(r2, 0xfffffffffffffff7) (async) ftruncate(r2, 0xfffffffffffffff7) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000c80)={&(0x7f0000000840)={{@my=0x0, 0x94}, {@my=0x1, 0x7ff}, 0x400, "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"}, 0x418, 0x8}) syz_open_dev$cec(&(0x7f0000000cc0), 0x0, 0x0) (async) r11 = syz_open_dev$cec(&(0x7f0000000cc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) mount(&(0x7f0000000d40)=@md0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='tracefs\x00', 0x810000, &(0x7f0000000e00)='/proc/self/attr/fscreate\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f0000000e40)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r3, 0xc010644d, &(0x7f0000000ec0)={r13, 0x0, &(0x7f0000000e80)='%}\x00'}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r3, 0xc010644d, &(0x7f0000000ec0)={r13, 0x0, &(0x7f0000000e80)='%}\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, r10, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0xfffffb6e, 0x4, 0xffff2647, 0xb594]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x55aac4e}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xac7e}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$DRM_IOCTL_AGP_ALLOC(r12, 0xc0206434, &(0x7f0000001040)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r12, 0x40206435, &(0x7f0000001080)={0x0, r15}) 1m9.225856367s ago: executing program 1 (id=1020): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) r2 = eventfd(0x2) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4010, &(0x7f0000000140)={[{@clone_children}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 1m9.155500743s ago: executing program 1 (id=1023): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x100000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r8 = io_uring_setup(0xcf, &(0x7f00000005c0)={0x0, 0x3d13, 0x1000, 0x1, 0x3a1}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000071990000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r11, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000800)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x96}, @call={0x85, 0x0, 0x0, 0x8d}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000780)}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010025bd7000000000001c1414"], 0x30}}, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r13, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x1b8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x7, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x4, 0x58, 0x3, 0x8000, 0x9, r14, r15, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}, {{0x0, 0x1, 0x7, 0x1711, 0x8, 0x4, {0x3, 0xffffffffa37be7cb, 0x3000000000, 0x6f9c, 0x8, 0x6, 0xd, 0x2, 0x7, 0xa000, 0xfffffff7, r14, r15, 0x8, 0x10}}, {0x1, 0x10, 0x45, 0x4, '\x01\x00ndOt\xd0*\xf8\x1d\x1f\xca\b\x02\n\xab \x96\xd8\xca3so\xa4\x10lave[\x0f\xf4\xdd\xac\xec`\x9fy\xcf\x82\x95\xca\xdc:\xff\xadcB\xec:\xfd\xc5\xab\x12\x88E6\xf1U\xc9\xa0\t\xec\x80\xaaz0x0, 0x0}, 0x2020) syz_fuse_handle_req(r16, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x400, 0x0, 0x6, 0x10, r17, r18, 0xc000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) r19 = syz_open_dev$I2C(&(0x7f0000000640), 0xfffffffffffffffc, 0x81c1) sendmsg$unix(r3, &(0x7f0000000780)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000280)="6542eb122dd72584b2c5b293c740ce01f64dd09d063df867aab22d4504ef214064aab7a67f5d14a100acc3e56eca34d445dea74c84bcf9b936ae22821232fca025983ce01d8855c7a37fb560c362a44a3978dec7b995dd9479020e7e5388cc6099badc4db1314b06c6cd00963c5bd9c914ce3838fd10ecd15aea2a2138cd942cef9050a5f289e2f6f02e964ddc0c2f810f6ba576a28170ebc5f563b58605f0d45a8b330567fc8d3846c8684dff4f93", 0xaf}, {&(0x7f0000000340)="5d4b2f1b6b4b4b352c98d3a30a915c3e149b1b80c22c0a2d3e8aa515502ccb2ef7658c81b4a4d87b485234ec7f1f212ff082b76318a25c79a0a5717942ca6390affe97eed0b870402c9e2f02ca0092009ae75c06061ac5b631804a98a2ab5d3d75386ebf274f026f98102ab4b5fd7e9f", 0x70}, {&(0x7f00000003c0)="ceb542e5b8bd0d525f716b70971bb1eb8d3d09603fe9e46e4cd0fe71a93b7259f9e1a20785096ef14fba3ebc242f45dcc7614837ee73a8c3a069e715bd5683562f5262382637a0521848ed13af1259a9a38284b08486571a413e73b477f64b405123742f5c27d0e7257b8603", 0x6c}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000001001000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000024000000001b9eaa2226a685506b51bb001180ab2c98a7ad9908fa039bc7644a19266b70a0e1407f9a1d8cabe99814ea41e07f209676e4bdd992d6c316d41c0552968f4601f2ff9acc3a3ccf9053411ca614d3208306db7538444c91517b9101fc805c05cd02343816c9c1099ab2f352bbcd2975647a556c12d226e6a865d9b9599e2e913eabd8124001ab6540d34aa12360", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYRES32=r18, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8d2}, 0x4010) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m9.076737651s ago: executing program 1 (id=1024): r0 = userfaultfd(0x80001) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) (async) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f2, &(0x7f0000000040)={'bond0\x00', @random="1805aa000020"}) ptrace$peekuser(0x3, r4, 0x350) fcntl$setown(r2, 0x8, r4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa800, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e23000004000600"], 0x40}}, 0x40800) 1m9.026446753s ago: executing program 1 (id=1026): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') pread64(r0, &(0x7f0000019100)=""/102365, 0x18fdd, 0x200000000200200) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) chdir(&(0x7f0000000240)='./file0\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xe1000d00) fchdir(r0) 1m8.816698293s ago: executing program 1 (id=1031): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x29, 0x3, 0x5, 0x0, "3322b0d6e6b5fb0b90e653ac5fecc08f4e"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0x6}}, @wrmsr={0x65, 0x20, {0x23a, 0x3}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6810, 0x126400, 0x7, 0x7fffffffffffffff}}, @in_dx={0x69, 0x20, {0xc33e, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc08, 0x1000, 0xe67d, 0x3ff}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xa8, {0x1, 0x6, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x640a, 0x8, 0x8a, 0xe}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0xfffffffffffffffb, 0x1}}, @wrmsr={0x65, 0x20, {0xa47, 0x9}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x65b7, 0x7fff, 0x1}}, @uexit={0x0, 0x18, 0x5}, @nested_load_code={0x12e, 0x4d, {0x0, "c4a3a16fcf00b9800000c00f3235000100000f30f00fb3460ef3450f09c48145587b10f4c481ac59e666430f38805600f4400f01cf"}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x979, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x70, {0x0, "0f229566baa100b80c100000ef670f07c7442400f5ffffffc74424020f000000c7442406000000000f011c24420f01cac4e17d2f8e098000000f20e035080000000f22e00f01c266410f7c510081bc7004adb57903d980e6"}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x4, 0x32e80000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x36d}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="66baf80cb8f8223a87ef66bafc0ced48b88a270000000000000f23c80f21f8350800e0000f23f866baf80cb8f49eef81ef66bafc0cb806000000ef440f20004d0fc75b64c4e3ed695fac000f01c9b8010000000f01c12e450f20c7f24190", 0x5e}], 0x1, 0x28, &(0x7f0000000540), 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000840)=0xe8) mount$bpf(0x0, &(0x7f0000000580)='\x00', &(0x7f00000005c0), 0x8000, &(0x7f0000000880)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r6}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '-&'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r7}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '[/[\\-)]{'}}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000a00)={0x0, 0x0, 0xf8, r8, 0x9}, 0xc) sendmsg$inet6(r3, &(0x7f0000000d80)={&(0x7f0000000a40)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="d59e87703291dc27ee38736075e934acc4968bc1bca895994377d159442c3a78596f6644069c8b0d0ce26b28625189703ad710ef1cacb4a9b94afca2f4ccb970887aea3f06255a1671c21efe7cdee94dcefe1dfe71890e09d6fdc3f8419849c15740ba4e3c615d0eec1584e147df143082f89ee9976939", 0x77}, {&(0x7f0000000b00)="ca09320568e1b004c3462863efb4d1dc9468d3a6120431aea25f72153687787d801bc6244401671e35d2711d10fc0c94a91934520b9f3745659560dc5aebcf4480bb7513a98631d09e3c508a36b8b7d75d5c848169290c41bcdd8594df3f54c8b6d79b1609470ed12334551614138605ddc462a2d9c79c307df2506b9fb1685afa18d11d7c7041e4022738fe9a8a3b8f3a5148b54e826ed524cae5ea2911b4f6fa208010cf991f16", 0xa8}], 0x2, &(0x7f0000000c00)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x2c, 0x17, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0xfffa, [0x101, 0x3, 0x5, 0x4, 0x10000]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x58, {0x2, 0x14, 0xff, 0x4, [0x1, 0xbaf, 0x40, 0xfffffffffffffbff, 0x6, 0xffffffffffffffff, 0x8, 0xd790, 0x9649, 0x80000000]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0xc18d}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@padn]}}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xfe, 0xcac, [0x4]}}]}}}], 0x150}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000dc0)='/dev/nmem0\x00', &(0x7f0000000e00)='./file0\x00', 0xffffffffffffff9c) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$pptp(r3, &(0x7f0000000e40)={0x18, 0x2, {0x3, @remote}}, 0x1e) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0xe, 0x0, "1022124caa0cefae987ab7ed7b204023d029b6b5c23e77bb64a13912d134880e57113acdd5293957f4470d6f311f827d5b780898848e979678081291a94f35c6ada0120c40951fd89ad6d80031407edc"}, 0xd8) r9 = memfd_secret(0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000001240)={&(0x7f0000000f80), 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1d8, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x198c}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1a0, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="d47099"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf2f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0xb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb2}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7f72202284b7"}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x499a}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xdd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x11a8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x616}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="5e12042ecc613518810d8eff55c308f985d709bf5681c3a50853264b54"}]}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="794ee6003997"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24021810}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x46}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000001400)=0x5, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r9, 0x80845663, &(0x7f0000001440)) 1m8.749344566s ago: executing program 32 (id=1031): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x29, 0x3, 0x5, 0x0, "3322b0d6e6b5fb0b90e653ac5fecc08f4e"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0x6}}, @wrmsr={0x65, 0x20, {0x23a, 0x3}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6810, 0x126400, 0x7, 0x7fffffffffffffff}}, @in_dx={0x69, 0x20, {0xc33e, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc08, 0x1000, 0xe67d, 0x3ff}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xa8, {0x1, 0x6, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x640a, 0x8, 0x8a, 0xe}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0xfffffffffffffffb, 0x1}}, @wrmsr={0x65, 0x20, {0xa47, 0x9}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x65b7, 0x7fff, 0x1}}, @uexit={0x0, 0x18, 0x5}, @nested_load_code={0x12e, 0x4d, {0x0, "c4a3a16fcf00b9800000c00f3235000100000f30f00fb3460ef3450f09c48145587b10f4c481ac59e666430f38805600f4400f01cf"}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x979, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_code={0x12e, 0x70, {0x0, "0f229566baa100b80c100000ef670f07c7442400f5ffffffc74424020f000000c7442406000000000f011c24420f01cac4e17d2f8e098000000f20e035080000000f22e00f01c266410f7c510081bc7004adb57903d980e6"}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x4, 0x32e80000000}}, @nested_vmlaunch={0x12f, 0x18}], 0x36d}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="66baf80cb8f8223a87ef66bafc0ced48b88a270000000000000f23c80f21f8350800e0000f23f866baf80cb8f49eef81ef66bafc0cb806000000ef440f20004d0fc75b64c4e3ed695fac000f01c9b8010000000f01c12e450f20c7f24190", 0x5e}], 0x1, 0x28, &(0x7f0000000540), 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000840)=0xe8) mount$bpf(0x0, &(0x7f0000000580)='\x00', &(0x7f00000005c0), 0x8000, &(0x7f0000000880)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r6}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '-&'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r7}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '[/[\\-)]{'}}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000a00)={0x0, 0x0, 0xf8, r8, 0x9}, 0xc) sendmsg$inet6(r3, &(0x7f0000000d80)={&(0x7f0000000a40)={0xa, 0x4e22, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="d59e87703291dc27ee38736075e934acc4968bc1bca895994377d159442c3a78596f6644069c8b0d0ce26b28625189703ad710ef1cacb4a9b94afca2f4ccb970887aea3f06255a1671c21efe7cdee94dcefe1dfe71890e09d6fdc3f8419849c15740ba4e3c615d0eec1584e147df143082f89ee9976939", 0x77}, {&(0x7f0000000b00)="ca09320568e1b004c3462863efb4d1dc9468d3a6120431aea25f72153687787d801bc6244401671e35d2711d10fc0c94a91934520b9f3745659560dc5aebcf4480bb7513a98631d09e3c508a36b8b7d75d5c848169290c41bcdd8594df3f54c8b6d79b1609470ed12334551614138605ddc462a2d9c79c307df2506b9fb1685afa18d11d7c7041e4022738fe9a8a3b8f3a5148b54e826ed524cae5ea2911b4f6fa208010cf991f16", 0xa8}], 0x2, &(0x7f0000000c00)=[@dstopts_2292={{0xd8, 0x29, 0x4, {0x2c, 0x17, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0xfffa, [0x101, 0x3, 0x5, 0x4, 0x10000]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x58, {0x2, 0x14, 0xff, 0x4, [0x1, 0xbaf, 0x40, 0xfffffffffffffbff, 0x6, 0xffffffffffffffff, 0x8, 0xd790, 0x9649, 0x80000000]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0xc18d}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0xc, 0x0, '\x00', [@padn]}}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xfe, 0xcac, [0x4]}}]}}}], 0x150}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000dc0)='/dev/nmem0\x00', &(0x7f0000000e00)='./file0\x00', 0xffffffffffffff9c) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$pptp(r3, &(0x7f0000000e40)={0x18, 0x2, {0x3, @remote}}, 0x1e) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0xe, 0x0, "1022124caa0cefae987ab7ed7b204023d029b6b5c23e77bb64a13912d134880e57113acdd5293957f4470d6f311f827d5b780898848e979678081291a94f35c6ada0120c40951fd89ad6d80031407edc"}, 0xd8) r9 = memfd_secret(0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000001240)={&(0x7f0000000f80), 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1d8, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x198c}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1a0, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="d47099"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf2f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0xb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb2}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7f72202284b7"}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x499a}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xdd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x11a8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x100}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x616}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="5e12042ecc613518810d8eff55c308f985d709bf5681c3a50853264b54"}]}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="794ee6003997"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24021810}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x46}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000001400)=0x5, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r9, 0x80845663, &(0x7f0000001440)) 59.142681568s ago: executing program 33 (id=962): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @remote}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0xb, 0x80}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x8, 0xb3f, 0x0, 0x4b10, 0x800}, 0x14) 3.046370388s ago: executing program 5 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 3.045686411s ago: executing program 5 (id=1870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x10000, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', r1, r4, 0x0, 0x2, 0x3}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.854561275s ago: executing program 5 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r1 = fsopen(&(0x7f0000000000)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getflags(r2, 0xb) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000001050005000a000000050001000700000005000400000000000900020073797a3f0000000015000300686173683a69702c706f72742c6e65740000000014000780080008400000001008001240"], 0x64}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r5, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x59) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r9}, 0x0) landlock_restrict_self(r8, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.934703482s ago: executing program 5 (id=1883): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) socket(0x2, 0xa, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2217, 0x7721, 0x16, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.885787127s ago: executing program 5 (id=1886): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b', 0x1}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a"], 0x20}, 0x20000890) 1.813320419s ago: executing program 5 (id=1889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x580, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='grpquota,grpquota_inode_hardlimit=1']) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4880) ioctl$TCFLSH(r1, 0x800455c9, 0x4000000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x0, 0xb, 0x1, 0x1a00, 0x6, 0x2}, 0x30, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0xc6903) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10001, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xae69, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.056303017s ago: executing program 3 (id=1910): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) (async) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="2153c9300980ffff", 0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20022dbd7000fddbdf252e0000000400d0000400d000060098000000007548ed429fad492eb744750debec88d2d989974597ae476eb1de7b403f6a60377a749503f8381d5e9c8d272eefe222989c52688b88b67a8d6bcbe5a9a13b2cbe58c9e7f34607313413f4cd7a1d3cbcc2566a9642fc6116b8ed2ae9cc77c93a6e7063446cd966a66d7fa1df"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000f00)={0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x7, 0xf, 0x8, @remote, @loopback, 0x20, 0x8, 0x5, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x1, 0x8, 0xc, 0x6, 0x77d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x5, 0x52, &(0x7f0000000580)=""/82, 0x100, 0x9, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r2, r2], &(0x7f0000000780)=[{0x3, 0x5, 0x6, 0x2}, {0x1, 0x2, 0x7, 0x5}], 0x10, 0x800}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130700000000000000000a010100000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d3330000002001000000000000000000000000000200000000000000000000b142c19e1a8913680000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffffff01000000000000800000000000000000feffffffffffffff000000000000000000000000000000000000000000000000023500000200020000000000000000004c0014"], 0x13c}}, 0x4000050) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 705.441401ms ago: executing program 3 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="60a00200000000001400030073797a5f74756e00000000000900000008000a"], 0x3c}}, 0x8000) 654.417201ms ago: executing program 3 (id=1914): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0xdb, 0x5}) (async) ioctl$BSG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x7) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000140)={0x5, r0, 'id0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x1a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xa0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 64) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001580)={0x214, r3, 0x792, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x112, 0x2a, [@preq={0x82, 0x4c, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x9, @broadcast, 0x9, @value=@device_b, 0x633, 0x8, 0x4, [{{}, @device_b, 0x5}, {{}, @broadcast, 0x8001}, {{}, @device_b, 0x5}, {{0x1}, @device_b, 0x101}]}}, @rann={0x7e, 0x15, {{0x1, 0x1b}, 0x8, 0x40, @device_a, 0x0, 0x2, 0x3}}, @measure_req={0x26, 0x80, {0x5, 0x4, 0xa0, "2b5a5d331e3bf2fbacd0bb72c8bc5a2d91172114052809e0613198d9b5a67d5d2f76fe479d5657dd38d4b2810c516896ac7395827d6812d511fd64b368a1884f98e1c5aef0c776b185415ad7754aafe813cb031635405e7b50a7c58cefc14e8d01a510ef967add320963b080dbe2888a18b0c47bcea129b60bbaa414e8"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @measure_req={0x26, 0x1c, {0x7, 0x0, 0xc3, "94738ae29fa1914e0e84f4b42abdfac5f35afe8064261c7fb2"}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x42, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x0, 0x4, 0x0, {0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x2f, 0x7f}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mic={0x8c, 0x18, {0xca9, "7f7546555169", @long="8774f19cd5a779e86cb3a2315e98606d"}}]}, @NL80211_ATTR_IE={0x81, 0x2a, [@ht={0x2d, 0x1a, {0x935a3099b9040ffc, 0x0, 0x2, 0x0, {0x5, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xd76}}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x5, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x80000001, 0x4}}, @gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0x8c, 0x5, 0x84b0, 0x9}}, @sec_chan_ofs={0x3e, 0x1}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0xff, @broadcast, 0xfffffbff, @value=@broadcast, 0x6, 0x4, @device_b, 0x6}}, @peer_mgmt={0x75, 0x6, {0x1, 0x9, @void, @val=0x2d, @void}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40040}, 0x840) (rerun: 64) preadv(r1, &(0x7f0000002b80)=[{&(0x7f0000001840)=""/190, 0xbe}, {&(0x7f0000001900)=""/46, 0x2e}, {&(0x7f0000001940)=""/239, 0xef}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/118, 0x76}, {&(0x7f0000002ac0)=""/155, 0x9b}], 0x6, 0x0, 0x2) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000002c00)=0x1000) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000002c40)={0x2, 'gretap0\x00', {0x9}, 0x7f}) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000002c80)=[0x0, 0x100]) (async) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000002cc0)={0x0, 0x0, 0x0, @lost_msgs}) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d80), r2) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002f00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0xfc, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffbd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2f}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000002f40)={"7be41ba3078c265475736696dcb40522", 0x0, 0x0, {0x3, 0x220920d9}, {0x1, 0x8}, 0x5, [0xf, 0x1, 0x80000001, 0x4, 0x5, 0x120, 0xa928, 0x40, 0x9, 0x5, 0x2, 0x5, 0x53d0, 0x2, 0xd9, 0x6]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000003240)={"fa00f8393ff1bf04cde2bd8cdae1c2ce", r6, r7, {0x400, 0x6}, {0x3, 0x2}, 0xb1, [0x8000, 0x3, 0x2, 0x0, 0x0, 0xe, 0x7, 0xe6c, 0x1, 0x5, 0x2, 0x9, 0x6, 0xff, 0x100000000, 0x2]}) (async) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000003340), 0x1a000, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r8, 0x5328) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000003380)={0x0, 0x2, 0x96, 0x8, 0x7, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000003480)={0xa7, &(0x7f00000033c0)="0826b21c31fa9ce1f102b3475570340ffe8adc88ce7464632b5209a1a1ad012ba798a3e69442322bc3d4c47a519ef9b0878cbdfbab75809997b4b5c63a65f85c1faa8535aec9d8e9a9ff3484680652fcd98a474673a47c1fa89cf4b497b7b353f017f562d4c8dbd0197e256a22c15f3e0674a90df260687da7fb2e306b68d6be42bbd92319b2d4359feb3c8e7448c0c7c1c022e57dfc7bf570fb8fffd75b18ca8566dadc105d98"}) (async, rerun: 32) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000034c0)={0x4, 0x7ff00000, 0x6, 0x6, 0x8, "211f3091f330b1464225d7bda2d907e73cbd47", 0xfffffff7, 0xd0fc}) (async, rerun: 32) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000003500)=0x1) (rerun: 32) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000003540)) 654.167515ms ago: executing program 3 (id=1915): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40e03, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) dup2(r1, r0) (async) dup2(r1, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x81}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}], 0x90) ioctl$CDROMPAUSE(r1, 0x5301) r2 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) 573.771009ms ago: executing program 4 (id=1917): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xfffffffffffffe6f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c5ba72a7408bc226914c97bd48400"]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r6, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c4", 0x63}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 515.620949ms ago: executing program 3 (id=1918): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0x20, 0x5a, 0x1, 0x70bd27, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 2) 395.060597ms ago: executing program 3 (id=1919): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000002280)=0x6) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x400, 0x6a, 0x10001, 0xffffffffffffffff, 0xffffdffffffffffd, 0x8000000007, 0x0, 0xfffffffffffffff8, 0x2, 0x5, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000002280)=0x6) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x400, 0x6a, 0x10001, 0xffffffffffffffff, 0xffffdffffffffffd, 0x8000000007, 0x0, 0xfffffffffffffff8, 0x2, 0x5, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) close(r0) (async) 394.749405ms ago: executing program 0 (id=1920): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket(0x6, 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) (async) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_dump={0x3e, 0x8, 0x3}}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x34d, 0x9}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r4, 0xc0104d08, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x9}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}], 0x1c) (async) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r3, 0x5) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0x0, 0x40000) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='1', 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) execve(&(0x7f0000000300)='./proc/1/root/var/run/gssproxy.sock\x00', &(0x7f0000000440)={[&(0x7f0000000340)='fq_pie\x00', &(0x7f0000000380)='proc\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00']}, &(0x7f00000005c0)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='/dev/v4l-subdev#\x00', &(0x7f0000000540)='^@\b:/%\'^\x00', &(0x7f0000000580)='ip6tnl0\x00']}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 326.215903ms ago: executing program 0 (id=1921): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="040eb2821c0c", @ANYRES64], 0x7) 324.462342ms ago: executing program 0 (id=1922): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) fchdir(0xffffffffffffffff) lsetxattr$security_selinux(0x0, &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x7f) r1 = socket(0x9, 0x800, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000000000001700"], 0x30}}, 0x0) bind$alg(r1, &(0x7f0000000d00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) socket$netlink(0x10, 0x3, 0x15) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./proc\x00', 0xd7) write(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0xcdf) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x0, 0xfc, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfe, 0x0, 0x0, '\x00', 0xfc}) 254.430147ms ago: executing program 4 (id=1923): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000200000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000d00)={0x0, [{0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x41c1, 0x0}, {0x1, 0xc0, 0x2, &(0x7f00000006c0)="d60d68633b1b18c029347e2e846b70857fb53e9d683640c7"}, {0x3, 0x0, 0xd5cd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x18a, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6e5, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xad56, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000002bc0)=0x4, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 253.092524ms ago: executing program 0 (id=1924): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./sys/module/usbcore/parameters/quirks\x00', &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x8, 0x3) syz_open_dev$rtc(0xfffffffffffffffc, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)='0123:abcd:g', 0xb) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) openat(r8, &(0x7f00000001c0)='./file0\x00', 0x50000, 0x1) 143.647877ms ago: executing program 0 (id=1925): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettaction={0x1a4, 0x32, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x789d}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3c}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x123529ae}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x876}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24000002}}]}]}, 0x1a4}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x8000, 0x8, 0x7, 0x5}, {0x7, 0xed, 0x2, 0x5}, {0x4, 0x1, 0x9, 0x66db4c94}, {0xff, 0x8, 0x81, 0x7}, {0x0, 0x6, 0x4, 0x22a2}, {0xff, 0x1, 0x3, 0x8}, {0x6, 0x1, 0x2, 0x8}, {0x6ce3, 0xff, 0x2, 0x827}, {0x0, 0xbe, 0xfa, 0x8}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r2, &(0x7f0000000180)='nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_configfs/nullb/nullb1/zoned\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) write(r3, &(0x7f0000000200)='1\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000020000000423790016ffffff00000000d72e5f36a8aafef23e69460d6e76430b0d8070c2ce602eb04a5f4112953458828b06000056dda201c26e25c7f436cb60f8f5fc13f70705684054482a2466d2eb37ce3781d3166707e3c1c9056474666a9c0ceb57145e1813e9bf00749ecdd2b733997dc8262df05d174d243e16eb85dafc7c4a024ab2ac1ab32514c734bb7e9178ee96141015", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="000000000500"/28], 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x800}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='128\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='my_configfs/nullb/nullb1/size\x00', 0x10201, 0xc4) write(r5, &(0x7f0000000300)='1024\x00', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='1\x00', 0x2) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="8c130000", @ANYRES16=r7, @ANYBLOB="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"], 0x138c}, 0x1, 0x0, 0x0, 0x40041}, 0x24048880) socket$unix(0x1, 0x1, 0x0) 65.622986ms ago: executing program 4 (id=1926): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = msgget$private(0x0, 0x240) msgrcv(r0, 0x0, 0x0, 0x0, 0x2800) 64.406529ms ago: executing program 4 (id=1927): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x1a, &(0x7f0000000000)={0x1, @local, 0x4e22, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) 3.147966ms ago: executing program 4 (id=1928): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0x20, 0x5a, 0x1, 0x70bd27, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.555199ms ago: executing program 0 (id=1929): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x6000, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000180)={0x4, 0xf4, 0x4, 0xd, 0x4, 0x8}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socket$kcm(0x29, 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @private=0xa010101}, 0x1d7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x100008}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) socket(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=1930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadgetfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadgetfs\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadgetfs/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="000000000902190001010080010904000001ffffff000705810240000012011001000000402505a0a4000000000001", 0x2f) read(r0, &(0x7f0000000500), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) read(r0, &(0x7f0000000500), 0x10) read(r0, &(0x7f0000000500), 0x10) (async) read(r0, &(0x7f0000000500), 0x10) read(r0, &(0x7f0000000500), 0x10) (async) read(r0, &(0x7f0000000500), 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadgetfs/ep1in-bulk\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r6) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000840)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x69, 0x4, 0x0, 0x93, @private1={0xfc, 0x1, '\x00', 0x4}, @private2, 0x700, 0x8, 0xe11e, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000680)) kernel console output (not intermixed with test programs): 587] ipt_ECN: cannot use operation on non-tcp rule [ 473.151443][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.158013][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.162737][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.166943][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.170738][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.402239][ T9615] __nla_validate_parse: 6 callbacks suppressed [ 473.402260][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 473.416405][ T9615] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 473.444030][ T5849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.511233][ T9618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.515479][ T9618] bond1: (slave bond2): making interface the new active one [ 473.519240][ T9618] bond1: (slave bond2): Enslaving as an active interface with an up link [ 473.549878][ T5849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.606498][ T9624] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 473.632095][ T42] kauditd_printk_skb: 488 callbacks suppressed [ 473.632114][ T42] audit: type=1400 audit(1785843744.004:1683): avc: denied { append } for pid=9621 comm="syz.3.1154" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 473.633295][ T9622] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 473.663094][ T5849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.723590][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.727676][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.734095][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.737307][ T42] audit: type=1400 audit(1785843744.104:1684): avc: denied { write } for pid=9633 comm="syz.3.1158" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 473.738117][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.752583][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.757669][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.763171][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.768069][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.775393][ T9628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9628 comm=syz.0.1156 [ 473.823415][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 473.828571][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'. [ 473.832263][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'. [ 473.837732][ T42] audit: type=1400 audit(1785843744.204:1685): avc: denied { listen } for pid=9633 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 473.854537][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.866043][ T9642] openvswitch: netlink: Message has 24 unknown bytes. [ 473.869464][ T9642] program syz.0.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.917550][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.919950][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.922516][ T9592] bridge_slave_0: entered allmulticast mode [ 473.926791][ T9592] bridge_slave_0: entered promiscuous mode [ 473.934589][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.936906][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.939000][ T9650] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1161'. [ 473.939384][ T9592] bridge_slave_1: entered allmulticast mode [ 473.944817][ T9592] bridge_slave_1: entered promiscuous mode [ 473.972474][ T9652] ecryptfs: Unknown parameter 'addr' [ 473.972585][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.981528][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.012726][ T9592] team0: Port device team_slave_0 added [ 474.020094][ T9592] team0: Port device team_slave_1 added [ 474.032216][ T9655] vivid-000: unregistering video7 [ 474.035461][ T9655] vivid-000: unregistering video8 [ 474.040545][ T9655] vivid-000: unregistering vbi0 [ 474.044093][ T9655] vivid-000: unregistering vbi1 [ 474.047929][ T9655] vivid-000: unregistering swradio0 [ 474.052582][ T9655] vivid-000: unregistering radio0 [ 474.094824][ T9655] vivid-000: unregistering radio1 [ 474.099998][ T9655] vivid-000: unregistering video9 [ 474.103423][ T9655] vivid-000: unregistering video10 [ 474.115072][ T9655] vivid-000: unregistering v4l-touch0 [ 474.173179][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.176110][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.185867][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.208719][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.211410][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.220609][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.238752][ T9655] vivid-001: unregistering video11 [ 474.269740][ T9655] vivid-001: unregistering video12 [ 474.318230][ T9655] vivid-001: unregistering vbi2 [ 474.345298][ T9655] vivid-001: unregistering vbi3 [ 474.360470][ T9655] vivid-001: unregistering swradio1 [ 474.366476][ T9655] vivid-001: unregistering radio2 [ 474.375644][ T9655] vivid-001: unregistering radio3 [ 474.387439][ T9655] vivid-001: unregistering video13 [ 474.412776][ T9655] vivid-001: unregistering video14 [ 474.433155][ T9655] vivid-001: unregistering v4l-touch1 [ 474.435189][ T42] audit: type=1400 audit(1785843744.804:1686): avc: denied { write } for pid=5796 comm="syz-executor" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 474.449953][ T42] audit: type=1400 audit(1785843744.804:1687): avc: denied { write } for pid=5796 comm="syz-executor" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 474.458533][ T42] audit: type=1400 audit(1785843744.804:1688): avc: denied { write } for pid=5796 comm="syz-executor" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 474.467154][ T42] audit: type=1400 audit(1785843744.804:1689): avc: denied { write } for pid=5796 comm="syz-executor" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 474.475564][ T42] audit: type=1400 audit(1785843744.804:1690): avc: denied { write } for pid=5796 comm="syz-executor" name="351" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 474.541790][ T5811] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 474.561884][ T9655] vivid-002: unregistering video15 [ 474.573811][ T9655] vivid-002: unregistering video16 [ 474.585824][ T9655] vivid-002: unregistering vbi4 [ 474.593293][ T9655] vivid-002: unregistering vbi5 [ 474.596730][ T9655] vivid-002: unregistering swradio2 [ 474.606714][ T9655] vivid-002: unregistering radio4 [ 474.611979][ T9655] vivid-002: unregistering radio5 [ 474.614932][ T9655] vivid-002: unregistering video17 [ 474.617423][ T9655] vivid-002: unregistering video18 [ 474.623269][ T9655] vivid-002: unregistering v4l-touch2 [ 474.648127][ T9655] vivid-003: unregistering video19 [ 474.651732][ T9655] vivid-003: unregistering video20 [ 474.657203][ T9655] vivid-003: unregistering vbi6 [ 474.675456][ T9655] vivid-003: unregistering vbi7 [ 474.692849][ T9655] vivid-003: unregistering swradio3 [ 474.723928][ T9655] vivid-003: unregistering radio6 [ 474.727260][ T9655] vivid-003: unregistering radio7 [ 474.772811][ T9655] vivid-003: unregistering video21 [ 474.793944][ T9655] vivid-003: unregistering video22 [ 474.812784][ T9655] vivid-003: unregistering v4l-touch3 [ 474.832888][ T9592] hsr_slave_0: entered promiscuous mode [ 474.843306][ T9592] hsr_slave_1: entered promiscuous mode [ 474.855822][ T9592] debugfs: 'hsr0' already exists in 'hsr' [ 474.857883][ T9592] Cannot create hsr debugfs directory [ 474.872389][ T5849] bridge_slave_1: left allmulticast mode [ 474.875033][ T5849] bridge_slave_1: left promiscuous mode [ 474.877658][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.886677][ T5849] bridge_slave_0: left allmulticast mode [ 474.888999][ T5849] bridge_slave_0: left promiscuous mode [ 474.891138][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.941591][ T9655] vivid-004: unregistering video23 [ 474.944187][ T9655] vivid-004: unregistering video24 [ 474.946554][ T9655] vivid-004: unregistering vbi8 [ 474.956241][ T9655] vivid-004: unregistering vbi9 [ 474.962992][ T9655] vivid-004: unregistering swradio4 [ 474.969730][ T9655] vivid-004: unregistering radio8 [ 474.992257][ T9655] vivid-004: unregistering radio9 [ 475.002717][ T5768] usb 9-1: USB disconnect, device number 2 [ 475.008233][ T9655] vivid-004: unregistering video25 [ 475.026559][ T9655] vivid-004: unregistering video26 [ 475.029797][ T9655] vivid-004: unregistering v4l-touch4 [ 475.101769][ T9655] vivid-005: unregistering video27 [ 475.106156][ T9655] vivid-005: unregistering video28 [ 475.112105][ T9655] vivid-005: unregistering vbi10 [ 475.127428][ T9655] vivid-005: unregistering vbi11 [ 475.137320][ T9655] vivid-005: unregistering swradio5 [ 475.149885][ T9655] vivid-005: unregistering radio10 [ 475.155704][ T9655] vivid-005: unregistering radio11 [ 475.161464][ T9655] vivid-005: unregistering video29 [ 475.164849][ T9655] vivid-005: unregistering video30 [ 475.172023][ T9655] vivid-005: unregistering v4l-touch5 [ 475.221885][ T9655] vivid-006: unregistering video31 [ 475.226683][ T9655] vivid-006: unregistering video32 [ 475.229053][ T5811] Bluetooth: hci4: command tx timeout [ 475.242925][ T9655] vivid-006: unregistering vbi12 [ 475.256447][ T9655] vivid-006: unregistering vbi13 [ 475.267320][ T9655] vivid-006: unregistering swradio6 [ 475.300363][ T9655] vivid-006: unregistering radio12 [ 475.318023][ T9655] vivid-006: unregistering radio13 [ 475.327458][ T9655] vivid-006: unregistering video33 [ 475.331022][ T9655] vivid-006: unregistering video34 [ 475.335078][ T9655] vivid-006: unregistering v4l-touch6 [ 475.399149][ T9655] vivid-007: unregistering video35 [ 475.412315][ T9655] vivid-007: unregistering video36 [ 475.424318][ T9655] vivid-007: unregistering vbi14 [ 475.432705][ T9655] vivid-007: unregistering vbi15 [ 475.448954][ T9655] vivid-007: unregistering swradio7 [ 475.460896][ T9655] vivid-007: unregistering radio14 [ 475.464414][ T9655] vivid-007: unregistering radio15 [ 475.468620][ T9655] vivid-007: unregistering video37 [ 475.471496][ T9655] vivid-007: unregistering video38 [ 475.473992][ T9655] vivid-007: unregistering v4l-touch7 [ 475.523533][ T9655] vivid-008: unregistering video39 [ 475.525911][ T5849] gretap0 (unregistering): left promiscuous mode [ 475.529089][ T9655] vivid-008: unregistering video40 [ 475.533670][ T9655] vivid-008: unregistering vbi16 [ 475.546615][ T9655] vivid-008: unregistering vbi17 [ 475.555071][ T9655] vivid-008: unregistering swradio8 [ 475.561985][ T9655] vivid-008: unregistering radio16 [ 475.569637][ T9655] vivid-008: unregistering radio17 [ 475.575211][ T9655] vivid-008: unregistering video41 [ 475.582225][ T9655] vivid-008: unregistering video42 [ 475.593079][ T9655] vivid-008: unregistering v4l-touch8 [ 475.636820][ T5849] bond3 (unregistering): (slave geneve2): Releasing active interface [ 475.644315][ T9655] vivid-009: unregistering video43 [ 475.649202][ T9655] vivid-009: unregistering video44 [ 475.655205][ T9655] vivid-009: unregistering vbi18 [ 475.661295][ T9655] vivid-009: unregistering vbi19 [ 475.665203][ T9655] vivid-009: unregistering swradio9 [ 475.675030][ T9655] vivid-009: unregistering radio18 [ 475.682443][ T9655] vivid-009: unregistering radio19 [ 475.699404][ T9655] vivid-009: unregistering video45 [ 475.707355][ T9655] vivid-009: unregistering video46 [ 475.712707][ T9655] vivid-009: unregistering v4l-touch9 [ 475.748040][ T5849] bond0 (unregistering): left promiscuous mode [ 475.751427][ T5849] bond_slave_0: left promiscuous mode [ 475.754553][ T5849] bond_slave_1: left promiscuous mode [ 475.755934][ T9655] vivid-010: unregistering video47 [ 475.762848][ T9655] vivid-010: unregistering video48 [ 475.763348][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.769243][ T9655] vivid-010: unregistering vbi20 [ 475.773059][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.780312][ T5849] bond0 (unregistering): Released all slaves [ 475.781223][ T9655] vivid-010: unregistering vbi21 [ 475.787254][ T9655] vivid-010: unregistering swradio10 [ 475.795176][ T9655] vivid-010: unregistering radio20 [ 475.813788][ T9655] vivid-010: unregistering radio21 [ 475.821344][ T9655] vivid-010: unregistering video49 [ 475.824065][ T5849] bond1 (unregistering): (slave bond2): Releasing backup interface [ 475.825755][ T9655] vivid-010: unregistering video50 [ 475.828384][ T5849] bond2 (unregistering): left allmulticast mode [ 475.833179][ T5849] bond1 (unregistering): Released all slaves [ 475.837097][ T9655] vivid-010: unregistering v4l-touch10 [ 475.869313][ T9655] vivid-011: unregistering video51 [ 475.874495][ T9655] vivid-011: unregistering video52 [ 475.879633][ T9655] vivid-011: unregistering vbi22 [ 475.883278][ T9655] vivid-011: unregistering vbi23 [ 475.885792][ T9655] vivid-011: unregistering swradio11 [ 475.892925][ T9655] vivid-011: unregistering radio22 [ 475.903571][ T9655] vivid-011: unregistering radio23 [ 475.913930][ T9655] vivid-011: unregistering video53 [ 475.919306][ T9655] vivid-011: unregistering video54 [ 475.924458][ T9655] vivid-011: unregistering v4l-touch11 [ 475.955922][ T9655] vivid-012: unregistering video55 [ 475.959636][ T9655] vivid-012: unregistering video56 [ 475.964980][ T9655] vivid-012: unregistering vbi24 [ 475.977551][ T5849] bond2 (unregistering): Released all slaves [ 475.980321][ T9655] vivid-012: unregistering vbi25 [ 475.987590][ T9655] vivid-012: unregistering swradio12 [ 475.999980][ T9655] vivid-012: unregistering radio24 [ 476.007900][ T9655] vivid-012: unregistering radio25 [ 476.014734][ T9655] vivid-012: unregistering video57 [ 476.018693][ T9655] vivid-012: unregistering video58 [ 476.022524][ T9655] vivid-012: unregistering v4l-touch12 [ 476.070030][ T9655] vivid-013: unregistering video59 [ 476.072657][ T9655] vivid-013: unregistering video60 [ 476.077506][ T9655] vivid-013: unregistering vbi26 [ 476.084701][ T9655] vivid-013: unregistering vbi27 [ 476.089046][ T9655] vivid-013: unregistering swradio13 [ 476.100826][ T9655] vivid-013: unregistering radio26 [ 476.107887][ T5849] bond3 (unregistering): Released all slaves [ 476.121729][ T9655] vivid-013: unregistering radio27 [ 476.124270][ T9655] vivid-013: unregistering video61 [ 476.130133][ T9655] vivid-013: unregistering video62 [ 476.134596][ T9655] vivid-013: unregistering v4l-touch13 [ 476.181847][ T9655] vivid-014: unregistering video63 [ 476.190380][ T9655] vivid-014: unregistering video64 [ 476.197345][ T9655] vivid-014: unregistering vbi28 [ 476.204843][ T9655] vivid-014: unregistering vbi29 [ 476.212120][ T9655] vivid-014: unregistering swradio14 [ 476.220490][ T9655] vivid-014: unregistering radio28 [ 476.226472][ T9655] vivid-014: unregistering radio29 [ 476.232962][ T9655] vivid-014: unregistering video65 [ 476.239600][ T9655] vivid-014: unregistering video66 [ 476.251465][ T9655] vivid-014: unregistering v4l-touch14 [ 476.270389][ T9678] netlink: 'syz.3.1169': attribute type 8 has an invalid length. [ 476.273796][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 476.288139][ T9655] vivid-015: unregistering video67 [ 476.308670][ T9655] vivid-015: unregistering video68 [ 476.312364][ T9655] vivid-015: unregistering vbi30 [ 476.317113][ T9655] vivid-015: unregistering vbi31 [ 476.325340][ T9675] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1168'. [ 476.330088][ T9655] vivid-015: unregistering swradio15 [ 476.341930][ T9655] vivid-015: unregistering radio30 [ 476.363157][ T9655] vivid-015: unregistering radio31 [ 476.374655][ T9655] vivid-015: unregistering video69 [ 476.388624][ T9655] vivid-015: unregistering video70 [ 476.393376][ T9655] vivid-015: unregistering v4l-touch15 [ 476.438925][ T9655] vivid-016: unregistering video71 [ 476.441632][ T9655] vivid-016: unregistering video72 [ 476.442902][ T5849] : left promiscuous mode [ 476.449009][ T9655] vivid-016: unregistering vbi32 [ 476.468216][ T9655] vivid-016: unregistering vbi33 [ 476.474206][ T9655] vivid-016: unregistering swradio16 [ 476.481186][ T9655] vivid-016: unregistering radio32 [ 476.490304][ T9655] vivid-016: unregistering radio33 [ 476.493978][ T9655] vivid-016: unregistering video73 [ 476.496653][ T9655] vivid-016: unregistering video74 [ 476.500054][ T9655] vivid-016: unregistering v4l-touch16 [ 476.541003][ T9655] vivid-017: unregistering video75 [ 476.544140][ T9680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.563206][ T9655] vivid-017: unregistering video76 [ 476.568213][ T9655] vivid-017: unregistering vbi34 [ 476.576037][ T9655] vivid-017: unregistering vbi35 [ 476.582399][ T9655] vivid-017: unregistering swradio17 [ 476.594620][ T9655] vivid-017: unregistering radio34 [ 476.599732][ T9655] vivid-017: unregistering radio35 [ 476.606971][ T9655] vivid-017: unregistering video77 [ 476.616946][ T9655] vivid-017: unregistering video78 [ 476.646662][ T9655] vivid-017: unregistering v4l-touch17 [ 476.692011][ T9655] vivid-018: unregistering video79 [ 476.695223][ T9655] vivid-018: unregistering video80 [ 476.695402][ T9682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.704565][ T9655] vivid-018: unregistering vbi36 [ 476.704741][ T5849] tipc: Disabling bearer [ 476.709777][ T9655] vivid-018: unregistering vbi37 [ 476.713125][ T9655] vivid-018: unregistering swradio18 [ 476.715098][ T5849] tipc: Left network mode [ 476.724491][ T9655] vivid-018: unregistering radio36 [ 476.750931][ T9655] vivid-018: unregistering radio37 [ 476.756709][ T9655] vivid-018: unregistering video81 [ 476.764365][ T9655] vivid-018: unregistering video82 [ 476.768527][ T9655] vivid-018: unregistering v4l-touch18 [ 476.804723][ T9655] vivid-019: unregistering video83 [ 476.808757][ T9655] vivid-019: unregistering video84 [ 476.812081][ T9655] vivid-019: unregistering vbi38 [ 476.819283][ T9655] vivid-019: unregistering vbi39 [ 476.823346][ T9655] vivid-019: unregistering swradio19 [ 476.834596][ T9655] vivid-019: unregistering radio38 [ 476.839867][ T9655] vivid-019: unregistering radio39 [ 476.853526][ T9655] vivid-019: unregistering video85 [ 476.856129][ T9655] vivid-019: unregistering video86 [ 476.859965][ T9655] vivid-019: unregistering v4l-touch19 [ 476.901669][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 476.905642][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 476.911114][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 476.917200][ T9655] vivid-020: unregistering video87 [ 476.920424][ T9655] vivid-020: unregistering video88 [ 476.923727][ T9655] vivid-020: unregistering vbi40 [ 476.929631][ T9655] vivid-020: unregistering vbi41 [ 476.938979][ T9655] vivid-020: unregistering swradio20 [ 476.942484][ T9655] vivid-020: unregistering radio40 [ 476.947621][ T9655] vivid-020: unregistering radio41 [ 476.952940][ T9655] vivid-020: unregistering video89 [ 476.958934][ T9655] vivid-020: unregistering video90 [ 476.964249][ T9655] vivid-020: unregistering v4l-touch20 [ 477.018250][ T9655] vivid-021: unregistering video91 [ 477.061040][ T9655] vivid-021: unregistering video92 [ 477.070517][ T9655] vivid-021: unregistering vbi42 [ 477.074652][ T9655] vivid-021: unregistering vbi43 [ 477.077405][ T9655] vivid-021: unregistering swradio21 [ 477.081794][ T9655] vivid-021: unregistering radio42 [ 477.084481][ T9655] vivid-021: unregistering radio43 [ 477.087216][ T9655] vivid-021: unregistering video93 [ 477.094314][ T9655] vivid-021: unregistering video94 [ 477.102425][ T9655] vivid-021: unregistering v4l-touch21 [ 477.146388][ T9655] vivid-022: unregistering video95 [ 477.150340][ T9655] vivid-022: unregistering video96 [ 477.155463][ T9655] vivid-022: unregistering vbi44 [ 477.162169][ T9655] vivid-022: unregistering vbi45 [ 477.165485][ T9655] vivid-022: unregistering swradio22 [ 477.172419][ T9655] vivid-022: unregistering radio44 [ 477.177747][ T9655] vivid-022: unregistering radio45 [ 477.181601][ T9655] vivid-022: unregistering video97 [ 477.192699][ T9655] vivid-022: unregistering video98 [ 477.196888][ T9655] vivid-022: unregistering v4l-touch22 [ 477.202419][ T42] audit: type=1400 audit(1785843747.574:1691): avc: denied { write } for pid=9697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.236670][ T9655] vivid-023: unregistering video99 [ 477.245512][ T9655] vivid-023: unregistering video100 [ 477.251140][ T9655] vivid-023: unregistering vbi46 [ 477.260927][ T9655] vivid-023: unregistering vbi47 [ 477.263682][ T9655] vivid-023: unregistering swradio23 [ 477.266932][ T9655] vivid-023: unregistering radio46 [ 477.270690][ T9655] vivid-023: unregistering radio47 [ 477.273910][ T9655] vivid-023: unregistering video101 [ 477.278733][ T9655] vivid-023: unregistering video102 [ 477.281752][ T9655] vivid-023: unregistering v4l-touch23 [ 477.318909][ T5811] Bluetooth: hci4: command tx timeout [ 477.324127][ T42] audit: type=1400 audit(1785843747.694:1692): avc: denied { write } for pid=9700 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.429719][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 477.452061][ T5849] team0: left promiscuous mode [ 477.455920][ T5849] team_slave_0: left promiscuous mode [ 477.459480][ T5849] team_slave_1: left promiscuous mode [ 477.484749][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 477.506127][ T5849] hsr_slave_0: left promiscuous mode [ 477.536731][ T5849] hsr_slave_1: left promiscuous mode [ 477.541427][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.544422][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.559034][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.561966][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.585206][ T5849] veth1_macvtap: left promiscuous mode [ 477.587695][ T5849] veth0_macvtap: left promiscuous mode [ 477.590291][ T5849] veth0_vlan: left promiscuous mode [ 477.876656][ T5849] team0 (unregistering): Port device team_slave_1 removed [ 477.887893][ T5849] team0 (unregistering): Port device team_slave_0 removed [ 477.997502][ T9725] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 478.022176][ T9592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.030909][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.035809][ T9592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.045609][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.051230][ T9592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.058601][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.061502][ T9592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.070666][ T9592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.145418][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.185094][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.198108][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.200507][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.204914][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.207290][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.252903][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 478.274806][ T9761] cgroup: Name too long [ 478.304115][ T9764] team0: Device vlan2 is already an upper device of the team interface [ 478.386724][ T5811] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 478.484219][ T5849] IPVS: stop unused estimator thread 0... [ 478.647157][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 478.708101][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.748939][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 478.748960][ T42] audit: type=1400 audit(1785843749.114:1705): avc: denied { write } for pid=9799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.787294][ T9807] block2mtd: device name too long [ 478.849837][ T9816] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 478.854315][ T42] audit: type=1400 audit(1785843749.224:1706): avc: denied { write } for pid=9812 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.863611][ T42] audit: type=1400 audit(1785843749.224:1707): avc: denied { relabelto } for pid=9801 comm="syz.3.1191" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 478.884257][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 478.887302][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 478.888362][ T42] audit: type=1400 audit(1785843749.224:1708): avc: denied { associate } for pid=9801 comm="syz.3.1191" name="fuse" dev="devtmpfs" ino=105 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 478.894352][ T9825] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1196'. [ 478.900317][ T42] audit: type=1400 audit(1785843749.234:1709): avc: denied { read } for pid=9801 comm="syz.3.1191" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 478.918148][ T42] audit: type=1400 audit(1785843749.284:1710): avc: denied { write } for pid=9801 comm="syz.3.1191" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_var_run_t:s0" [ 478.937738][ T42] audit: type=1326 audit(1785843749.304:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.0.1197" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bf39e019 code=0x0 [ 478.954250][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 478.977946][ T9592] veth0_vlan: entered promiscuous mode [ 478.986800][ T9592] veth1_vlan: entered promiscuous mode [ 479.016749][ T9592] veth0_macvtap: entered promiscuous mode [ 479.022707][ T9592] veth1_macvtap: entered promiscuous mode [ 479.025407][ T42] audit: type=1400 audit(1785843749.394:1712): avc: denied { write } for pid=9834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.032793][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.046049][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.110430][ T5849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.124940][ T42] audit: type=1400 audit(1785843749.494:1713): avc: denied { write } for pid=9838 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.128131][ T5849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.191068][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.195272][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.218400][ T5877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.221199][ T5877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.233273][ T5823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.239086][ T5823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.251858][ T42] audit: type=1400 audit(1785843749.624:1714): avc: denied { write } for pid=9843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.321956][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1148'. [ 479.325175][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'. [ 479.350533][ T5877] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.355583][ T5877] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.362189][ T5877] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.367265][ T5877] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.398757][ T5811] Bluetooth: hci4: command tx timeout [ 479.620472][ T5894] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 479.702822][ T9864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1200'. [ 479.769585][ T5894] usb 10-1: not running at top speed; connect to a high speed hub [ 479.775977][ T5894] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 479.784109][ T5894] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 479.793375][ T5894] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 479.800237][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.807852][ T5894] usb 10-1: Product: syz [ 479.809339][ T5894] usb 10-1: Manufacturer: syz [ 479.813276][ T5894] usb 10-1: SerialNumber: syz [ 479.883901][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 479.884293][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 479.891579][ T9884] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 479.927306][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 479.931537][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 480.050091][ T5849] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.057421][ T5849] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.064763][ T5849] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.075795][ T5849] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.130076][ T9912] random: crng reseeded on system resumption [ 480.242510][ T9924] netlink: 'syz.4.1213': attribute type 8 has an invalid length. [ 480.338437][ T5768] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 480.488442][ T5768] usb 8-1: Using ep0 maxpacket: 16 [ 480.491691][ T5768] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 480.497144][ T5768] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.501655][ T5768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.504115][ T5768] usb 8-1: Product: syz [ 480.505490][ T5768] usb 8-1: Manufacturer: syz [ 480.507026][ T5768] usb 8-1: SerialNumber: syz [ 481.371100][ T9980] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 481.375770][ T9980] netlink: 'syz.4.1218': attribute type 2 has an invalid length. [ 481.396101][ T9982] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 481.468826][ T5811] Bluetooth: hci4: command tx timeout [ 481.497652][ T9985] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.501754][ T9985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.507030][ T9985] IPv6: NLM_F_CREATE should be set when creating new route [ 481.512523][ T9985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.515657][ T9985] IPv6: NLM_F_CREATE should be set when creating new route [ 481.797733][ T9996] overlayfs: failed lookup in lower (newroot/69, name='file1', err=-40): overlapping layers [ 482.046244][T10004] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.055628][T10004] team0: No ports can be present during mode change [ 482.238966][T10011] netlink: 'syz.4.1228': attribute type 8 has an invalid length. [ 482.316481][ T848] usb 10-1: USB disconnect, device number 2 [ 482.728485][ T848] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 482.868823][ T848] usb 10-1: device descriptor read/64, error -71 [ 482.959225][T10035] netlink: 'syz.4.1236': attribute type 29 has an invalid length. [ 482.961869][T10035] netlink: 'syz.4.1236': attribute type 3 has an invalid length. [ 483.108401][ T848] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 483.121453][ T9] usb 8-1: USB disconnect, device number 9 [ 483.182224][T10039] netlink: 'syz.3.1238': attribute type 8 has an invalid length. [ 483.238815][ T848] usb 10-1: device descriptor read/64, error -71 [ 483.348781][ T848] usb usb10-port1: attempt power cycle [ 483.701104][ T848] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 483.730497][ T848] usb 10-1: device descriptor read/8, error -71 [ 483.904149][T10068] kvm: user requested TSC rate below hardware speed [ 483.979845][ T848] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 484.000136][ T848] usb 10-1: device descriptor read/8, error -71 [ 484.003335][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 484.003352][ T42] audit: type=1400 audit(1785843754.374:1747): avc: denied { setopt } for pid=10070 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.013269][ T42] audit: type=1400 audit(1785843754.374:1748): avc: denied { connect } for pid=10070 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.054502][ T42] audit: type=1400 audit(1785843754.424:1749): avc: denied { map } for pid=10074 comm="syz.4.1249" path="socket:[35679]" dev="sockfs" ino=35679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 484.069530][T10075] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 484.120314][ T848] usb usb10-port1: unable to enumerate USB device [ 484.247550][T10083] __nla_validate_parse: 27 callbacks suppressed [ 484.247571][T10083] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1254'. [ 484.489653][ T42] audit: type=1400 audit(1785843754.854:1750): avc: denied { name_connect } for pid=10095 comm="syz.0.1258" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 484.522748][ T42] audit: type=1400 audit(1785843754.894:1751): avc: denied { write } for pid=10095 comm="syz.0.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 484.794339][ T42] audit: type=1400 audit(1785843755.164:1752): avc: denied { getopt } for pid=10113 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 484.877581][ T42] audit: type=1400 audit(1785843755.244:1753): avc: denied { accept } for pid=10121 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.102740][ T42] audit: type=1400 audit(1785843755.474:1754): avc: denied { map } for pid=10130 comm="syz.4.1271" path="socket:[37521]" dev="sockfs" ino=37521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 485.169570][T10134] pim6reg1: entered promiscuous mode [ 485.171857][T10134] pim6reg1: entered allmulticast mode [ 485.181761][ T42] audit: type=1400 audit(1785843755.554:1755): avc: denied { mounton } for pid=10133 comm="syz.4.1272" path="/proc/276/cgroup" dev="proc" ino=37543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 485.397032][ T42] audit: type=1400 audit(1785843755.764:1756): avc: denied { shutdown } for pid=10140 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.400182][T10141] loop5: detected capacity change from 0 to 7 [ 485.576841][T10142] loop5: detected capacity change from 7 to 0 [ 485.576850][T10141] ldm_validate_partition_table(): Disk read failed. [ 485.576881][T10141] Dev loop5: unable to read RDB block 0 [ 485.585163][T10141] loop5: unable to read partition table [ 485.588099][T10141] loop5: partition table beyond EOD, truncated [ 485.590769][T10141] loop_reread_partitions: partition scan of loop5 (CD:qn;;ցP ) failed (rc=-5) [ 485.839461][T10160] [U]  [ 485.993638][T10172] null_blk: nullb1: using native zone append [ 486.000421][ T9] IPVS: starting estimator thread 0... [ 486.085982][T10172] null_blk: disk nullb1 created [ 486.108560][T10176] IPVS: using max 45 ests per chain, 108000 per kthread [ 486.289718][T10188] netlink: 'syz.3.1290': attribute type 8 has an invalid length. [ 486.289733][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 486.415371][T10196] netlink: 'syz.5.1292': attribute type 1 has an invalid length. [ 486.688589][T10221] netlink: 'syz.4.1300': attribute type 8 has an invalid length. [ 486.691299][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 486.719859][T10222] block nbd3: shutting down sockets [ 486.981284][T10231] xt_policy: output policy not valid in PREROUTING and INPUT [ 487.050696][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 487.053916][T10234] selinux_netlink_send: 1 callbacks suppressed [ 487.053926][T10234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33040 sclass=netlink_route_socket pid=10234 comm=syz.4.1304 [ 487.214985][T10240] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 487.413451][T10248] netlink: 'syz.4.1309': attribute type 8 has an invalid length. [ 487.454309][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 487.799203][ T6240] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 487.833416][T10283] netlink: 'syz.5.1324': attribute type 8 has an invalid length. [ 487.836682][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 487.847406][T10283] bond0: entered promiscuous mode [ 487.849814][T10283] bond_slave_0: entered promiscuous mode [ 487.852639][T10283] bond_slave_1: entered promiscuous mode [ 487.856995][T10283] gretap0: entered promiscuous mode [ 487.860810][T10283] team0: entered promiscuous mode [ 487.862903][T10283] team_slave_0: entered promiscuous mode [ 487.865430][T10283] team_slave_1: entered promiscuous mode [ 487.869723][T10283] hsr1: entered promiscuous mode [ 487.906365][T10286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.960266][ T6240] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 487.964539][ T6240] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.968060][ T6240] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.971817][ T6240] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.976030][ T6240] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.979503][ T6240] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.997908][T10293] CIFS: Attempting to mount //127.0.0.1/share [ 488.051323][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 488.078836][T10294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.081526][T10294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.084107][T10294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.086640][T10294] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 488.094104][T10294] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 488.107903][T10294] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 488.110688][T10294] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 488.122349][T10294] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 488.143302][T10294] bridge1: entered promiscuous mode [ 488.145409][T10294] bridge1: entered allmulticast mode [ 488.150596][T10294] netlink: 'syz.5.1328': attribute type 11 has an invalid length. [ 488.320554][T10318] input: syz0 as /devices/virtual/input/input18 [ 488.451513][T10321] netlink: 'syz.0.1334': attribute type 19 has an invalid length. [ 488.456624][T10321] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 488.521120][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 488.524319][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 488.628059][T10327] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 488.632263][T10327] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 488.796271][T10293] CIFS: VFS: Error connecting to socket. Aborting operation. [ 488.799716][T10293] CIFS: VFS: cifs_mount failed w/return code = -4 [ 488.892977][ T5811] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 488.902432][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 489.101494][T10339] clocksource: Switched to clocksource acpi_pm [ 489.106441][T10339] clocksource: Switched to clocksource tsc [ 489.139089][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.177579][ T5894] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 489.180682][ T5894] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 489.203523][ T91] wlan1: authenticated [ 489.205941][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.214890][ T91] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 489.242416][ T5811] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 489.255884][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 489.255902][ T42] audit: type=1400 audit(1785843759.621:1796): avc: denied { read } for pid=10344 comm="syz.3.1343" dev="sockfs" ino=36827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 489.270386][ T91] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 489.274509][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.276432][ T91] wlan1: associated [ 489.375104][ T42] audit: type=1400 audit(1785843759.741:1797): avc: denied { getopt } for pid=10350 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 489.647657][T10366] netlink: 'syz.0.1351': attribute type 8 has an invalid length. [ 489.651150][T10366] __nla_validate_parse: 3 callbacks suppressed [ 489.651166][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 489.763177][T10368] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 489.784499][T10368] bond3: entered promiscuous mode [ 489.788821][T10368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.809684][T10368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.812434][T10368] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 489.815817][T10368] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 489.823256][T10368] bond3: (slave ip6gre1): making interface the new active one [ 489.828099][T10368] ip6gre1: entered promiscuous mode [ 489.830972][T10368] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 489.837563][T10368] gfs2: Unknown parameter 'kC' [ 489.866424][T10373] syzkaller1: entered promiscuous mode [ 489.868249][T10373] syzkaller1: entered allmulticast mode [ 490.022335][T10377] 9pnet: Found fid 0 not clunked [ 490.091249][T10382] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 490.103991][ T42] audit: type=1400 audit(1785843760.471:1798): avc: denied { ioctl } for pid=10376 comm="syz.5.1356" path="cgroup:[4026532869]" dev="nsfs" ino=4026532869 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.109391][T10382] ehci-pci 0000:00:1d.7: remove, state 4 [ 490.113316][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.113420][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.113501][ T5808] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.128194][T10382] usb usb2: USB disconnect, device number 1 [ 490.158396][ T42] audit: type=1400 audit(1785843760.521:1799): avc: denied { mounton } for pid=10381 comm="syz.0.1357" path="/304/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 490.161074][T10382] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 490.188806][ T5799] Bluetooth: hci4: command 0x0c1a tx timeout [ 490.246412][T10387] FAULT_INJECTION: forcing a failure. [ 490.246412][T10387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.255680][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.5.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.255712][T10387] Tainted: [L]=SOFTLOCKUP [ 490.255718][T10387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.255729][T10387] Call Trace: [ 490.255736][T10387] [ 490.255743][T10387] dump_stack_lvl+0x100/0x190 [ 490.255855][T10387] should_fail_ex.cold+0x5/0xa [ 490.255879][T10387] _copy_from_user+0x2e/0xd0 [ 490.255918][T10387] do_ip_vs_set_ctl+0x53c/0xc90 [ 490.255965][T10387] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 490.255990][T10387] ? rcu_is_watching+0x12/0xc0 [ 490.256030][T10387] ? find_held_lock+0x2b/0x80 [ 490.256046][T10387] ? nf_sockopt_find.isra.0+0x222/0x290 [ 490.256067][T10387] ? nf_sockopt_find.isra.0+0x222/0x290 [ 490.256097][T10387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.256157][T10387] ? nf_setsockopt+0x8d/0xf0 [ 490.256178][T10387] nf_setsockopt+0x8d/0xf0 [ 490.256202][T10387] ip_setsockopt+0xcb/0xf0 [ 490.256229][T10387] sctp_setsockopt+0x161/0xb370 [ 490.256264][T10387] ? __pfx_sctp_setsockopt+0x10/0x10 [ 490.256283][T10387] ? __fget_files+0x215/0x3d0 [ 490.256314][T10387] ? selinux_socket_setsockopt+0x6a/0x80 [ 490.256347][T10387] ? sock_common_setsockopt+0x2e/0xf0 [ 490.256373][T10387] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 490.256392][T10387] do_sock_setsockopt+0xf3/0x1d0 [ 490.256411][T10387] __sys_setsockopt+0x195/0x220 [ 490.256429][T10387] __x64_sys_setsockopt+0xbd/0x160 [ 490.256442][T10387] ? do_syscall_64+0x90/0x870 [ 490.256457][T10387] ? lockdep_hardirqs_on+0x78/0x100 [ 490.256471][T10387] do_syscall_64+0x115/0x870 [ 490.256484][T10387] ? clear_bhb_loop+0x40/0x90 [ 490.256498][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.256510][T10387] RIP: 0033:0x7fecadf9e019 [ 490.256521][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.256537][T10387] RSP: 002b:00007fecaef3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 490.256551][T10387] RAX: ffffffffffffffda RBX: 00007fecae225fa0 RCX: 00007fecadf9e019 [ 490.256558][T10387] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 490.256565][T10387] RBP: 00007fecaef3a090 R08: 0000000000000044 R09: 0000000000000000 [ 490.256571][T10387] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.256578][T10387] R13: 00007fecae226038 R14: 00007fecae225fa0 R15: 00007ffd877fe8b8 [ 490.256592][T10387] [ 490.401339][ T42] audit: type=1400 audit(1785843760.771:1800): avc: denied { getopt } for pid=10394 comm="syz.5.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 490.410172][T10395] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 490.519349][ T6240] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 490.584177][ T1046] usb 9-1: USB disconnect, device number 3 [ 490.677014][ T42] audit: type=1400 audit(1785843761.041:1801): avc: denied { write } for pid=10414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.705013][ T6240] usb 1-1: not running at top speed; connect to a high speed hub [ 490.727765][ T6240] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 490.739231][ T6240] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 490.746128][ T6240] usb 1-1: Product: QEMU USB Tablet [ 490.749893][ T6240] usb 1-1: Manufacturer: QEMU [ 490.750014][T10425] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 490.751839][ T6240] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 490.762375][ T42] audit: type=1400 audit(1785843761.131:1802): avc: denied { write } for pid=10422 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.772929][T10425] FAULT_INJECTION: forcing a failure. [ 490.772929][T10425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.782837][T10425] CPU: 3 UID: 0 PID: 10425 Comm: syz.5.1370 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.782863][T10425] Tainted: [L]=SOFTLOCKUP [ 490.782868][T10425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.782876][T10425] Call Trace: [ 490.782881][T10425] [ 490.782887][T10425] dump_stack_lvl+0x100/0x190 [ 490.782912][T10425] should_fail_ex.cold+0x5/0xa [ 490.782931][T10425] _copy_to_user+0x32/0xd0 [ 490.782953][T10425] simple_read_from_buffer+0xcb/0x170 [ 490.782970][T10425] proc_fail_nth_read+0x1af/0x230 [ 490.782993][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.783014][T10425] ? rw_verify_area+0xce/0x6d0 [ 490.783068][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.783089][T10425] vfs_read+0x1e4/0xb40 [ 490.783126][T10425] ? __pfx_vfs_read+0x10/0x10 [ 490.783146][T10425] ? __fget_files+0x215/0x3d0 [ 490.783164][T10425] ? __fget_files+0x21f/0x3d0 [ 490.783183][T10425] ksys_read+0x12a/0x250 [ 490.783203][T10425] ? __pfx_ksys_read+0x10/0x10 [ 490.783229][T10425] do_syscall_64+0x115/0x870 [ 490.783247][T10425] ? clear_bhb_loop+0x40/0x90 [ 490.783264][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.783278][T10425] RIP: 0033:0x7fecadf5e84e [ 490.783292][T10425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.783305][T10425] RSP: 002b:00007fecaef39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.783319][T10425] RAX: ffffffffffffffda RBX: 00007fecaef3a6c0 RCX: 00007fecadf5e84e [ 490.783329][T10425] RDX: 000000000000000f RSI: 00007fecaef3a0a0 RDI: 0000000000000004 [ 490.783337][T10425] RBP: 00007fecaef3a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.783345][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.783352][T10425] R13: 00007fecae226038 R14: 00007fecae225fa0 R15: 00007ffd877fe8b8 [ 490.783372][T10425] [ 490.951972][T10383] usb 1-1: USB disconnect, device number 2 [ 490.978447][ T42] audit: type=1400 audit(1785843761.341:1803): avc: denied { write } for pid=10431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.036479][ T42] audit: type=1400 audit(1785843761.401:1804): avc: denied { write } for pid=10443 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.047031][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 491.061604][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1372'. [ 491.149278][T10444] i2c i2c-1: dtv_property_process_set: SET cmd 0x84270060 undefined [ 491.178038][T10383] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 491.210869][T10383] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 491.214879][ T42] audit: type=1400 audit(1785843761.581:1805): avc: denied { listen } for pid=10456 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 491.220360][T10383] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 491.269099][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 491.299152][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 491.384190][T10465] bond3: entered promiscuous mode [ 491.386386][T10465] bond3: entered allmulticast mode [ 491.448564][T10383] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 491.450370][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 491.454734][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 491.461853][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.462877][T10383] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 491.468129][ T9] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 491.468881][T10383] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 491.472318][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.475391][ T5450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.475553][T10383] usb usb2: Product: EHCI Host Controller [ 491.475571][T10383] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 491.475586][T10383] usb usb2: SerialNumber: 0000:00:1d.7 [ 491.477630][ T9] usb 10-1: Product: 焒垉蟢习♘嫗賝푼⸕ጂ [ 491.494003][ T9] usb 10-1: Manufacturer: ᐇ [ 491.500361][ T9] usb 10-1: SerialNumber: 벚„놴喉༽䰲鰚긔 [ 491.768482][T10487] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 491.794887][T10487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.802604][T10485] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 491.818619][T10487] bond1: (slave gretap1): making interface the new active one [ 491.823464][T10487] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 491.824250][T10485] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 491.832433][T10487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10487 comm=syz.4.1385 [ 491.854743][T10485] ohci-pci 0000:00:02.0: irq 27, io mem 0xfea80000 [ 491.919553][T10485] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 491.921944][T10485] ohci-pci 0000:00:02.0: can't start [ 491.930743][T10485] ohci-pci 0000:00:02.0: startup error -1 [ 491.932907][T10485] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 491.974229][T10485] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 491.976448][T10485] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 492.002951][T10493] erspan0: entered promiscuous mode [ 492.095536][T10505] cgroup: none used incorrectly [ 492.177369][T10514] CUSE: unknown device info "" [ 492.179765][T10514] CUSE: unknown device info "" [ 492.181767][T10514] CUSE: unknown device info "" [ 492.183795][T10514] CUSE: unknown device info "" [ 492.185941][T10514] CUSE: DEVNAME unspecified [ 492.188539][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 492.278732][ T5799] Bluetooth: hci4: command 0x0c1a tx timeout [ 492.346054][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 492.364717][T10530] overlayfs: unescaped trailing colons in lowerdir mount option. [ 493.394101][T10550] FAULT_INJECTION: forcing a failure. [ 493.394101][T10550] name failslab, interval 1, probability 0, space 0, times 0 [ 493.401612][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.0.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.401647][T10550] Tainted: [L]=SOFTLOCKUP [ 493.401654][T10550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.401663][T10550] Call Trace: [ 493.401670][T10550] [ 493.401678][T10550] dump_stack_lvl+0x100/0x190 [ 493.401709][T10550] should_fail_ex.cold+0x5/0xa [ 493.401731][T10550] should_failslab+0xc2/0x120 [ 493.401756][T10550] __kmalloc_noprof+0xfc/0x820 [ 493.401780][T10550] ? tomoyo_encode2+0xfb/0x3c0 [ 493.401803][T10550] tomoyo_encode2+0xfb/0x3c0 [ 493.401826][T10550] tomoyo_unix_entry+0x343/0x640 [ 493.401847][T10550] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 493.401876][T10550] ? get_pid_task+0x106/0x250 [ 493.401901][T10550] tomoyo_socket_bind_permission+0x307/0x350 [ 493.401923][T10550] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 493.401943][T10550] ? __might_fault+0xc5/0x140 [ 493.401962][T10550] ? __might_fault+0xc5/0x140 [ 493.401991][T10550] security_socket_bind+0xd3/0x230 [ 493.402020][T10550] __sys_bind+0x140/0x260 [ 493.402042][T10550] ? __pfx___sys_bind+0x10/0x10 [ 493.402061][T10550] ? __fget_files+0x21f/0x3d0 [ 493.402092][T10550] ? __pfx_ksys_write+0x10/0x10 [ 493.402116][T10550] __x64_sys_bind+0x72/0xb0 [ 493.402135][T10550] ? lockdep_hardirqs_on+0x78/0x100 [ 493.402159][T10550] do_syscall_64+0x115/0x870 [ 493.402182][T10550] ? clear_bhb_loop+0x40/0x90 [ 493.402205][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.402225][T10550] RIP: 0033:0x7f44bf39e019 [ 493.402243][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.402262][T10550] RSP: 002b:00007f44c01c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 493.402282][T10550] RAX: ffffffffffffffda RBX: 00007f44bf625fa0 RCX: 00007f44bf39e019 [ 493.402294][T10550] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 493.402305][T10550] RBP: 00007f44c01c8090 R08: 0000000000000000 R09: 0000000000000000 [ 493.402316][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.402325][T10550] R13: 00007f44bf626038 R14: 00007f44bf625fa0 R15: 00007ffce53ae6c8 [ 493.402350][T10550] [ 493.714493][T10568] loop2: detected capacity change from 0 to 7 [ 493.722926][T10568] Dev loop2: unable to read RDB block 7 [ 493.724916][T10568] loop2: AHDI p1 p2 p3 [ 493.726448][T10568] loop2: partition table partially beyond EOD, truncated [ 493.729455][T10568] loop2: p1 start 1601398130 is beyond EOD, truncated [ 493.731752][T10568] loop2: p2 start 1702059890 is beyond EOD, truncated [ 494.064661][ T5908] usb 10-1: USB disconnect, device number 7 [ 494.220588][T10584] FAULT_INJECTION: forcing a failure. [ 494.220588][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 494.225616][T10584] CPU: 3 UID: 0 PID: 10584 Comm: syz.5.1404 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.225645][T10584] Tainted: [L]=SOFTLOCKUP [ 494.225651][T10584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 494.225661][T10584] Call Trace: [ 494.225669][T10584] [ 494.225676][T10584] dump_stack_lvl+0x100/0x190 [ 494.225707][T10584] should_fail_ex.cold+0x5/0xa [ 494.225732][T10584] should_failslab+0xc2/0x120 [ 494.225757][T10584] __kmalloc_noprof+0xfc/0x820 [ 494.225778][T10584] ? unix_create_addr+0x24/0x100 [ 494.225801][T10584] unix_create_addr+0x24/0x100 [ 494.225819][T10584] unix_bind+0x287/0x1650 [ 494.225843][T10584] ? __pfx_unix_bind+0x10/0x10 [ 494.225870][T10584] __sys_bind+0x1a9/0x260 [ 494.225897][T10584] ? __pfx___sys_bind+0x10/0x10 [ 494.225914][T10584] ? __fget_files+0x21f/0x3d0 [ 494.225942][T10584] ? __pfx_ksys_write+0x10/0x10 [ 494.225962][T10584] __x64_sys_bind+0x72/0xb0 [ 494.225978][T10584] ? lockdep_hardirqs_on+0x78/0x100 [ 494.225999][T10584] do_syscall_64+0x115/0x870 [ 494.226018][T10584] ? clear_bhb_loop+0x40/0x90 [ 494.226038][T10584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.226055][T10584] RIP: 0033:0x7fecadf9e019 [ 494.226071][T10584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.226087][T10584] RSP: 002b:00007fecaef3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 494.226106][T10584] RAX: ffffffffffffffda RBX: 00007fecae225fa0 RCX: 00007fecadf9e019 [ 494.226116][T10584] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 494.226126][T10584] RBP: 00007fecaef3a090 R08: 0000000000000000 R09: 0000000000000000 [ 494.226135][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.226146][T10584] R13: 00007fecae226038 R14: 00007fecae225fa0 R15: 00007ffd877fe8b8 [ 494.226169][T10584] [ 494.306038][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.336384][T10586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 494.340601][T10586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 494.355220][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 494.355239][ T42] audit: type=1400 audit(1785843764.721:1828): avc: denied { setattr } for pid=10587 comm="syz.5.1406" name="" dev="pipefs" ino=41118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 494.358570][ T5799] Bluetooth: hci4: command 0x0c1a tx timeout [ 494.591374][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 494.682235][ T42] audit: type=1400 audit(1785843765.051:1829): avc: denied { write } for pid=10608 comm="syz.0.1413" name="/" dev="9p" ino=76043877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.702034][ T42] audit: type=1400 audit(1785843765.071:1830): avc: denied { write } for pid=10608 comm="syz.0.1413" name="/" dev="9p" ino=76043877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.812356][T10614] No source specified [ 494.843135][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 495.095227][T10623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 495.114131][ T5799] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 495.201883][T10631] tipc: Trying to set illegal importance in message [ 495.280705][T10637] 9pnet_fd: p9_fd_create_tcp (10637): problem binding to privport [ 495.385563][T10633] syzkaller0: entered promiscuous mode [ 495.387457][T10633] syzkaller0: entered allmulticast mode [ 495.500697][T10648] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1424'. [ 495.504456][T10648] @: renamed from bridge_slave_0 (while UP) [ 495.510276][T10648] @: left allmulticast mode [ 495.512206][T10648] @: left promiscuous mode [ 495.518209][T10648] bridge0: port 1(@) entered disabled state [ 495.527074][T10648] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1424'. [ 495.643996][T10650] netlink: 'syz.5.1425': attribute type 17 has an invalid length. [ 495.647317][T10650] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1425'. [ 496.113990][ T42] audit: type=1400 audit(1785843766.481:1831): avc: denied { read } for pid=10669 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 496.228444][ T5849] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.231530][ T5849] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.390452][T10677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10677 comm=syz.4.1434 [ 496.400200][T10677] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.615666][T10684] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 496.620245][T10684] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 496.661648][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 496.797119][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1442'. [ 496.836448][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1442'. [ 496.839542][T10696] nbd: nbd64 already in use [ 497.020539][T10706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 497.163790][T10712] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 497.207786][T10714] tmpfs: Bad value for 'mpol' [ 497.215256][T10714] loop6: detected capacity change from 0 to 2640 [ 497.223680][T10714] buffer_io_error: 8 callbacks suppressed [ 497.223700][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.230578][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.234483][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.237696][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.242126][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.245487][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.248731][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.249455][ T42] audit: type=1400 audit(1785843767.621:1832): avc: denied { bind } for pid=10709 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 497.251966][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.251986][T10714] ldm_validate_partition_table(): Disk read failed. [ 497.261343][ T42] audit: type=1400 audit(1785843767.631:1833): avc: denied { connect } for pid=10709 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 497.263564][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.275087][T10711] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 497.278150][T10714] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.280777][T10711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 497.282337][T10711] vhci_hcd vhci_hcd.0: Device attached [ 497.284630][T10714] Dev loop6: unable to read RDB block 0 [ 497.293064][T10714] loop6: unable to read partition table [ 497.295658][T10716] vhci_hcd: connection closed [ 497.295819][T10714] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 497.296410][ T5849] vhci_hcd vhci_hcd.4: stop threads [ 497.303215][ T5849] vhci_hcd vhci_hcd.4: release socket [ 497.305001][ T5849] vhci_hcd vhci_hcd.4: disconnect device [ 497.534322][T10714] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 497.538681][T10714] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 497.543362][T10714] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 497.547453][T10714] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 497.552750][T10714] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 497.556753][T10714] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 497.561312][T10714] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 497.565342][T10714] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 497.644783][T10719] bond1: Removing last ns target with arp_interval on [ 497.895958][ T42] audit: type=1400 audit(1785843768.261:1834): avc: denied { remount } for pid=10732 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 497.911789][T10735] FAULT_INJECTION: forcing a failure. [ 497.911789][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 497.919369][T10735] CPU: 3 UID: 0 PID: 10735 Comm: syz.4.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.919415][T10735] Tainted: [L]=SOFTLOCKUP [ 497.919422][T10735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.919431][T10735] Call Trace: [ 497.919437][T10735] [ 497.919444][T10735] dump_stack_lvl+0x100/0x190 [ 497.919495][T10735] should_fail_ex.cold+0x5/0xa [ 497.919532][T10735] should_failslab+0xc2/0x120 [ 497.919554][T10735] __kmalloc_noprof+0xfc/0x820 [ 497.919572][T10735] ? rcu_is_watching+0x12/0xc0 [ 497.919596][T10735] ? tomoyo_realpath_from_path+0xb6/0x690 [ 497.919623][T10735] tomoyo_realpath_from_path+0xb6/0x690 [ 497.919643][T10735] tomoyo_path_number_perm+0x23c/0x580 [ 497.919664][T10735] ? tomoyo_path_number_perm+0x22e/0x580 [ 497.919688][T10735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.919709][T10735] ? kasan_save_stack+0x3f/0x50 [ 497.919728][T10735] ? kasan_save_free_info+0x3b/0x70 [ 497.919751][T10735] ? __kasan_slab_free+0x5f/0x80 [ 497.919787][T10735] ? current_check_access_path+0x269/0x430 [ 497.919810][T10735] ? __pfx_current_check_access_path+0x10/0x10 [ 497.919830][T10735] ? putname+0xb1/0x110 [ 497.919853][T10735] tomoyo_path_mknod+0x164/0x190 [ 497.919871][T10735] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 497.919888][T10735] ? putname+0xb1/0x110 [ 497.919905][T10735] ? __asan_memcpy+0x3c/0x60 [ 497.919919][T10735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.919942][T10735] security_path_mknod+0x161/0x300 [ 497.919962][T10735] unix_bind+0x311/0x1650 [ 497.919991][T10735] ? __pfx_unix_bind+0x10/0x10 [ 497.920016][T10735] __sys_bind+0x1a9/0x260 [ 497.920034][T10735] ? __pfx___sys_bind+0x10/0x10 [ 497.920049][T10735] ? __fget_files+0x21f/0x3d0 [ 497.920074][T10735] ? __pfx_ksys_write+0x10/0x10 [ 497.920093][T10735] __x64_sys_bind+0x72/0xb0 [ 497.920108][T10735] ? lockdep_hardirqs_on+0x78/0x100 [ 497.920129][T10735] do_syscall_64+0x115/0x870 [ 497.920147][T10735] ? clear_bhb_loop+0x40/0x90 [ 497.920167][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.920183][T10735] RIP: 0033:0x7f3b0299e019 [ 497.920198][T10735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.920213][T10735] RSP: 002b:00007f3b037d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 497.920231][T10735] RAX: ffffffffffffffda RBX: 00007f3b02c25fa0 RCX: 00007f3b0299e019 [ 497.920241][T10735] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 497.920251][T10735] RBP: 00007f3b037d5090 R08: 0000000000000000 R09: 0000000000000000 [ 497.920261][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.920270][T10735] R13: 00007f3b02c26038 R14: 00007f3b02c25fa0 R15: 00007ffeffcbe2b8 [ 497.920293][T10735] [ 497.920333][T10735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 498.334899][T10751] usb usb9: usbfs: process 10751 (syz.4.1458) did not claim interface 10 before use [ 498.453182][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.720753][ T5908] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 498.888436][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 498.891567][ T5908] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 498.894291][ T5908] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.897528][ T5908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.901624][ T5908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.905035][ T5908] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.909410][ T5908] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.912455][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.124379][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 500.134045][ T42] audit: type=1400 audit(1785843770.491:1835): avc: denied { name_bind } for pid=10766 comm="syz.0.1464" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 500.191071][ T42] audit: type=1400 audit(1785843770.561:1836): avc: denied { write } for pid=10769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.237885][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1467'. [ 500.263288][ T42] audit: type=1400 audit(1785843770.631:1837): avc: denied { write } for pid=10781 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.281117][T10786] 9pnet_fd: Insufficient options for proto=fd [ 500.366986][ T42] audit: type=1400 audit(1785843770.731:1838): avc: denied { write } for pid=10790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.443490][T10804] binder_alloc: 10802: binder_alloc_buf, no vma [ 500.456985][ T42] audit: type=1400 audit(1785843770.821:1839): avc: denied { write } for pid=10800 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.537832][ T42] audit: type=1400 audit(1785843770.901:1840): avc: denied { ioctl } for pid=10812 comm="syz.3.1478" path="socket:[40599]" dev="sockfs" ino=40599 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 500.538103][T10813] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.553875][T10813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.556979][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 500.565811][T10813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.568736][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 500.574906][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.576654][T10813] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1478'. [ 500.584507][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 500.601733][T10813] vlan3: entered promiscuous mode [ 500.630001][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.684671][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.832742][T10830] Need at least one configuration in g1. [ 500.836517][T10830] udc usbip-vudc.0: failed to start g1: -22 [ 500.838959][T10830] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 500.852615][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 500.863804][T10830] UDC core: g1: couldn't find an available UDC or it's busy [ 500.902749][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 500.924105][T10830] nbd: must specify at least one socket [ 500.926714][T10830] nbd: must specify an index to disconnect [ 500.979698][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 501.328822][ T42] audit: type=1400 audit(1785843771.691:1841): avc: denied { setattr } for pid=10849 comm="syz.0.1490" name="XDP" dev="sockfs" ino=41547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 501.490645][ T5908] usb 10-1: USB disconnect, device number 8 [ 501.563418][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.699915][ T42] audit: type=1400 audit(1785843772.071:1842): avc: denied { map } for pid=10867 comm="syz.5.1495" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.749284][T10857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.846963][ T42] audit: type=1400 audit(1785843772.211:1843): avc: denied { append } for pid=10874 comm="syz.5.1498" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 501.847935][T10875] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1498'. [ 501.942786][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 501.967783][T10882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.188040][ T42] audit: type=1400 audit(1785843772.551:1844): avc: denied { write } for pid=10890 comm="syz.5.1504" name="/" dev="9p" ino=76043877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.286700][T10898] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 502.290964][T10898] syzkaller1: group set to 0 [ 502.408541][ T1496] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 502.448818][T10908] No such timeout policy "s" [ 502.453100][T10908] netlink: Failed to associated timeout policy 's' [ 502.559058][ T1496] usb 9-1: Using ep0 maxpacket: 8 [ 502.563326][ T1496] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 502.566867][ T1496] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.570994][ T1496] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.575025][ T1496] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.579557][ T1496] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.585462][ T1496] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.589953][ T1496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.738544][ T5908] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 502.920545][ T5908] usb 10-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 502.926496][ T5908] usb 10-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 502.930451][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 502.933926][ T5908] usb 10-1: Product: syz [ 502.935741][ T5908] usb 10-1: Manufacturer: syz [ 503.716697][T10939] tmpfs: Bad value for 'mpol' [ 503.772844][T10941] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 503.859464][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 504.147842][ T5799] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 504.268249][T10955] netlink: 'syz.3.1526': attribute type 2 has an invalid length. [ 504.501863][T10969] binder: BINDER_SET_CONTEXT_MGR already set [ 504.504225][T10969] binder: 10968:10969 ioctl 4018620d 200000000100 returned -16 [ 504.513756][T10968] ima: policy update completed [ 504.937653][T10982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.179786][ T5908] usb 9-1: USB disconnect, device number 4 [ 505.363014][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 505.363032][ T42] audit: type=1400 audit(1785843775.731:1858): avc: denied { write } for pid=10993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.421839][ T42] audit: type=1400 audit(1785843775.791:1859): avc: denied { write } for pid=10996 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.492674][ T1046] usb 10-1: USB disconnect, device number 9 [ 505.562034][T11003] ip6gre1: entered promiscuous mode [ 505.564213][T11003] ip6gre1: entered allmulticast mode [ 505.571026][ T42] audit: type=1400 audit(1785843775.941:1860): avc: denied { create } for pid=11000 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 505.581428][T11002] 9pnet_virtio: no channels available for device syz [ 505.618521][ T5908] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 505.788723][ T5908] usb 9-1: Using ep0 maxpacket: 8 [ 505.798199][ T5908] usb 9-1: config 9 has an invalid interface number: 194 but max is 0 [ 505.802985][ T5908] usb 9-1: config 9 has no interface number 0 [ 505.806899][ T5908] usb 9-1: config 9 interface 194 has no altsetting 0 [ 505.808487][T11015] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 505.812337][ T5908] usb 9-1: New USB device found, idVendor=18ef, idProduct=e00f, bcdDevice=66.38 [ 505.817701][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.822576][ T5908] usb 9-1: Product: 雱濚ఢṚ뒚쏧绋勫黣癦₽⹜⶘㘶휚۽ᴑ쳸ꍰ蘭ﱁ霰롃濅㽒ɾ뱂횀嶁歗樝⊱ᇥ岆⧟颷䮦챚隸৆﯐遥悦뺶뛏凳췁绀ឨ曰犥줋㢛堍ժ㢁ﬦ랾ࢍ蔞鳬坷ό퐎찬Ԫﮊ䗗ࢪ醷༾敋왟 [ 505.838518][ T5908] usb 9-1: Manufacturer: 풋ー蓇뭙㣽骂꠆婾ළ॒⩐䪤᣺ཀ쑢촞轉¢틎ݮﵙ∮瞠눵鶕圁嗿韴휽䌌莰㯝砏㨶귰胒⺐◝諉䟵맄❒쩩㩪小꿚Ⱶ⊈늺㣇䠤緥ዔ [ 505.845599][ T5908] usb 9-1: SerialNumber: 箉㳗莼릫騼蹜䅸뷕Тၼ噜궝∏篶훈㹨ꗞ务祹ꁀ湇⒖ڰᐱ봼૚煼有㞾䊢戧琫࿠몌鴈툷섥鳧鷶꼀㯶⪦堠衑ᵝﱼ锤騃穴ܢ셮厊跷鼍䧈မ쀗ꇦ轕瀂孋绿折㋈䩭Ẻ旣ޤ䋵滛킯⠲⨪Лԍ튄㺡烊瘼㩨䦍驅졩⸬ᨒ萹㇤疂쾗駄 [ 505.955822][ T42] audit: type=1400 audit(1785843776.321:1861): avc: denied { getopt } for pid=11024 comm="syz.5.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.755863][T11069] netlink: 'syz.5.1564': attribute type 21 has an invalid length. [ 506.759328][T11069] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.762535][T11069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.765390][T11069] IPv6: NLM_F_CREATE should be set when creating new route [ 506.770150][T11069] IPv6: NLM_F_CREATE should be set when creating new route [ 506.773187][T11069] IPv6: NLM_F_CREATE should be set when creating new route [ 506.778887][T11069] netlink: 'syz.5.1564': attribute type 21 has an invalid length. [ 506.782131][T11069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.827116][ T42] audit: type=1326 audit(1785843777.191:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11071 comm="syz.5.1565" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecadf9e019 code=0x0 [ 507.007042][T11077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.173293][ T42] audit: type=1400 audit(1785843777.541:1863): avc: denied { rename } for pid=11076 comm="syz.3.1566" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 507.311177][T11081] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 507.521064][T11084] netlink: 'syz.3.1568': attribute type 7 has an invalid length. [ 507.524321][T11084] netlink: 'syz.3.1568': attribute type 8 has an invalid length. [ 507.542777][T11086] netlink: 'syz.3.1568': attribute type 7 has an invalid length. [ 507.546372][T11086] netlink: 'syz.3.1568': attribute type 8 has an invalid length. [ 508.269078][ T9] usb 9-1: USB disconnect, device number 5 [ 508.319039][ T42] audit: type=1400 audit(1785843778.681:1864): avc: denied { write } for pid=11096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.379369][ T42] audit: type=1400 audit(1785843778.751:1865): avc: denied { write } for pid=11099 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.423511][T11106] /dev/sg0: Can't lookup blockdev [ 508.499381][ T42] audit: type=1400 audit(1785843778.871:1866): avc: denied { write } for pid=11108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.580031][ T42] audit: type=1400 audit(1785843778.951:1867): avc: denied { write } for pid=11121 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.587991][T11125] loop5: detected capacity change from 0 to 7 [ 508.617493][T11128] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 508.793395][T11125] Dev loop5: unable to read RDB block 7 [ 508.795485][T11133] loop5: detected capacity change from 7 to 0 [ 508.798411][T11125] loop5: unable to read partition table [ 508.801088][T11125] loop5: partition table beyond EOD, truncated [ 508.803836][T11125] loop_reread_partitions: partition scan of loop5 (CD:qn;;ցP ) failed (rc=-5) [ 508.830347][T11142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.882386][T11149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11149 comm=syz.5.1583 [ 509.734406][T11199] __nla_validate_parse: 4 callbacks suppressed [ 509.734430][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 509.758616][T11203] syz_tun: entered allmulticast mode [ 509.761194][T11203] syz_tun: left allmulticast mode [ 509.763429][T11201] lo: entered allmulticast mode [ 511.047606][T11245] binder_alloc: 11243: binder_alloc_buf size 24560 failed, no address space [ 511.052080][T11245] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 511.240034][T11250] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1609'. [ 511.243307][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 512.745148][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1611'. [ 512.819017][T11257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=199 sclass=netlink_route_socket pid=11257 comm=syz.0.1611 [ 513.545930][T11237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.675280][T11279] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1618'. [ 513.679917][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 513.738541][T11281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.761777][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 513.762145][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 513.765206][T11283] netlink: 'syz.3.1620': attribute type 30 has an invalid length. [ 513.769262][T11284] netlink: 'syz.3.1620': attribute type 30 has an invalid length. [ 513.964484][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 513.964502][ T42] audit: type=1400 audit(1785843784.331:1877): avc: denied { read } for pid=11299 comm="syz.3.1625" path="socket:[44596]" dev="sockfs" ino=44596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 513.994135][ T42] audit: type=1400 audit(1785843784.361:1878): avc: denied { ioctl } for pid=11293 comm="syz.0.1623" path="socket:[43621]" dev="sockfs" ino=43621 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 514.112411][T11303] team0 (unregistering): left promiscuous mode [ 514.114748][T11303] team_slave_0: left promiscuous mode [ 514.116769][T11303] team_slave_1: left promiscuous mode [ 514.126962][T11303] team0 (unregistering): Port device team_slave_0 removed [ 514.146111][T11303] team0 (unregistering): Port device team_slave_1 removed [ 514.334912][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 514.340113][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 514.723509][T11355] binder: 11354:11355 ioctl 40086e8b 200000000180 returned -22 [ 514.859428][T11362] fuse: Bad value for 'fd' [ 515.355432][T11338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.358166][T11338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.360812][T11338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.363405][T11338] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 515.431575][T11367] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 515.477897][ T5799] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 515.482211][T11377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11377 comm=syz.0.1652 [ 515.492912][T11375] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 515.512182][ T42] audit: type=1400 audit(1785843785.881:1879): avc: denied { lock } for pid=11374 comm="syz.4.1651" path="socket:[46512]" dev="sockfs" ino=46512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 515.522862][T11375] netlink: 'syz.4.1651': attribute type 2 has an invalid length. [ 515.525840][T11375] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 515.557599][T11381] FAULT_INJECTION: forcing a failure. [ 515.557599][T11381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.565367][T11381] CPU: 3 UID: 0 PID: 11381 Comm: syz.4.1655 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.565396][T11381] Tainted: [L]=SOFTLOCKUP [ 515.565401][T11381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.565412][T11381] Call Trace: [ 515.565419][T11381] [ 515.565426][T11381] dump_stack_lvl+0x100/0x190 [ 515.565468][T11381] should_fail_ex.cold+0x5/0xa [ 515.565507][T11381] _copy_from_user+0x2e/0xd0 [ 515.565539][T11381] load_msg+0x19e/0x4a0 [ 515.565561][T11381] do_msgrcv+0x209/0x16f0 [ 515.565580][T11381] ? __mutex_unlock_slowpath+0x35d/0x930 [ 515.565608][T11381] ? __pfx_do_msg_fill+0x10/0x10 [ 515.565630][T11381] ? __fget_files+0x21f/0x3d0 [ 515.565650][T11381] ? __pfx_do_msgrcv+0x10/0x10 [ 515.565671][T11381] ? fput+0x79/0x100 [ 515.565693][T11381] ? ksys_write+0x1ac/0x250 [ 515.565708][T11381] ? __pfx_ksys_write+0x10/0x10 [ 515.565730][T11381] ? do_syscall_64+0x115/0x870 [ 515.565751][T11381] do_syscall_64+0x115/0x870 [ 515.565772][T11381] ? clear_bhb_loop+0x40/0x90 [ 515.565794][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.565812][T11381] RIP: 0033:0x7f3b0299e019 [ 515.565834][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.565851][T11381] RSP: 002b:00007f3b037d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 515.565870][T11381] RAX: ffffffffffffffda RBX: 00007f3b02c25fa0 RCX: 00007f3b0299e019 [ 515.565881][T11381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.565890][T11381] RBP: 00007f3b037d5090 R08: 0000000000004800 R09: 0000000000000000 [ 515.565900][T11381] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 515.565910][T11381] R13: 00007f3b02c26038 R14: 00007f3b02c25fa0 R15: 00007ffeffcbe2b8 [ 515.565933][T11381] [ 515.685476][T11394] __nla_validate_parse: 3 callbacks suppressed [ 515.685494][T11394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1658'. [ 515.692222][T11394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.705755][T11394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.836732][ T42] audit: type=1400 audit(1785843786.201:1880): avc: denied { watch } for pid=11406 comm="syz.4.1663" path="/174/file0" dev="tmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 516.010570][ T42] audit: type=1326 audit(1785843786.381:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11415 comm="syz.5.1665" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecadf9e019 code=0x0 [ 516.098208][T11419] FAULT_INJECTION: forcing a failure. [ 516.098208][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 516.106427][T11419] CPU: 3 UID: 0 PID: 11419 Comm: syz.4.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.106457][T11419] Tainted: [L]=SOFTLOCKUP [ 516.106464][T11419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.106474][T11419] Call Trace: [ 516.106481][T11419] [ 516.106489][T11419] dump_stack_lvl+0x100/0x190 [ 516.106518][T11419] should_fail_ex.cold+0x5/0xa [ 516.106542][T11419] should_failslab+0xc2/0x120 [ 516.106566][T11419] __kmalloc_noprof+0xfc/0x820 [ 516.106587][T11419] ? __might_fault+0xc5/0x140 [ 516.106604][T11419] ? lsm_blob_alloc+0x68/0x90 [ 516.106631][T11419] lsm_blob_alloc+0x68/0x90 [ 516.106652][T11419] security_msg_msg_alloc+0x22/0x240 [ 516.106674][T11419] load_msg+0x354/0x4a0 [ 516.106697][T11419] do_msgrcv+0x209/0x16f0 [ 516.106716][T11419] ? __mutex_unlock_slowpath+0x35d/0x930 [ 516.106738][T11419] ? __pfx_do_msg_fill+0x10/0x10 [ 516.106760][T11419] ? __fget_files+0x21f/0x3d0 [ 516.106780][T11419] ? __pfx_do_msgrcv+0x10/0x10 [ 516.106803][T11419] ? fput+0x79/0x100 [ 516.106824][T11419] ? ksys_write+0x1ac/0x250 [ 516.106840][T11419] ? __pfx_ksys_write+0x10/0x10 [ 516.106862][T11419] ? do_syscall_64+0x115/0x870 [ 516.106883][T11419] do_syscall_64+0x115/0x870 [ 516.106904][T11419] ? clear_bhb_loop+0x40/0x90 [ 516.106926][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.106945][T11419] RIP: 0033:0x7f3b0299e019 [ 516.106960][T11419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.106977][T11419] RSP: 002b:00007f3b037d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 516.106997][T11419] RAX: ffffffffffffffda RBX: 00007f3b02c25fa0 RCX: 00007f3b0299e019 [ 516.107008][T11419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.107018][T11419] RBP: 00007f3b037d5090 R08: 0000000000004800 R09: 0000000000000000 [ 516.107029][T11419] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 516.107038][T11419] R13: 00007f3b02c26038 R14: 00007f3b02c25fa0 R15: 00007ffeffcbe2b8 [ 516.107062][T11419] [ 516.212899][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 516.406195][T11428] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1670'. [ 516.551124][T11432] could not allocate digest TFM handle cryptd(blake2b-160) [ 516.599381][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout [ 516.815410][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 516.868675][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 516.871679][T11455] nbd: nbd64 already in use [ 517.002206][ T9662] udevd[9662]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 517.050908][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 517.051628][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 517.110479][ T42] audit: type=1400 audit(1785843787.481:1882): avc: denied { write } for pid=11476 comm="syz.0.1685" name="371" dev="tmpfs" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 517.209558][ T848] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 517.273326][ T42] audit: type=1400 audit(1785843787.641:1883): avc: denied { read write } for pid=11485 comm="syz.3.1688" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 517.289387][ T42] audit: type=1400 audit(1785843787.641:1884): avc: denied { open } for pid=11485 comm="syz.3.1688" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 517.384823][ T848] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 517.390451][ T848] usb 10-1: can't read configurations, error -61 [ 517.390640][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout [ 517.390730][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.390767][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 517.538605][ T848] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 517.684904][ T42] audit: type=1400 audit(1785843788.051:1885): avc: denied { write } for pid=5794 comm="syz-executor" name="371" dev="tmpfs" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 517.693568][ T42] audit: type=1400 audit(1785843788.051:1886): avc: denied { write } for pid=5794 comm="syz-executor" name="371" dev="tmpfs" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 517.703961][ T848] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 517.706391][ T848] usb 10-1: can't read configurations, error -61 [ 517.708851][ T848] usb usb10-port1: attempt power cycle [ 517.847035][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1692'. [ 517.855098][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1692'. [ 518.058730][ T848] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 518.062928][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.065935][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.068937][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.081604][ T848] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 518.085799][ T848] usb 10-1: can't read configurations, error -61 [ 518.141943][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 518.156192][T11509] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 518.160046][T11509] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 518.164466][T11512] infiniband syz1: set active [ 518.167182][ T1046] vcan0 speed is unknown, defaulting to 1000 [ 518.167244][T11512] infiniband syz1: added vcan0 [ 518.192520][T11512] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 518.198825][T11512] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 518.207422][T11512] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 518.221736][ T848] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 518.238106][T11512] RDS/IB: syz1: added [ 518.239721][T11512] smc: adding ib device syz1 with port count 1 [ 518.242745][T11512] smc: ib device syz1 port 1 has no pnetid [ 518.245363][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.248651][ T1046] vcan0 speed is unknown, defaulting to 1000 [ 518.255622][ T848] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 518.259123][ T848] usb 10-1: can't read configurations, error -61 [ 518.265639][ T848] usb usb10-port1: unable to enumerate USB device [ 518.412540][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.524692][T11528] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 518.579496][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.729901][T11512] vcan0 speed is unknown, defaulting to 1000 [ 518.885229][ T1046] hid (null): unknown global tag 0xd [ 518.891377][ T1046] hid (null): global environment stack underflow [ 518.916198][ T1046] hid-generic 0000:6F89:0400.0007: unknown main item tag 0x6 [ 518.929680][ T1046] hid-generic 0000:6F89:0400.0007: unknown main item tag 0x2 [ 518.932653][ T1046] hid-generic 0000:6F89:0400.0007: unknown global tag 0xd [ 518.935588][ T1046] hid-generic 0000:6F89:0400.0007: item 0 1 1 13 parsing failed [ 518.940031][ T1046] hid-generic 0000:6F89:0400.0007: probe with driver hid-generic failed with error -22 [ 519.121153][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 519.139436][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 519.139458][ T42] audit: type=1400 audit(1785843789.511:1903): avc: denied { write } for pid=11548 comm="syz.4.1707" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.152817][ T42] audit: type=1400 audit(1785843789.521:1904): avc: denied { write } for pid=11555 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.264783][T11559] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 519.301107][T11563] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 519.361609][T11567] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 519.546706][ T42] audit: type=1400 audit(1785843789.911:1905): avc: denied { ioctl } for pid=11584 comm="syz.0.1721" path="socket:[48181]" dev="sockfs" ino=48181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 519.557140][ T42] audit: type=1400 audit(1785843789.911:1906): avc: denied { write } for pid=11584 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 519.653304][ T42] audit: type=1400 audit(1785843790.021:1907): avc: denied { write } for pid=9169 comm="syz-executor" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.665287][ T42] audit: type=1400 audit(1785843790.021:1908): avc: denied { write } for pid=9169 comm="syz-executor" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.674626][ T42] audit: type=1400 audit(1785843790.021:1909): avc: denied { write } for pid=9169 comm="syz-executor" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.682860][ T42] audit: type=1400 audit(1785843790.021:1910): avc: denied { write } for pid=9169 comm="syz-executor" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.692290][ T42] audit: type=1400 audit(1785843790.021:1911): avc: denied { write } for pid=9169 comm="syz-executor" name="190" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 519.728559][ T6240] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 519.878520][ T6240] usb 8-1: Using ep0 maxpacket: 8 [ 519.882741][ T6240] usb 8-1: config 0 interface 0 has no altsetting 0 [ 519.885522][ T6240] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 519.890050][ T6240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.010141][T11617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.020307][T11617] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 520.104532][T11624] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 520.104559][T11624] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 520.148435][ T42] audit: type=1400 audit(1785843790.511:1912): avc: denied { create } for pid=11627 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 520.232374][ C2] Unknown status report in ack skb [ 520.668855][ T58] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 520.820864][ T58] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.829595][ T58] usb 9-1: not running at top speed; connect to a high speed hub [ 520.838536][ T58] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 520.841222][ T58] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 520.843902][ T58] usb 9-1: config 14 has no interface number 0 [ 520.845854][ T58] usb 9-1: config 14 has no interface number 1 [ 520.847809][ T58] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 520.852351][ T58] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 520.856853][ T58] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 520.861160][ T58] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 520.864758][ T58] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 520.868537][ T58] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 520.868558][ T58] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.868580][ T58] usb 9-1: config 14 interface 57 has no altsetting 0 [ 520.868594][ T58] usb 9-1: config 14 interface 228 has no altsetting 0 [ 520.870913][ T58] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 520.888396][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.891373][ T58] usb 9-1: Product: syz [ 520.892709][ T58] usb 9-1: Manufacturer: syz [ 520.894172][ T58] usb 9-1: SerialNumber: syz [ 521.161244][T11658] __nla_validate_parse: 10 callbacks suppressed [ 521.161263][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1746'. [ 521.312502][T11660] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1747'. [ 521.340784][T11662] netlink: 'syz.5.1748': attribute type 62 has an invalid length. [ 521.551722][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 521.773587][T11673] tipc: Started in network mode [ 521.775818][T11673] tipc: Node identity 1000001, cluster identity 4369 [ 521.779489][T11673] tipc: Node number set to 16777217 [ 521.782207][T11673] tipc: Cannot configure node identity twice [ 521.786142][T11673] tipc: New replicast peer: 127.0.0.1 [ 521.791411][T11673] tipc: Enabled bearer , priority 10 [ 521.795075][T11673] netlink: 'syz.5.1752': attribute type 5 has an invalid length. [ 521.842072][T11676] snd_dummy snd_dummy.0: control 6:0:1073741825:syz0:510 is already present [ 521.855421][T11676] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 521.936054][T11681] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1755'. [ 521.977323][T11683] Bluetooth: MGMT ver 1.23 [ 522.025308][T11685] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1757'. [ 522.210225][T11696] fuse: Unknown parameter '2ootmode' [ 522.221186][T11696] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 522.265176][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1763'. [ 522.372794][T11709] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1766'. [ 522.502724][ T58] usb 8-1: USB disconnect, device number 10 [ 523.024463][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 523.031984][T11740] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1779'. [ 523.441163][ T848] usb 9-1: USB disconnect, device number 6 [ 523.673327][T11760] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1787'. [ 523.802252][T11774] tipc: Started in network mode [ 523.804528][T11774] tipc: Node identity 44, cluster identity 4711 [ 523.807361][T11774] tipc: Node number set to 68 [ 523.880898][T11780] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 523.886161][T11779] ima: rule for LSM 'u' is undefined [ 523.887610][T11780] batman_adv: batadv0: Adding interface: gretap1 [ 523.898371][T11780] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.914938][T11780] batman_adv: batadv0: Interface activated: gretap1 [ 523.953310][T11777] ima: policy update completed [ 525.870366][T11825] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 525.873654][T11825] syz_tun: entered promiscuous mode [ 525.879966][T11825] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 525.894077][T11825] cgroup: Unknown subsys name 'cpuset' [ 525.907783][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 525.907802][ T42] audit: type=1400 audit(1785844052.268:1933): avc: denied { map } for pid=11826 comm="syz.5.1810" path="/dev/video4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 526.052163][ T42] audit: type=1400 audit(1785844052.418:1934): avc: denied { listen } for pid=11828 comm="syz.5.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 526.110024][T11829] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 526.270480][ T5808] Bluetooth: hci0: command 0x1003 tx timeout [ 526.271523][ T5799] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 526.368488][ T6240] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 526.484573][T11850] __nla_validate_parse: 8 callbacks suppressed [ 526.484592][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1818'. [ 526.516255][T11854] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1820'. [ 526.520265][ T6240] usb 8-1: not running at top speed; connect to a high speed hub [ 526.524282][ T6240] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.528598][ T6240] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 526.532232][ T6240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.544676][T11856] netlink: 'syz.5.1821': attribute type 4 has an invalid length. [ 526.556304][T11856] netlink: 'syz.5.1821': attribute type 4 has an invalid length. [ 526.738289][ T42] audit: type=1326 audit(1785844053.098:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.0.1826" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44bf39e019 code=0x0 [ 526.856381][T11876] dummy_hcd dummy_hcd.0: remove, state 4 [ 526.859491][T11876] usb usb5: USB disconnect, device number 1 [ 526.879218][T11876] dummy_hcd dummy_hcd.0: stopped [ 526.880768][T11876] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 527.055475][T11884] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1830'. [ 527.227058][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1833'. [ 527.227167][ T42] audit: type=1400 audit(1785844053.588:1936): avc: denied { write } for pid=11894 comm="syz.4.1834" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.398833][T11900] netlink: 'syz.5.1835': attribute type 16 has an invalid length. [ 527.402138][T11900] netlink: 'syz.5.1835': attribute type 17 has an invalid length. [ 527.441290][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.465002][T11900] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 527.802266][ T42] audit: type=1400 audit(1785844054.168:1937): avc: denied { write } for pid=9169 comm="syz-executor" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.813919][ T42] audit: type=1400 audit(1785844054.168:1938): avc: denied { write } for pid=9169 comm="syz-executor" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.823834][ T42] audit: type=1400 audit(1785844054.168:1939): avc: denied { write } for pid=9169 comm="syz-executor" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.835285][ T42] audit: type=1400 audit(1785844054.168:1940): avc: denied { write } for pid=9169 comm="syz-executor" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.846261][ T42] audit: type=1400 audit(1785844054.168:1941): avc: denied { write } for pid=9169 comm="syz-executor" name="220" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 527.869437][T11924] tipc: New replicast peer: 255.255.255.255 [ 527.872833][T11924] tipc: Enabled bearer , priority 10 [ 527.961364][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1843'. [ 528.191874][ T42] audit: type=1400 audit(1785844054.558:1942): avc: denied { bind } for pid=11937 comm="syz.0.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 528.207936][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 528.216992][T11938] No such timeout policy "syz1" [ 528.225833][T11938] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 528.305330][T11943] FAT-fs (nullb0): bogus number of reserved sectors [ 528.310017][T11943] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 528.540987][T11954] program syz.0.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.604212][T11960] tipc: Started in network mode [ 528.606283][T11960] tipc: Node identity ac14140f, cluster identity 4711 [ 528.609857][T11960] tipc: New replicast peer: 172.30.0.1 [ 528.612360][T11960] tipc: Enabled bearer , priority 10 [ 528.770573][T11974] overlayfs: failed to resolve './file0': -2 [ 528.960838][T11987] binder: BINDER_SET_CONTEXT_MGR already set [ 528.968858][T11987] binder: 11984:11987 ioctl 4018620d 200000004a80 returned -16 [ 529.086043][T11998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 529.092034][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1866'. [ 529.138146][ T1496] usb 8-1: USB disconnect, device number 11 [ 529.270522][T12019] loop2: detected capacity change from 0 to 7 [ 529.280748][T12019] Dev loop2: unable to read RDB block 7 [ 529.286373][T12019] loop2: AHDI p1 p2 p3 [ 529.287775][T12019] loop2: partition table partially beyond EOD, truncated [ 529.293591][T12019] loop2: p1 start 1601398130 is beyond EOD, truncated [ 529.296032][T12019] loop2: p2 start 1702059890 is beyond EOD, truncated [ 529.315483][T12025] netlink: 'syz.5.1874': attribute type 5 has an invalid length. [ 529.357956][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 529.372286][ T6240] libceph: connect (1)[c::]:6789 error -22 [ 529.384310][ T6240] libceph: mon0 (1)[c::]:6789 connect error [ 529.394527][ T6240] libceph: connect (1)[c::]:6789 error -22 [ 529.396491][ T6240] libceph: mon0 (1)[c::]:6789 connect error [ 529.404020][T12034] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1876'. [ 529.618481][ T5894] tipc: Node number set to 2886997007 [ 529.665179][ T6240] libceph: connect (1)[c::]:6789 error -22 [ 529.667728][ T6240] libceph: mon0 (1)[c::]:6789 connect error [ 530.060361][T12047] syzkaller1: entered promiscuous mode [ 530.062785][T12047] syzkaller1: entered allmulticast mode [ 530.067910][T12047] openvswitch: netlink: Actions may not be safe on all matching packets [ 530.148447][T12025] ceph: No mds server is up or the cluster is laggy [ 530.188969][ T9] libceph: connect (1)[c::]:6789 error -22 [ 530.202398][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 530.254639][T12054] omfs: Invalid superblock (0) [ 530.353645][T12066] exfat: Unknown parameter 'discarddeo#' [ 530.386050][T12074] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1890'. [ 530.414802][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.418290][ T5799] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 530.423212][ T91] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.655782][T12090] Unsupported ieee802154 address type: 0 [ 531.062809][T12123] netlink: 'syz.0.1908': attribute type 2 has an invalid length. [ 531.153812][T12128] openvswitch: netlink: Flow key attribute not present in set flow. [ 531.165216][T12129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 531.167994][T12129] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 531.176565][T12129] vhci_hcd vhci_hcd.0: Device attached [ 531.181791][T12132] vhci_hcd: unknown pdu 1 [ 531.184104][ T5877] vhci_hcd vhci_hcd.0: stop threads [ 531.186019][ T5877] vhci_hcd vhci_hcd.0: release socket [ 531.187905][ T5877] vhci_hcd vhci_hcd.0: disconnect device [ 531.365712][T12135] XFS (nullb0): Invalid superblock magic number [ 531.477263][T12143] bond0: (slave syz_tun): Releasing backup interface [ 531.481971][T12143] syz_tun: left promiscuous mode [ 531.614744][T12154] fuse: Unknown parameter '[*t"i{Ԅ' [ 531.617149][T12154] netlink: 'syz.4.1917': attribute type 49 has an invalid length. [ 531.629156][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.631244][T12154] bond0: (slave bond_slave_0): Releasing backup interface [ 531.635381][T12154] bond_slave_0: left promiscuous mode [ 531.661133][T12157] FAULT_INJECTION: forcing a failure. [ 531.661133][T12157] name failslab, interval 1, probability 0, space 0, times 0 [ 531.665150][T12157] CPU: 2 UID: 0 PID: 12157 Comm: syz.3.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.665168][T12157] Tainted: [L]=SOFTLOCKUP [ 531.665171][T12157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.665178][T12157] Call Trace: [ 531.665184][T12157] [ 531.665189][T12157] dump_stack_lvl+0x100/0x190 [ 531.665251][T12157] should_fail_ex.cold+0x5/0xa [ 531.665266][T12157] should_failslab+0xc2/0x120 [ 531.665286][T12157] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 531.665300][T12157] ? __alloc_skb+0x5b7/0x710 [ 531.665328][T12157] ? __alloc_skb+0x140/0x710 [ 531.665342][T12157] __alloc_skb+0x140/0x710 [ 531.665354][T12157] ? __alloc_skb+0x5b7/0x710 [ 531.665367][T12157] ? __pfx___alloc_skb+0x10/0x10 [ 531.665383][T12157] netlink_alloc_large_skb+0x69/0x150 [ 531.665396][T12157] netlink_sendmsg+0x680/0xda0 [ 531.665410][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.665422][T12157] ? selinux_socket_sendmsg+0x198/0x2f0 [ 531.665451][T12157] ____sys_sendmsg+0xa4d/0xbe0 [ 531.665467][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.665480][T12157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.665502][T12157] ___sys_sendmsg+0x190/0x1e0 [ 531.665513][T12157] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.665523][T12157] ? __lock_acquire+0x49f/0x1a40 [ 531.665542][T12157] ? get_pid_task+0x106/0x250 [ 531.665566][T12157] __sys_sendmsg+0x160/0x210 [ 531.665580][T12157] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.665600][T12157] do_syscall_64+0x115/0x870 [ 531.665630][T12157] ? clear_bhb_loop+0x40/0x90 [ 531.665643][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.665654][T12157] RIP: 0033:0x7fc33b39e019 [ 531.665664][T12157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.665675][T12157] RSP: 002b:00007fc33c350028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.665690][T12157] RAX: ffffffffffffffda RBX: 00007fc33b625fa0 RCX: 00007fc33b39e019 [ 531.665697][T12157] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 531.665703][T12157] RBP: 00007fc33c350090 R08: 0000000000000000 R09: 0000000000000000 [ 531.665709][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.665715][T12157] R13: 00007fc33b626038 R14: 00007fc33b625fa0 R15: 00007ffc288b46e8 [ 531.665728][T12157] [ 531.753292][T12154] bond_slave_0: entered promiscuous mode [ 531.755634][T12154] bond_slave_0: entered allmulticast mode [ 531.806256][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 531.806276][ T42] audit: type=1400 audit(1785844058.168:1975): avc: denied { getopt } for pid=12162 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 531.824913][ T42] audit: type=1400 audit(1785844058.178:1976): avc: denied { create } for pid=12162 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 531.860494][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 531.956098][T12181] __nla_validate_parse: 1 callbacks suppressed [ 531.956111][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1923'. [ 531.996351][ T42] audit: type=1400 audit(1785844058.358:1977): avc: denied { write } for pid=12184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.049618][ T42] audit: type=1400 audit(1785844058.418:1978): avc: denied { write } for pid=12188 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.169298][T12199] netlink: 'syz.4.1928': attribute type 2 has an invalid length. [ 532.203275][T12203] gadgetfs: bound to dummy_udc driver [ 532.205119][T12203] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 532.209025][T12203] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 532.211708][T12203] CPU: 2 UID: 0 PID: 12203 Comm: syz.4.1930 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.214953][T12203] Tainted: [L]=SOFTLOCKUP [ 532.216315][T12203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.219530][T12203] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 532.221241][T12203] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 532.226900][T12203] RSP: 0018:ffffc9000358f9b0 EFLAGS: 00010246 [ 532.228836][T12203] RAX: dffffc0000000000 RBX: ffff88802be40c00 RCX: ffffffff87d05819 [ 532.231293][T12203] RDX: 0000000000000000 RSI: ffffffff87d05827 RDI: ffff88802be41290 [ 532.233679][T12203] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 532.236538][T12203] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff90256740 [ 532.239070][T12203] R13: 0000000000000000 R14: ffff88802daaa4f1 R15: ffff88802daaa008 [ 532.241419][T12203] FS: 00007f3b037d56c0(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 532.244135][T12203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.246212][T12203] CR2: 00007f3b02c27dac CR3: 00000000360ae000 CR4: 0000000000352ef0 [ 532.248884][T12203] DR0: 0000000000000005 DR1: 0000000000000005 DR2: 0000000020040004 [ 532.251355][T12203] DR3: 0000000000000056 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 532.253718][T12203] Call Trace: [ 532.254861][T12203] [ 532.255856][T12203] gadget_bind_driver+0x4ac/0xbf0 [ 532.257445][T12203] ? __pfx_gadget_bind_driver+0x10/0x10 [ 532.259285][T12203] really_probe+0x241/0xa60 [ 532.260735][T12203] __driver_probe_device+0x20e/0x450 [ 532.262399][T12203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.264186][T12203] driver_probe_device+0x4a/0x140 [ 532.265762][T12203] __driver_attach+0x21f/0x5b0 [ 532.267206][T12203] ? __pfx___driver_attach+0x10/0x10 [ 532.268867][T12203] bus_for_each_dev+0x13e/0x1d0 [ 532.270625][T12203] ? __pfx_bus_for_each_dev+0x10/0x10 [ 532.272291][T12203] ? bus_add_driver+0x2b5/0x5b0 [ 532.273793][T12203] bus_add_driver+0x305/0x5b0 [ 532.275193][T12203] driver_register+0x1e2/0x360 [ 532.276708][T12203] usb_gadget_register_driver_owner+0x132/0x210 [ 532.278782][T12203] dev_config+0xdce/0x1610 [ 532.280223][T12203] ? __pfx_dev_config+0x10/0x10 [ 532.281781][T12203] vfs_write+0x2aa/0x1050 [ 532.283157][T12203] ? __pfx_dev_config+0x10/0x10 [ 532.284686][T12203] ? __pfx_vfs_write+0x10/0x10 [ 532.286258][T12203] ? __fget_files+0x215/0x3d0 [ 532.287696][T12203] ? __fget_files+0x21f/0x3d0 [ 532.289194][T12203] ksys_write+0x12a/0x250 [ 532.290537][T12203] ? __pfx_ksys_write+0x10/0x10 [ 532.292040][T12203] do_syscall_64+0x115/0x870 [ 532.293501][T12203] ? clear_bhb_loop+0x40/0x90 [ 532.294996][T12203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.296858][T12203] RIP: 0033:0x7f3b0299e019 [ 532.298399][T12203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.304682][T12203] RSP: 002b:00007f3b037d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.307328][T12203] RAX: ffffffffffffffda RBX: 00007f3b02c25fa0 RCX: 00007f3b0299e019 [ 532.309823][T12203] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000003 [ 532.312256][T12203] RBP: 00007f3b02a3500c R08: 0000000000000000 R09: 0000000000000000 [ 532.314705][T12203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.317201][T12203] R13: 00007f3b02c26038 R14: 00007f3b02c25fa0 R15: 00007ffeffcbe2b8 [ 532.319712][T12203] [ 532.320694][T12203] Modules linked in: [ 532.322588][T12203] ---[ end trace 0000000000000000 ]--- [ 532.325136][ T42] audit: type=1400 audit(1785844058.688:1979): avc: denied { read } for pid=5130 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 532.327814][T12203] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 532.335436][ T42] audit: type=1400 audit(1785844058.688:1980): avc: denied { search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.338847][T12203] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 532.345339][ T42] audit: type=1400 audit(1785844058.688:1981): avc: denied { write search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.352937][T12203] RSP: 0018:ffffc9000358f9b0 EFLAGS: 00010246 [ 532.360440][ T42] audit: type=1400 audit(1785844058.688:1982): avc: denied { add_name } for pid=5130 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.363015][T12203] RAX: dffffc0000000000 RBX: ffff88802be40c00 RCX: ffffffff87d05819 [ 532.363032][T12203] RDX: 0000000000000000 RSI: ffffffff87d05827 RDI: ffff88802be41290 [ 532.363046][T12203] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 532.370673][ T42] audit: type=1400 audit(1785844058.688:1983): avc: denied { create } for pid=5130 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.373827][T12203] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff90256740 [ 532.373845][T12203] R13: 0000000000000000 R14: ffff88802daaa4f1 R15: ffff88802daaa008 [ 532.376383][ T42] audit: type=1400 audit(1785844058.688:1984): avc: denied { append open } for pid=5130 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.380266][T12203] FS: 00007f3b037d56c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 532.407199][T12203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.410541][T12203] CR2: 00007fa1501faecc CR3: 00000000360ae000 CR4: 0000000000352ef0 [ 532.413868][T12203] Kernel panic - not syncing: Fatal exception [ 532.417147][T12203] Kernel Offset: disabled [ 532.419074][T12203] Rebooting in 86400 seconds..