last executing test programs: 30.82561649s ago: executing program 0 (id=28): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@caif=@util, &(0x7f0000000200)=0x80, 0x80800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)={[0xffff, 0x7, 0x2596, 0x1000, 0x3, 0x5, 0x7, 0xffff, 0xb2fd, 0x0, 0x3ff, 0x800, 0x4697, 0x9, 0x3, 0x4f1d9314], 0xdddd0000, 0x1002}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30.59834124s ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x422000, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0xbc01, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/8, 0x8}], 0x3) 30.597282247s ago: executing program 0 (id=33): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') ioctl$TUNGETVNETHDRSZ(r3, 0x8004b707, 0x0) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xfffffffffffffffb, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x0, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xd) umount2(&(0x7f0000000280)='./file0\x00', 0x3) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) 30.368717399s ago: executing program 0 (id=37): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x44000, 0x10}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x98) write(r2, &(0x7f0000000240)="3910b06e05", 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r0, &(0x7f0000000000)='\"', 0xfdef) 29.499751705s ago: executing program 0 (id=44): r0 = open$dir(&(0x7f0000000400)='./file0\x00', 0x80000, 0xd4) mkdirat(r0, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x4007e7f, 0x0, 0x3, 0x10000158}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/318], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x548d2552, 0x4) 28.849403766s ago: executing program 0 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x1f1) creat(&(0x7f0000000200)='./file0\x00', 0x0) recvmmsg(r3, 0x0, 0x0, 0x10100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0x12, 0x600, 0x0, 0x202, 0x200, 0x2e8, 0x2e8, 0x200, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xffffff00], 'dvmrp1\x00', 'ip_vti0\x00', {}, {0xff}, 0x1d, 0x6b, 0x0, 0x44}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xa, 0x6, 'snmp\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x3, 0x6, 0x8e1, 'snmp\x00', 'syz0\x00', {0xa136}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x19039011}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0x10) listen(0xffffffffffffffff, 0x80000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'/11, @ANYRES32=0x0, @ANYBLOB="89f6ffff00000000240012800b00010062726964676500001400028008003200010000000800050001000000"], 0x44}}, 0x0) 28.704234832s ago: executing program 32 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x1f1) creat(&(0x7f0000000200)='./file0\x00', 0x0) recvmmsg(r3, 0x0, 0x0, 0x10100, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0x12, 0x600, 0x0, 0x202, 0x200, 0x2e8, 0x2e8, 0x200, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xffffff00], 'dvmrp1\x00', 'ip_vti0\x00', {}, {0xff}, 0x1d, 0x6b, 0x0, 0x44}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xa, 0x6, 'snmp\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x3, 0x6, 0x8e1, 'snmp\x00', 'syz0\x00', {0xa136}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x19039011}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0x10) listen(0xffffffffffffffff, 0x80000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'/11, @ANYRES32=0x0, @ANYBLOB="89f6ffff00000000240012800b00010062726964676500001400028008003200010000000800050001000000"], 0x44}}, 0x0) 5.757342451s ago: executing program 2 (id=240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010b1800000000000000cdea7b98f74400000000dd060faaccc57200000000020000000000"], 0x0, 0x1a}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x115b81) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fa, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000001000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x0, 0x3fd]}}) r3 = dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$FITHAW(r1, 0xc0045878) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x3dd76000) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x19, 0x14, "18126657ae799a94aedcb96708840fa860c9cb3f5953254769bf41a38e46112d15dec605ef771e390a4100fa71e62117ddcf226c2494d2306f7867fcd903e03e", "3bebaf42337f6df9a7ad3dc5421194d889023a837f9fc061aaf513939065c777", [0x94b5, 0x9]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0x10002, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x8010) write(r5, &(0x7f0000000100)='0', 0x1) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 5.618355321s ago: executing program 2 (id=241): r0 = socket(0x1d, 0x2, 0x6) getsockname(r0, 0x0, &(0x7f0000000c80)) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000480)={{0x0}, 0x0, 0x9}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r7, 0x36, 0x2004}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x48, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}]}, 0x48}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0xa, 0x40000000) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r12, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_bcm(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x4, 0x820, 0x21f, {}, {0x0, 0xea60}, {0x2}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "06ba234b896a30e1"}}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x2000010) (async) sendmmsg$unix(r13, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000840)=""/4096, 0x1000) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r14, 0xb, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) 5.618060699s ago: executing program 2 (id=242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT=r3]) 5.529525011s ago: executing program 2 (id=244): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x3, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x52400, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000004c0)=""/193) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4040000) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000700)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000780)={0xa, 0x3, {r5}, {0xee01}, 0x4000000000000, 0x4}) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000b40)={&(0x7f00000007c0)=0x3, 0x1, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000b00)}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x7c, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000d00)=0x13) r7 = fsopen(&(0x7f0000000d40)='cgroup2\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x29}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r10, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x20000010) r11 = syz_open_dev$mouse(&(0x7f0000001040), 0x4a8f, 0x8b82) write$tun(r11, &(0x7f0000001080)={@val={0x0, 0x8809}, @val={0x0, 0x3, 0x86ec, 0x3, 0xbf3a, 0x2c8}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "b7b17aeb5cc2e00a"}}}}}, 0x30) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f00000010c0)={{0x62, @multicast1, 0x4e23, 0x0, 'fo\x00', 0x1, 0x0, 0x2a}, {@remote, 0x4e23, 0x2, 0x81, 0x9, 0x3}}, 0x44) sendmsg$NFT_BATCH(r8, &(0x7f0000001300)={&(0x7f0000001140), 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xf4, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb21}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7187caac}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x69}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xecf}]}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}]}], {0x14}}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000001380), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, r12, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r13 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000014c0), 0x200200, 0x0) ioctl$TIOCCONS(r13, 0x541d) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001500)='netdevsim\x00', 0x0, 0xffffffffffffffff) 5.258980942s ago: executing program 2 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xf, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000040)) 5.015837391s ago: executing program 2 (id=255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffffffffffecf, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x9, 0x4, 0x0, 0x0, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffffff}]}}}]}, 0x58}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00 '], 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x881}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x6) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/135, 0x87, 0x0, 0x29}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.85746608s ago: executing program 1 (id=257): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r0, 0x8000001000000001, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.857090166s ago: executing program 1 (id=258): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x3}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x20042000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x3}}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x20042000) (async) 4.69837374s ago: executing program 1 (id=259): eventfd2(0xe5c, 0x80000) (async) openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={0x0, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x2, 0x4) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x548, 0x0, 0x896a}, 'syz0\x00', 0x1c}) (async) sendto$inet(r1, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d82", 0xbd, 0x4040004, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000003080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x9, 0x9d}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xd, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xfc, 0xb, 0x8}}}}}]}}]}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, 0x0, 0x18) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) (rerun: 32) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.529706383s ago: executing program 3 (id=264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xffffffffffeffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r4) 3.229967572s ago: executing program 4 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet6(0xa, 0x3, 0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r3, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000080)={0x3, 0x3, 0x6, 0x9, 0xc0, 0x14, 0x1e, "53debcb44a417d9bffde04341a9d4c9907667023", "9dc07f03dfc995c57724031749efefa065ce5d6c"}) 3.158760704s ago: executing program 4 (id=267): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000020000010902"], 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000020000010902"], 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) (async) fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) 1.90905881s ago: executing program 4 (id=268): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000580)={0x1, 0x0, @ioapic={0x70000, 0x49b, 0x8, 0x5, 0x0, [{0x0, 0x9, 0xd, '\x00', 0x2}, {0x2, 0x4, 0x6, '\x00', 0x5}, {0x4, 0x4, 0xea, '\x00', 0x9}, {0x9, 0x8, 0x4, '\x00', 0x5}, {0x8, 0x26}, {0x3, 0x0, 0xe5, '\x00', 0x1}, {0xf8, 0x41, 0x1}, {0x6, 0x3, 0xc3, '\x00', 0xff}, {0xfa, 0x1, 0x0, '\x00', 0xfe}, {0x5, 0x4, 0x6, '\x00', 0x7c}, {0x9, 0x5, 0x3, '\x00', 0x64}, {0x3, 0xdb, 0x7f, '\x00', 0x1}, {0x4, 0x5, 0xe6, '\x00', 0xe}, {0xff, 0x8f, 0xfe, '\x00', 0x7}, {0xf0, 0x4, 0xf3, '\x00', 0x8}, {0x51, 0x80, 0x9, '\x00', 0x9}, {0x3, 0x8, 0x5, '\x00', 0x3}, {0x7, 0xc0, 0xf3, '\x00', 0x9}, {0x48, 0x6, 0x3, '\x00', 0x1}, {0x7f, 0x3, 0x1, '\x00', 0x8}, {0xf3, 0x1, 0x80, '\x00', 0x8}, {0x58, 0x4, 0x82, '\x00', 0x9}, {0x6, 0x4, 0x8, '\x00', 0x8}, {0x7, 0x8, 0x7f, '\x00', 0x1}]}}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800456908683aa03a1cb80dd4c71a0000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcfb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b519152b050000000000004dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643cb0cd754e8995733fcbb2c5a57df6"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r5}, 0x68) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x7fff}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0xff000000, 0xc, 0x6, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff]}}, 0x6bf, 0x2, 0x0, 0x2, 0x1, 0xf, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x123}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7c}}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xff, 0xffffffff, 0xd, 0x10, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x80]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x7, 0x4, 0x2, 0x3, 0x4, 'veth1_to_bridge\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x0, 0x21}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x4000) 1.619812197s ago: executing program 1 (id=269): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)=""/244, &(0x7f0000000340)=0xf4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xd4}], 0x40000000000031b, 0x40000043, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4040004) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="22f4f3950bfc0715eda2929cba522bd605392ced6f1498072709bf330039bfd1f19d650db90b5c5a4ad3039d33b8de0ce30ce9f10e32e075834248c28798cbc2efa9d86201c94bb9a22f0ba9fdb5c8c2b55175287cb8a4be5617da5f94fcb7d191525625520482b5882e5b", 0x6b, 0x20008008, &(0x7f0000000380)={0x11, 0xf6, r3, 0x1, 0x3}, 0x14) 1.548898448s ago: executing program 1 (id=270): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0xffffffff}, 0x14}}, 0x0) 1.5465966s ago: executing program 1 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) syz_emit_ethernet(0x86, &(0x7f0000002340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x78, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x17, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x2, [{@empty, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x13, 0x54, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x338c, 0x1]}]}}}}}}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x62}}}]}, 0x38}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000780)=0x13) ioctl$TCFLSH(r7, 0x89f1, 0x20001116) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {0x1, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r9}) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRES8=r2, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001"], 0x58}, 0x1, 0x0, 0x0, 0x4c820}, 0x0) syz_usb_connect(0x6, 0x928, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x7c, 0xfb, 0x7, 0x8, 0x3731, 0x116, 0xd55b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x916, 0x4, 0x6, 0x8, 0x0, 0x1, "", [{{0x9, 0x4, 0xcc, 0x4, 0x8, 0xff, 0xff, 0x30, 0x81, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x5, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1a, 0x80}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x8, 0x8, [@generic={0xd8, 0x31, "d6b9b5b678f238b7deb9c70065aeace54a1bf4f4337b6d3cda464415c109ce2f76e44bb4dac3d405b41d48ff8a0fc2fc66276d1358f6ef7c75ebb14999d3ab9f7ac7a43c4647d95ba3c389983f7a85fbcccbb23044fbcaad7a3be45626feb0f1e8f6e6ffc3b5c9dc5fe99b77343b9f6dc97fcd0409a5d12e930a2177b8dfcf2a1410256315d09d9bdabdcdc5510895a188464394ba9de813704d2c83e201cfa87bdd9f1f180739e531f697752020746cbce3f86fd4f631b003062c4c28dccabfeaa8316e5750d9a1d679f7becedd9f666e7a4773d937"}, @generic={0xdf, 0x23, "e9b11865eadcdd72efc7698d6c56f28dd962fc309dda09326a6e0adc7def7c5b4001f2c650dfbf0fb8f14933c8dd65043de14c12f0f7a2e3aff5dc244def89c05e7ccfb23a7a1ccc53c00634ea94988613ebca0a2eca2528f8bb257555543931e56d34e9a02ad8534addcff9a38b494d368c906c3287e4a110bc1b4333fa28c3b70ef5557e2a7452bdc0eaba8932c28bb0be7e84b5d897f51bfd964734283d622dfabb20afd124bf50ee719781557e767bf8bbfccd487319b1a773c6d8873aca712113057cd8e0b3ad1defd6cfbd76f5cf8b823ea650a21f1c5ff7897a"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x80, 0x8, 0x3, [@generic={0x7c, 0x21, "04f5446577c92bceff165f580ac5dcf7b3917e172faa52c6cefe290f9d14181c0b8efb2ca7c030adf4177b1b906bf1542c364aa9d8c0707dab65e7c1b7bf00420aa007f37610fc187d82668c9529dd58bd1c58119289caaa9d005dbf625a06c3e7536510b4d38a3253b1f0979dd4160f732fc825449314b90312"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x37, 0x9, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x1, 0xff, 0x5}}, {{0x9, 0x5, 0x73179a5e95b559ab, 0x8, 0x200, 0x8, 0x6, 0x3, [@generic={0x3a, 0x21, "c0c53decc635c1d3ab602758d42cf5bb26e7b782683e69066cfc7b489201afe407e6aa87f9321466025672de65a1f05e608bd6a6b5edb9bd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xdb, 0x3}]}}, {{0x9, 0x5, 0x3, 0x20, 0x3ff, 0xc, 0x1, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3, 0x6f, 0x8, [@generic={0x13, 0x5, "6ffcb972078dc91654e8e026e48303ebbd"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xd3, 0x81, 0xf, 0x34, 0x3c, 0x45, 0xec, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "d2cc"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xe, 0xe, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x5}, [@obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x4, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x4e, 0x7}]}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x2}, @generic={0xc0, 0x3, "ae161b84a202a692b960dae51431d146334952e39538226d166dd967ceeba38a7069ed361695b5f57db5cda39636a1225627f91a0a51a4a0836924058862df9d4608cb75a194ecde9118921e4710061b9dc87aa6635887edb0ed4136cbb79b172ade2f70f36f21112bc31c6bfa0d1c791dd9786e5c8c5c10cfd875814e32920dfd6a74e930f7ab8e954639de0cab78c0a8ecb0251623a98a47ee2e101cf900542e4cc92cb9a2e196e5a41e910c4518b7e345498f644d35b8c05567c55e25"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x4, 0xc4, 0x9}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x7, 0xa0, 0xec}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x5, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x13, 0x2, [@generic={0x1e, 0x31, "cee3cbad5c9ce814bcf9bbe115ada77b7fc8f22ac4e1d7213382736b"}, @generic={0xcd, 0x22, "071391a911faf5e68e3484cf3e7b5d579c772eeca4ec78b7eae7832386ca6a8334aa529d26e582a3aa14336ad2863efd74a0a1ca434ebdc4f83470ab6c7e14a8c51e91538c332a492b8a4b42a14245a78fa6aefd6f5e09439b912f37f5633c19fe92fbc2c458c4d480716a7936f6a68a2b0fad0321e51d0b9aa75c1a3c499916e4450024310b8f293d2db7d65a5bd800a2d0aa05735a5e728ec4f1901d6cad62a9715d3189f2cd81de94b0f70db0f1ca3160f6bf8d547b7f65d3c1c21374c3e4ae60b3ecb46b58ee0f9620"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x1, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe, 0x1, 0x2, [@generic={0x55, 0x1, "55d9baeeb69f1e3bb1a899f4281974ae51a99e0fa4214fe3f060b76bd12cfdda12263245476603b969e98892f6153ce1227a64283836c303492ff5cca5c95887b74c3854b88b308b24af0646b735dd59aafde3"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x3, 0xff, 0x5a}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x5a, 0x7f, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0x4, 0x7, [@generic={0x9e, 0x23, "39eecf627770d0e2c2387219f4ab5e8743c5b8edbce13d147f3cec6e5ed9f0e74a441ac972d9c77235970c7c81a22b691c7b4c59eeeb57b30600d779f26167922e058cb91ee266d3fe4393985bfd4e7988d1814d7ad799bd56eee4fb8a5cf8241ed7964c14c5c781ebee4498d603110ff0e617767446edf09c24a02736d7080898ad07753f60a0cc6cfa916d44006e3720d7dc12faf6a7e4b099555c"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x2, 0x0, 0xf1}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x8d, 0x6}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0xe3, 0x5, 0x5, [@generic={0xf6, 0x22, "d430f979fa92cc2b7fedce25d37a531f69fc0bc12c3d1cf4bcc69eadab6e7475fc7ac2da5956bb0b062d3d35be76d2e984c1e8d9913bff3cd741407384dc90b7ae9804c7150f2607d78961fa2cd4f85cac92766ffbaee74257d76a4061b9e8a89d955a55d64335d342abcc01a1b9ac7015598718501680116685cdeea0e59a44a228ca495e0edddd38f25183389dcd3cb16bc21ebb5cedbff517c3a3909c0cca0d04ae6c7a5d4c19e9db796a288282bcb834b358aaec7b1e455da3975879a595d1d161aaa0280db27390a6a984a9c7e864adb24febe7cb135ff308774d2f4fb8bc02743b0939c9d3b2e4d569ffbba54f9a60083b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x5, 0x0, [@generic={0xa, 0x23, "fac3ba8e89bc6715"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x208, 0x9, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf7, 0x1}]}}]}}, {{0x9, 0x4, 0x25, 0x7, 0x0, 0x5b, 0x6, 0xa9, 0x20, [@generic={0x2a, 0x2, "6c92cc6a557125a1a7e672be948a31dc8d14699756d5b85637e160d50d691197432e6f0d70ee5d60"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "9860a7909835"}, {0x5, 0x24, 0x0, 0x26}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x26a, 0x8a, 0xe}, {0x6, 0x24, 0x1a, 0xf, 0x8}, [@country_functional={0x6, 0x24, 0x7, 0x5, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x7ff, 0x8, 0x6, 0xfffd, 0x47}]}]}}, {{0x9, 0x4, 0x6b, 0xaf, 0x0, 0xa3, 0x60, 0x70, 0x4, [@generic={0x4f, 0x1b, "092241f1cd038820285e5734809f846cb6a0902e9d83a18959986ffb4400cb1cf2648f3c6d0ed182c00c50291d3f7d18817d50421b9b9b797ee43874cdac300d776781626a1212332f67cec164"}, @generic={0xc0, 0x0, "d6c9a1f82c8f7ddbea430b46c0d67ad5708dee81a8690eabc8f502325e950ac25b9f410394ebf3f950018d4e948df24c7c64bf7e86854777b15017488f278720ee37eac56c778d32fe42fb99838720dca788dbe7ac391863a8447622393f6e8751077891170e0778352ae5422e55c419c6697d74cbb4beeafc7a4c68c9d5aac3eb581f2f1abb9cd6277d6e9c4c2f34a323849beb03ef2860bc722b15bd82313f083f416342719bd2af8b70b2953c4ca8161efb4f0c881da7cd1ed44e5150"}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x250, 0x7f, 0xce, 0x10, 0x20, 0x9}, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="bc7984d25e3007db050f13000203100b0b1001"], 0x6, [{0xf, &(0x7f0000001200)=@string={0xf, 0x3, "d8eeae7fb55e2bcb2aed40f9fe"}}, {0xd3, &(0x7f0000001300)=@string={0xd3, 0x3, "9ab9092e302172a3331eb799001f06310d1da623f76b2b587215092c12c772194d52701e1b8f29f46db4178e8a884aec5c95f7d4f8b92e958cfbae64dc318b61c6a204622d2a5dadabe3d825ad485c62d6598f6e0a6a7bf155117fb93d181490df63a1be6c698b1f6e7e99a9ccf14466c85a7a8bd9a9bb78167769238d1a257d140bece5fbc99d29baf733e10757281d9cf466cfea585ffcd98db88f621edac3b345c4d2f0573c40b174e324bd169fcb10d04aa7f39467e0ba96cc133fbd0564c1586ca2331246ab3f89f55ed945a02317"}}, {0x5, &(0x7f0000001400)=@string={0x5, 0x3, 'LW{'}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x3c01}}, {0x44, &(0x7f00000014c0)=@string={0x44, 0x3, "9c343ef009954ca0ac062c69bf013d41e712a6dada560630fc06a14767c667bfdd37b0bad85dfd12208b919b3385d76385865b6435d088006c81fac00d24840292e4"}}]}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30007d00030801020000000000000000070000012f00007456080240880900"/48], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x4) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0xfa, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x1, 0x19}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0xf, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x9c, 0x80, 0x4, 0x40, 0x8}, 0x11, &(0x7f0000000340)={0x5, 0xf, 0x11, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x7, &(0x7f0000000400)=@string={0x7, 0x3, "f71aef7567"}}, {0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="290319ba4ebd4574be13488c3b878ae9a78ba1101848b69d023daa8df48c4303f95d8695690165e150"]}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "fbc8535dc61d6fc77ed83a3de5e60e5683d45ff7bb3a34b9cbdeae7e5c146e79c2b1bacc79284a453dece0857f015112caf7be64ff855f547f5d2f6e3afb0050cb855b863c2b28b3dbd3e2ce59940082c67151351efbebcb2b6fdd2f6cc29822d71b879ac75666f9b2792a99610085849f0d8fe9b226e43521859bfdc4fd98dcc1bc0b76ae483e895b14e519c50aafcdfd300a12f3f5ce9463653be57bea75e0a9933535cda0974e68a8cc706bdab1a0e6d1819460a5dc4a693526960a0f031edb346babec428c4fbfb9e84742c3e6e3a0de557bc88c"}}, {0x62, &(0x7f00000005c0)=@string={0x62, 0x3, "15b6e3db360e9a2e2d11a76bde1f644f82b5836e60e4e48043aad269b9271704ad61494b3de9bd7e5ddfe16e5fb99a32c284ec3b84630d0eff9c4f13cda0c3785e54fc91618bb321b6736b4de94391d6850439f8e622b5641b613ec57e842ef5"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x457}}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) 979.832993ms ago: executing program 4 (id=272): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xd}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ea6f5b3}, @in6={0xa, 0x4e20, 0xd9, @local, 0x3}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x10000, @empty, 0x4}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x5}, @in={0x2, 0x4e21, @broadcast}], 0xb0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r2, 0xda8d) accept$inet(r2, 0x0, 0x0) 419.756672ms ago: executing program 3 (id=273): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x80) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='dummy_udc.0', 0xb) 299.960903ms ago: executing program 3 (id=274): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (async) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r4}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x108, 0x200, 0x108, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0x0, 0xff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'geneve0\x00', 'veth0_to_batadv\x00', {}, {}, 0x2b, 0x7, 0x7}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0xff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e21, 0x0, 0x6, 0x200, 0xb9, 0x1}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0x909d0145d8d29740, 0xff000000], 'bond0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x6, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x31, 0x4}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xff], 'pim6reg0\x00', 'gretap0\x00', {}, {0xff}, 0x2c, 0x4, 0x1, 0x48}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 0x4e21, 0x4e21, 0x4e21, 0x4e23, 0x8, 0x6, 0xfffffffe, 0x8, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 299.470993ms ago: executing program 3 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x3d, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000080)=0xab) 120.75698ms ago: executing program 4 (id=276): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x8900, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000000)='cpuset\x00', 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000040)='./proc/sys/kernel/ns_last_pid\x00', &(0x7f00000001c0), 0x41000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d757365722c736d61636b6673666c6f6f723d2b2c704bedd5a1a1b365726d69745f64697265"]) socket$key(0xf, 0x3, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 63.141337ms ago: executing program 3 (id=277): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) read$dsp(r0, &(0x7f0000000180)=""/151, 0x97) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000240)) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe8090000000800030006246573010010418e01400004fcff", 0xfffffffffffffcc2}], 0x1) 61.750949ms ago: executing program 3 (id=278): socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x18}]}]}, 0x48}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) getuid() (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) (async, rerun: 64) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x485, 0x0, 0x2}]}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async, rerun: 64) r8 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d28282823debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000c606f93ff926000000000000000000"], 0xe0}], 0x1}, 0x40040) (async) syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x60, 0x6000, @fd=r12, 0x0, &(0x7f0000001000)=[{&(0x7f0000001100)='ccgx-ucsi 0x08', 0xe}], 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f00000003c0)) (async) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) (async) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/rcu_normal', 0x202, 0x20) sendfile(r14, r14, 0x0, 0x4) (async, rerun: 64) sendfile(r13, r13, 0x0, 0x3fffff) (rerun: 64) 0s ago: executing program 4 (id=279): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './mnt/module/block2mtd/parameters/block2mtd', [{0x20, 'P\x90\xfaM\x99\x87:'}], 0xa, "3ce475bb5dfc4e9896153d6a31dcb0de3bd41462ddd7502b3d"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x2, 0x0, 0x2, 0x6, 0x6, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) truncate(&(0x7f0000000380)='./mnt\x00', 0xb33d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='\na', 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/buffer_subbuf_size_kb\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x6) msgrcv(0x0, 0x0, 0x0, 0x3, 0x4800) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 28.930038][ T43] audit: type=1400 audit(1788604383.160:114): avc: denied { rlimitinh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.930117][ T43] audit: type=1400 audit(1788604383.160:115): avc: denied { siginh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:23955' (ED25519) to the list of known hosts. [ 30.963428][ T43] audit: type=1400 audit(1788604385.200:116): avc: denied { name_bind } for pid=5642 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.442452][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 32.442554][ T43] audit: type=1400 audit(1788604386.670:119): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.492397][ T43] audit: type=1400 audit(1788604386.720:120): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.685656][ T43] audit: type=1400 audit(1788604386.920:121): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.732143][ T43] audit: type=1400 audit(1788604386.960:122): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.797530][ T43] audit: type=1400 audit(1788604387.030:123): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.847959][ T43] audit: type=1400 audit(1788604387.080:124): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.954751][ T43] audit: type=1400 audit(1788604387.190:125): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.994675][ T43] audit: type=1400 audit(1788604387.230:126): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.061399][ T43] audit: type=1400 audit(1788604387.290:127): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.103870][ T43] audit: type=1400 audit(1788604387.340:128): avc: denied { write } for pid=5671 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.385437][ T5643] cgroup: Unknown subsys name 'net' [ 33.545364][ T5643] cgroup: Unknown subsys name 'cpuset' [ 33.549694][ T5643] cgroup: Unknown subsys name 'rlimit' [ 33.756598][ T5694] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.443158][ T5643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.008425][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 38.008512][ T43] audit: type=1400 audit(1788604392.240:159): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.161989][ T43] audit: type=1400 audit(1788604392.390:160): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.162077][ T43] audit: type=1400 audit(1788604392.390:161): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.162135][ T43] audit: type=1400 audit(1788604392.390:162): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.162186][ T43] audit: type=1400 audit(1788604392.390:163): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.173183][ T43] audit: type=1400 audit(1788604392.410:164): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[2758]" dev="sockfs" ino=2758 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.209149][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.210927][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.212402][ T5739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.213342][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.214711][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.216357][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.216823][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.217056][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.219029][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.219855][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.220321][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.220708][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.221124][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.221395][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.222419][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.222758][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.223654][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.224638][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.226287][ T43] audit: type=1400 audit(1788604392.460:165): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.226538][ T43] audit: type=1400 audit(1788604392.460:166): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.226961][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.228167][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.237362][ T43] audit: type=1400 audit(1788604392.460:167): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.237405][ T43] audit: type=1400 audit(1788604392.470:168): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.811979][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.812102][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.812428][ T5730] bridge_slave_0: entered allmulticast mode [ 38.813290][ T5730] bridge_slave_0: entered promiscuous mode [ 38.841684][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.842194][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.842412][ T5730] bridge_slave_1: entered allmulticast mode [ 38.843149][ T5730] bridge_slave_1: entered promiscuous mode [ 38.858867][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.858989][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.859521][ T5728] bridge_slave_0: entered allmulticast mode [ 38.860266][ T5728] bridge_slave_0: entered promiscuous mode [ 38.879787][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.879887][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.880210][ T5728] bridge_slave_1: entered allmulticast mode [ 38.881062][ T5728] bridge_slave_1: entered promiscuous mode [ 38.894367][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.918584][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.925073][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.925191][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.925251][ T5729] bridge_slave_0: entered allmulticast mode [ 38.925950][ T5729] bridge_slave_0: entered promiscuous mode [ 38.929286][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.930870][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.930919][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.930995][ T5738] bridge_slave_0: entered allmulticast mode [ 38.931831][ T5738] bridge_slave_0: entered promiscuous mode [ 38.940454][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.948399][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.948484][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.948651][ T5729] bridge_slave_1: entered allmulticast mode [ 38.949403][ T5729] bridge_slave_1: entered promiscuous mode [ 38.950076][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.950117][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.950266][ T5738] bridge_slave_1: entered allmulticast mode [ 38.951007][ T5738] bridge_slave_1: entered promiscuous mode [ 38.959741][ T5730] team0: Port device team_slave_0 added [ 38.982670][ T5730] team0: Port device team_slave_1 added [ 38.990395][ T5728] team0: Port device team_slave_0 added [ 39.002938][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.002985][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.003028][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.016601][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.020577][ T5728] team0: Port device team_slave_1 added [ 39.032176][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.034328][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.034342][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.034362][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.036497][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.055398][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.055984][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.055998][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.056017][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.062929][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.062941][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.062957][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.089724][ T5738] team0: Port device team_slave_0 added [ 39.104865][ T5729] team0: Port device team_slave_0 added [ 39.107343][ T5738] team0: Port device team_slave_1 added [ 39.118241][ T5730] hsr_slave_0: entered promiscuous mode [ 39.118908][ T5730] hsr_slave_1: entered promiscuous mode [ 39.127428][ T5729] team0: Port device team_slave_1 added [ 39.159923][ T5728] hsr_slave_0: entered promiscuous mode [ 39.160704][ T5728] hsr_slave_1: entered promiscuous mode [ 39.161161][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 39.161247][ T5728] Cannot create hsr debugfs directory [ 39.162134][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.162147][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.162161][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.177549][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.177563][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.177579][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.178833][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.178844][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.178858][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.189603][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.189618][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.189637][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.256380][ T5738] hsr_slave_0: entered promiscuous mode [ 39.256858][ T5738] hsr_slave_1: entered promiscuous mode [ 39.257239][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 39.257255][ T5738] Cannot create hsr debugfs directory [ 39.295615][ T5729] hsr_slave_0: entered promiscuous mode [ 39.296537][ T5729] hsr_slave_1: entered promiscuous mode [ 39.296893][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 39.296911][ T5729] Cannot create hsr debugfs directory [ 39.516883][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.525806][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.527944][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.534053][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.534644][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.539448][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.540119][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.548275][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.589792][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.589895][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.590284][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.590371][ T5730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.615348][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.620563][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.621730][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.624443][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.628057][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.632831][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.633272][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.638650][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.686036][ T116] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.688715][ T116] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.709632][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.716338][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.717762][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.723886][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.725710][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.731813][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.735338][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.736364][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.739766][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.822467][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.845552][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.845689][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.847049][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.853196][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.853803][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.857775][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.863440][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.865647][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.866066][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.869325][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.886530][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.886618][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.919869][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.952433][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.961791][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.975618][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.975721][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.985781][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.985861][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.992559][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.997364][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.997470][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.016505][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.016634][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.053584][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.074043][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.099389][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.113748][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.113857][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.121737][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.121837][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.234741][ T66] Bluetooth: hci3: command tx timeout [ 40.299274][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.322780][ T66] Bluetooth: hci0: command tx timeout [ 40.322915][ T66] Bluetooth: hci2: command tx timeout [ 40.322992][ T66] Bluetooth: hci1: command tx timeout [ 40.347162][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.360483][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.366114][ T5730] veth0_vlan: entered promiscuous mode [ 40.379172][ T5730] veth1_vlan: entered promiscuous mode [ 40.414800][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.444379][ T5728] veth0_vlan: entered promiscuous mode [ 40.444808][ T5729] veth0_vlan: entered promiscuous mode [ 40.449101][ T5730] veth0_macvtap: entered promiscuous mode [ 40.453493][ T5730] veth1_macvtap: entered promiscuous mode [ 40.462037][ T5728] veth1_vlan: entered promiscuous mode [ 40.475329][ T5729] veth1_vlan: entered promiscuous mode [ 40.482793][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.487890][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.495105][ T5738] veth0_vlan: entered promiscuous mode [ 40.513397][ T5738] veth1_vlan: entered promiscuous mode [ 40.516934][ T5728] veth0_macvtap: entered promiscuous mode [ 40.533073][ T5728] veth1_macvtap: entered promiscuous mode [ 40.546269][ T5729] veth0_macvtap: entered promiscuous mode [ 40.558797][ T5729] veth1_macvtap: entered promiscuous mode [ 40.576657][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.598519][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.598584][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.601664][ T5738] veth0_macvtap: entered promiscuous mode [ 40.604930][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.614741][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.620071][ T5738] veth1_macvtap: entered promiscuous mode [ 40.636615][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.651733][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.651792][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.663207][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.672019][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.694190][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.731401][ T5730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.746637][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.746824][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.747241][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.770723][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.770779][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.805808][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.806242][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.831408][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.835520][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.880986][ T5882] capability: warning: `syz.2.5' uses deprecated v2 capabilities in a way that may be insecure [ 40.889933][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.889997][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.895269][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.895286][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.933437][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933737][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933760][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933780][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933799][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933818][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933837][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933856][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933875][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933895][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933914][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933933][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.956759][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.956772][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.027850][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 41.083289][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.090207][ T5892] xfrm1: entered promiscuous mode [ 41.090266][ T5892] xfrm1: entered allmulticast mode [ 41.097103][ T5892] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 41.179463][ T5901] Bluetooth: MGMT ver 1.23 [ 41.235883][ T5911] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 41.254190][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 41.689252][ T5937] comedi comedi3: s526: I/O base address not correctly aligned [ 42.039029][ T5945] Zero length message leads to an empty skb [ 42.068670][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 42.100371][ T5951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=5951 comm=syz.2.25 [ 42.274829][ T5959] netlink: 'syz.0.28': attribute type 21 has an invalid length. [ 42.286798][ T5959] ipt_REJECT: TCP_RESET invalid for non-tcp [ 42.323396][ T5089] Bluetooth: hci3: command tx timeout [ 42.402600][ T5089] Bluetooth: hci1: command tx timeout [ 42.402820][ T66] Bluetooth: hci2: command tx timeout [ 42.402863][ T66] Bluetooth: hci0: command tx timeout [ 42.501796][ T5965] ALSA: seq fatal error: cannot create timer (-19) [ 42.514872][ T66] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 42.522767][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.522820][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.522861][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.522895][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.754609][ T5983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5983 comm=syz.0.37 [ 42.982893][ T5817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.018765][ T43] kauditd_printk_skb: 123 callbacks suppressed [ 43.019018][ T43] audit: type=1400 audit(1788604397.250:292): avc: denied { read } for pid=5997 comm="syz.2.42" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 43.019055][ T43] audit: type=1400 audit(1788604397.250:293): avc: denied { open } for pid=5997 comm="syz.2.42" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 43.020188][ T43] audit: type=1400 audit(1788604397.250:294): avc: denied { ioctl } for pid=5997 comm="syz.2.42" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 43.072050][ T43] audit: type=1400 audit(1788604397.300:295): avc: denied { append } for pid=5999 comm="syz.2.43" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.136027][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 43.136119][ T5817] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 43.138813][ T5817] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.142732][ T5817] usb 6-1: string descriptor 0 read error: -22 [ 43.142848][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.538979][ T43] audit: type=1400 audit(1788604397.770:296): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.705943][ T43] audit: type=1400 audit(1788604397.940:297): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.733834][ T43] audit: type=1400 audit(1788604397.970:298): avc: denied { create } for pid=6008 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.779538][ T43] audit: type=1400 audit(1788604398.010:299): avc: denied { write } for pid=6010 comm="syz.3.46" name="igmp6" dev="proc" ino=4026533375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.785583][ T43] audit: type=1400 audit(1788604398.020:300): avc: denied { append } for pid=6010 comm="syz.3.46" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.878676][ T6013] smpboot: CPU 1 is now offline [ 43.915410][ T6013] smpboot: CPU 3 is now offline [ 43.977538][ T5992] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 44.001251][ T6016] block nbd0: Receive control failed (result -32) [ 44.016194][ T6019] block nbd0: Receive control failed (result -32) [ 44.111511][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.137512][ T43] audit: type=1400 audit(1788604398.370:301): avc: denied { kexec_image_load } for pid=6024 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.193644][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.193740][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.193788][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.193792][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.193829][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.193833][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.193917][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.193922][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.193961][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.193965][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194006][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194055][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194098][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194102][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194145][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194149][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194233][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194237][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194278][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194281][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194319][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194367][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194409][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194413][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194451][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194455][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194549][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194554][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194591][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194595][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194671][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194676][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194720][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194724][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194763][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194767][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194853][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194857][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194895][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194899][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.194973][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.194978][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.195019][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.195024][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.195062][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.195066][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.195135][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.195139][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.195178][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.195182][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211056][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211064][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211151][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211156][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211202][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211206][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211245][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211249][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211338][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211342][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211381][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211385][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.211462][ T6028] binder: BINDER_SET_CONTEXT_MGR already set [ 44.211466][ T6028] binder: 6026:6028 ioctl 4018620d 200000004a80 returned -16 [ 44.255943][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.279246][ T6027] binder: 6026:6027 ioctl ae41 0 returned -22 [ 44.344462][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.393529][ T66] Bluetooth: hci3: command tx timeout [ 44.412662][ T66] Bluetooth: hci0: command tx timeout [ 44.415142][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.455652][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.456858][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.457303][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.458708][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.459067][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.473500][ T5743] Bluetooth: hci2: command tx timeout [ 44.577859][ T12] bridge_slave_1: left allmulticast mode [ 44.580645][ T12] bridge_slave_1: left promiscuous mode [ 44.586077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.600503][ T12] bridge_slave_0: left allmulticast mode [ 44.603588][ T12] bridge_slave_0: left promiscuous mode [ 44.606194][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.720811][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.726199][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.730860][ T12] bond0 (unregistering): Released all slaves [ 44.950577][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 45.066684][ T12] hsr_slave_0: left promiscuous mode [ 45.082920][ T12] hsr_slave_1: left promiscuous mode [ 45.083669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.083725][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.097128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.100756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.140955][ T12] veth1_macvtap: left promiscuous mode [ 45.141069][ T12] veth0_macvtap: left promiscuous mode [ 45.141118][ T12] veth1_vlan: left promiscuous mode [ 45.141430][ T12] veth0_vlan: left promiscuous mode [ 45.277939][ T6064] raw_sendmsg: syz.3.52 forgot to set AF_INET. Fix it! [ 45.389072][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.398144][ T12] team0 (unregistering): Port device team_slave_0 removed [ 45.506897][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.597236][ T6068] FAULT_INJECTION: forcing a failure. [ 45.597236][ T6068] name failslab, interval 1, probability 0, space 0, times 1 [ 45.602541][ T6068] CPU: 2 UID: 0 PID: 6068 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 45.602571][ T6068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.602581][ T6068] Call Trace: [ 45.602586][ T6068] [ 45.602591][ T6068] dump_stack_lvl+0x100/0x190 [ 45.602614][ T6068] should_fail_ex.cold+0x5/0xa [ 45.602634][ T6068] should_failslab+0xc2/0x120 [ 45.602651][ T6068] __kmalloc_noprof+0xfc/0x840 [ 45.602663][ T6068] ? trace_kmalloc+0xeb/0x110 [ 45.602679][ T6068] ? lsm_blob_alloc+0x68/0x90 [ 45.602697][ T6068] lsm_blob_alloc+0x68/0x90 [ 45.602712][ T6068] security_sk_alloc+0x2d/0x290 [ 45.602731][ T6068] sk_prot_alloc+0x12a/0x2a0 [ 45.602747][ T6068] sk_alloc+0x36/0xe80 [ 45.602768][ T6068] __netlink_create+0x5e/0x2c0 [ 45.602784][ T6068] ? __wake_up+0x3f/0x60 [ 45.602804][ T6068] netlink_create+0x29b/0x610 [ 45.602821][ T6068] ? __pfx_genl_bind+0x10/0x10 [ 45.602833][ T6068] ? __pfx_genl_unbind+0x10/0x10 [ 45.602844][ T6068] ? __pfx_genl_release+0x10/0x10 [ 45.602857][ T6068] __sock_create+0x339/0x860 [ 45.602876][ T6068] __sys_socket+0x14d/0x260 [ 45.602892][ T6068] ? __pfx___sys_socket+0x10/0x10 [ 45.602913][ T6068] __x64_sys_socket+0x72/0xb0 [ 45.602929][ T6068] do_syscall_64+0x123/0x790 [ 45.602946][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.602959][ T6068] RIP: 0033:0x7fda0b99f9c7 [ 45.602969][ T6068] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.602981][ T6068] RSP: 002b:00007fda0c834f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 45.602993][ T6068] RAX: ffffffffffffffda RBX: 00007fda0bc25fa0 RCX: 00007fda0b99f9c7 [ 45.603001][ T6068] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 45.603016][ T6068] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 45.603023][ T6068] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 45.603031][ T6068] R13: 00007fda0bc26038 R14: 00007fda0bc25fa0 R15: 00007fffbe92d0d8 [ 45.603048][ T6068] [ 45.749529][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.751418][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.751478][ T6033] bridge_slave_0: entered allmulticast mode [ 45.758273][ T6033] bridge_slave_0: entered promiscuous mode [ 45.762902][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.764818][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.765415][ T6033] bridge_slave_1: entered allmulticast mode [ 45.769768][ T6033] bridge_slave_1: entered promiscuous mode [ 45.839476][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.845134][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.848309][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.872016][ T6033] team0: Port device team_slave_0 added [ 45.877571][ T6033] team0: Port device team_slave_1 added [ 45.899572][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.899616][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.899650][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.900837][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.900845][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.900857][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.935077][ T6033] hsr_slave_0: entered promiscuous mode [ 45.936782][ T6033] hsr_slave_1: entered promiscuous mode [ 45.937332][ T6033] debugfs: 'hsr0' already exists in 'hsr' [ 45.937346][ T6033] Cannot create hsr debugfs directory [ 46.056610][ T6033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.063312][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.064581][ T5817] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.074821][ T6033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.081289][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.083592][ T6033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.088889][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.091234][ T6033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.097892][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.131077][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 46.149118][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.149223][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.149671][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.149764][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.200242][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.213743][ T5817] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 46.214698][ T5817] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.214712][ T5817] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 46.214766][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.240365][ T5817] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 46.251147][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.257040][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.268617][ T5817] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 46.275560][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.350379][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.350500][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.472907][ T66] Bluetooth: hci0: command tx timeout [ 46.472952][ T66] Bluetooth: hci3: command tx timeout [ 46.473573][ T5089] Bluetooth: hci1: command tx timeout [ 46.555058][ T5089] Bluetooth: hci2: command tx timeout [ 46.617861][ T6079] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 46.621027][ T6079] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 46.622027][ T6079] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 46.707227][ T6079] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 46.815029][ T6078] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 46.822112][ T5995] usb 8-1: USB disconnect, device number 2 [ 46.858049][ T5995] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 46.858606][ T5995] spcp8x5 8-1:1.0: device disconnected [ 47.171343][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.171467][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.545202][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.642319][ T6040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 47.672501][ T5995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 47.721319][ T6033] veth0_vlan: entered promiscuous mode [ 47.726445][ T6033] veth1_vlan: entered promiscuous mode [ 47.739743][ T6033] veth0_macvtap: entered promiscuous mode [ 47.741782][ T6033] veth1_macvtap: entered promiscuous mode [ 47.748229][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.750687][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.793053][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793104][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793292][ T6040] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 47.793370][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793391][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.794149][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.794165][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.794182][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.795510][ T6040] usb 8-1: config 0 descriptor?? [ 47.844157][ T5995] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 47.850235][ T5995] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 47.853426][ T5995] usb 7-1: config 1 has no interface number 0 [ 47.855817][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.859764][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.866154][ T5995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.870065][ T5995] usb 7-1: Product: syz [ 47.870160][ T5995] usb 7-1: Manufacturer: syz [ 47.870183][ T5995] usb 7-1: SerialNumber: syz [ 47.887343][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.887391][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.895932][ T5995] usb 7-1: 3:1 : does not exist [ 47.897911][ T5995] usb 7-1: 3:2 : does not exist [ 48.086802][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 48.086847][ T43] audit: type=1400 audit(1788604402.320:336): avc: denied { setopt } for pid=6134 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.095328][ T43] audit: type=1400 audit(1788604402.320:337): avc: denied { bind } for pid=6134 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.095838][ T43] audit: type=1400 audit(1788604402.320:338): avc: denied { setopt } for pid=6134 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.212051][ T6040] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 48.215540][ T6040] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 48.220382][ T6040] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0002/input/input5 [ 48.255546][ T6040] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 48.266230][ T6145] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.394576][ T43] audit: type=1400 audit(1788604402.630:339): avc: denied { create } for pid=6147 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.395373][ T43] audit: type=1400 audit(1788604402.630:340): avc: denied { setopt } for pid=6147 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.403213][ T43] audit: type=1400 audit(1788604402.640:341): avc: denied { bind } for pid=6147 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.404819][ T43] audit: type=1400 audit(1788604402.640:342): avc: denied { name_bind } for pid=6147 comm="syz.4.63" src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 48.405074][ T43] audit: type=1400 audit(1788604402.640:343): avc: denied { node_bind } for pid=6147 comm="syz.4.63" saddr=f2ff:ffff:f2ff:ffff:f2ff:ffff:f2ff:ffff src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.406329][ T43] audit: type=1400 audit(1788604402.640:344): avc: denied { create } for pid=6147 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 48.415242][ T43] audit: type=1400 audit(1788604402.650:345): avc: denied { sys_admin } for pid=6147 comm="syz.4.63" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 48.431016][ T5995] usb 8-1: USB disconnect, device number 3 [ 48.552510][ T5089] Bluetooth: hci1: command tx timeout [ 49.034041][ T5988] usb 6-1: 1:1: usb_set_interface failed (-110) [ 49.043607][ T6094] usb 6-1: USB disconnect, device number 2 [ 49.662433][ T6094] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.669494][ T6207] netlink: 'syz.3.78': attribute type 21 has an invalid length. [ 49.669574][ T6207] netlink: 156 bytes leftover after parsing attributes in process `syz.3.78'. [ 49.792404][ T6094] usb 6-1: device descriptor read/64, error -71 [ 50.012472][ T6221] bridge1: entered promiscuous mode [ 50.013870][ T6221] bridge1: entered allmulticast mode [ 50.042614][ T6094] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 50.120387][ T6226] loop5: detected capacity change from 0 to 7 [ 50.128171][ T6226] Dev loop5: unable to read RDB block 7 [ 50.128236][ T6226] loop5: AHDI p1 p3 p4 [ 50.128278][ T6226] loop5: partition table partially beyond EOD, truncated [ 50.128685][ T6226] loop5: p1 size 100663296 extends beyond EOD, truncated [ 50.135113][ T6226] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 50.184728][ T6094] usb 6-1: device descriptor read/64, error -71 [ 50.200941][ T6226] kvm: user requested TSC rate below hardware speed [ 50.206925][ T5748] udevd[5748]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.209299][ T6226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 50.219143][ T5742] udevd[5742]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 50.292560][ T6094] usb usb6-port1: attempt power cycle [ 50.389288][ T6126] usb 7-1: USB disconnect, device number 2 [ 50.406471][ T6237] TCP: TCP_TX_DELAY enabled [ 50.632305][ T5089] Bluetooth: hci1: command tx timeout [ 50.652358][ T6094] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 50.685934][ T6094] usb 6-1: device descriptor read/8, error -71 [ 50.733562][ T6250] bond1: option xmit_hash_policy: invalid value (6) [ 50.740994][ T6250] bond1 (unregistering): Released all slaves [ 50.834380][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 50.834487][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 50.954002][ T6094] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 50.982798][ T6094] usb 6-1: device descriptor read/8, error -71 [ 51.000423][ T6269] binder: 6268:6269 ioctl c018620c 200000000040 returned -1 [ 51.105630][ T6094] usb usb6-port1: unable to enumerate USB device [ 51.273264][ T6276] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 51.279898][ T6276] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 51.295122][ T6276] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 51.328789][ T6286] erspan0: entered promiscuous mode [ 51.385262][ T5089] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 51.628656][ T6306] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 51.643710][ T6306] bond1: entered allmulticast mode [ 51.649224][ T6306] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 51.649278][ T6306] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 51.657339][ T6306] bond1: (slave vti0): making interface the new active one [ 51.657384][ T6306] vti0: entered allmulticast mode [ 51.661383][ T6306] bond1: (slave vti0): Enslaving as an active interface with an up link [ 51.665976][ T6306] bond1 (unregistering): (slave vti0): Releasing backup interface [ 51.666043][ T6306] vti0: left allmulticast mode [ 51.671241][ T6306] bond1 (unregistering): Released all slaves [ 51.673598][ T57] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 51.847133][ T57] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 51.853229][ T57] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 51.853266][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 51.863101][ T57] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 51.863141][ T57] usb 8-1: Product: syz [ 51.863172][ T57] usb 8-1: Manufacturer: syz [ 51.863199][ T57] usb 8-1: SerialNumber: syz [ 51.880392][ T57] usb 8-1: config 0 descriptor?? [ 51.891247][ T57] usb 8-1: selecting invalid altsetting 0 [ 52.003690][ T6323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6323 comm=syz.2.112 [ 52.004199][ T6323] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 52.004712][ T6323] netlink: 'syz.2.112': attribute type 3 has an invalid length. [ 52.159502][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.159953][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.160289][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.160528][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.161895][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.162547][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.164881][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.165087][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.165271][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.165438][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.165814][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.166052][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.168492][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.168690][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.168861][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.169053][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.169249][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.169416][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.169589][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.172095][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.172339][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.172519][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.172689][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.172857][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.173031][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.173203][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.173374][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.173548][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.173715][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179245][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179394][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179536][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179687][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179829][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.179971][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180123][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180266][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180408][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180556][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180698][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.180869][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.191314][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.191475][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.191639][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.191786][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.191928][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.192080][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.192498][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.192646][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.192796][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.194882][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195037][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195195][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195340][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195490][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195634][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195778][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.195928][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.196074][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.196223][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.201670][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.201859][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.202033][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.202239][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211207][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211367][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211513][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211656][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211806][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.211950][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.212125][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227186][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227341][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227487][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227647][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227793][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.227945][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.228092][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.239508][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.239687][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.241220][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.241379][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.243704][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.244021][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.244183][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.244347][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.244544][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.244698][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.247766][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.247916][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248072][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248308][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248470][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248634][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248778][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.248923][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.249105][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.255916][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.256088][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.256235][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.256379][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.256538][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.256683][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.258122][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.258285][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.258473][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261039][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261220][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261385][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261559][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261722][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.261885][ T6340] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.272858][ T5817] usb 8-1: USB disconnect, device number 4 [ 52.277447][ T6340] usb 8-1: cannot submit urb 0, error -19: no device [ 52.277612][ T6340] usb 8-1: cannot submit urb 0, error -19: no device [ 52.277759][ T6340] usb 8-1: cannot submit urb 0, error -19: no device [ 52.277934][ T6340] usb 8-1: cannot submit urb 0, error -19: no device [ 52.536491][ T6354] program syz.1.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.681448][ T6361] SELinux: ebitmap: empty map [ 52.683836][ T6361] SELinux: failed to load policy [ 52.712642][ T5089] Bluetooth: hci1: command tx timeout [ 52.823104][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 52.856993][ T6377] 9pnet_virtio: no channels available for device syz [ 52.979839][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 52.982803][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 52.984823][ T57] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 52.988868][ T57] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 52.988929][ T57] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 52.988956][ T57] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.988983][ T57] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 53.008587][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.008627][ T57] usb 6-1: Product: syz [ 53.008674][ T57] usb 6-1: Manufacturer: syz [ 53.008699][ T57] usb 6-1: SerialNumber: syz [ 53.026483][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 53.040292][ T57] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input6 [ 53.044321][ T6040] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 53.112156][ T43] kauditd_printk_skb: 80 callbacks suppressed [ 53.112218][ T43] audit: type=1400 audit(1788604407.340:426): avc: denied { name_bind } for pid=6398 comm="syz.2.136" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 53.133682][ T43] audit: type=1400 audit(1788604407.370:427): avc: denied { name_connect } for pid=6397 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 53.203640][ T6040] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 53.207256][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.207295][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.207328][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.223141][ T6040] usb 8-1: config 0 descriptor?? [ 53.253415][ T57] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 53.253448][ T57] (id 0x00) [ 53.337805][ T43] audit: type=1400 audit(1788604407.570:428): avc: denied { setattr } for pid=6412 comm="syz.2.137" path="/dev/net/tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 53.362924][ T57] rc_core: IR keymap rc-imon-pad not found [ 53.364591][ T6126] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 53.367210][ T57] Registered IR keymap rc-empty [ 53.369528][ T57] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 53.374059][ T57] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 53.379692][ T6413] gadgetfs: bound to dummy_udc driver [ 53.451758][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.458078][ T57] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 53.464520][ T57] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input7 [ 53.481023][ T57] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:7> initialized [ 53.492417][ T6126] usb 9-1: device descriptor read/64, error -71 [ 53.612458][ T5995] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.613793][ C0] gadgetfs: connected [ 53.614847][ T5995] gadgetfs: disconnected [ 53.637647][ T6040] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 53.640479][ T6040] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 53.649570][ T6040] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0003/input/input8 [ 53.671734][ T6040] cm6533_jd 0003:0D8C:0022.0003: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 53.696726][ T43] audit: type=1400 audit(1788604407.930:429): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 53.735047][ T6126] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 53.805752][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.807362][ T1162] IPVS: starting estimator thread 0... [ 53.809899][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.813527][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.815891][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.818352][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.820663][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.824103][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.824157][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.824193][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.824229][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.837409][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.841523][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.844356][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.845372][ T5817] usb 8-1: USB disconnect, device number 5 [ 53.850076][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852343][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852360][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852372][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852384][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852395][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852407][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852418][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852430][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852441][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852453][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852464][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852477][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852490][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852502][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852513][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852524][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852535][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.852547][ T6419] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 53.873045][ T6126] usb 9-1: device descriptor read/64, error -71 [ 53.892398][ T6422] IPVS: using max 44 ests per chain, 105600 per kthread [ 53.966651][ T43] audit: type=1400 audit(1788604408.200:430): avc: denied { write } for pid=6423 comm="syz.2.140" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.967107][ T43] audit: type=1400 audit(1788604408.200:431): avc: denied { ioctl } for pid=6423 comm="syz.2.140" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.983349][ T6126] usb usb9-port1: attempt power cycle [ 54.041253][ T43] audit: type=1400 audit(1788604408.270:432): avc: denied { connect } for pid=6353 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.056472][ T6425] imon:send_packet: task interrupted [ 54.056554][ T6425] imon:send_packet: packet tx failed (-512) [ 54.056830][ T6425] imon:vfd_write: send packet #1 failed [ 54.060031][ T43] audit: type=1400 audit(1788604408.290:433): avc: denied { watch watch_reads } for pid=6353 comm="syz.1.121" path="/12" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.061415][ T43] audit: type=1400 audit(1788604408.290:434): avc: denied { write } for pid=6429 comm="syz.2.142" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.194621][ T6040] usb 6-1: USB disconnect, device number 7 [ 54.322559][ T6126] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 54.344396][ T6126] usb 9-1: device descriptor read/8, error -71 [ 54.605284][ T6126] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 54.623572][ T6126] usb 9-1: device descriptor read/8, error -71 [ 54.733315][ T6126] usb usb9-port1: unable to enumerate USB device [ 54.823239][ T43] audit: type=1400 audit(1788604409.050:435): avc: denied { append } for pid=6451 comm="syz.3.150" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.858295][ T6454] binder: 6453:6454 ioctl c0285840 2000000000c0 returned -22 [ 54.883228][ T6126] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 55.023030][ T6126] usb 9-1: device descriptor read/64, error -71 [ 55.051827][ T6465] bond0: entered allmulticast mode [ 55.051888][ T6465] bond_slave_0: entered allmulticast mode [ 55.051917][ T6465] bond_slave_1: entered allmulticast mode [ 55.242856][ T5995] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 55.272559][ T6126] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 55.403780][ T6126] usb 9-1: device descriptor read/64, error -71 [ 55.406229][ T5995] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 55.407614][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.407638][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.407667][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.415825][ T5995] usb 6-1: config 0 descriptor?? [ 55.512636][ T6126] usb usb9-port1: attempt power cycle [ 55.824414][ T6464] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 55.825194][ T6464] ALSA: mixer_oss: invalid index 137438 [ 55.830922][ T5995] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 55.835147][ T5995] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 55.841420][ T5995] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0004/input/input9 [ 55.855879][ T6126] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 55.873563][ T6126] usb 9-1: device descriptor read/8, error -71 [ 55.883397][ T5995] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 56.029444][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.034767][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.043547][ T5995] usb 6-1: USB disconnect, device number 8 [ 56.112948][ T6126] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 56.146030][ T6126] usb 9-1: device descriptor read/8, error -71 [ 56.254323][ T6126] usb usb9-port1: unable to enumerate USB device [ 56.308077][ T6486] input: syz0 as /devices/virtual/input/input10 [ 56.630378][ T6492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.767156][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.162'. [ 56.907500][ T6489] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 57.130078][ T6516] tun0: tun_chr_ioctl cmd 1074025675 [ 57.132657][ T6516] tun0: persist enabled [ 57.139713][ T6516] tun0: tun_chr_ioctl cmd 1074025675 [ 57.139765][ T6516] tun0: persist disabled [ 57.254768][ T6516] misc userio: The device must be registered before sending interrupts [ 57.383995][ T6535] orangefs_devreq_write_iter: total:8239: must be at least:8240: [ 57.502340][ T57] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 57.632493][ T57] usb 9-1: device descriptor read/64, error -71 [ 57.688194][ T6567] loop6: detected capacity change from 0 to 2640 [ 57.699179][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 57.701180][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 57.701431][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 57.702838][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 57.703114][ T5742] Buffer I/O error on dev loop6, logical block 0, async page read [ 57.828674][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 57.872491][ T57] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 57.908097][ T6576] ======================================================= [ 57.908097][ T6576] WARNING: The mand mount option has been deprecated and [ 57.908097][ T6576] and is ignored by this kernel. Remove the mand [ 57.908097][ T6576] option from the mount to silence this warning. [ 57.908097][ T6576] ======================================================= [ 57.912332][ T6040] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 57.951637][ T6576] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 58.002503][ T57] usb 9-1: device descriptor read/64, error -71 [ 58.008606][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.059669][ T6576] erspan1: entered promiscuous mode [ 58.066017][ T6040] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 58.066861][ T6040] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 58.066904][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.067906][ T6040] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 58.067918][ T6040] usb 8-1: Manufacturer: syz [ 58.069150][ T6040] usb 8-1: config 0 descriptor?? [ 58.126306][ T57] usb usb9-port1: attempt power cycle [ 58.172316][ T6040] rc_core: IR keymap rc-hauppauge not found [ 58.172638][ T6040] Registered IR keymap rc-empty [ 58.179988][ T6040] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 58.185773][ T6040] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 58.201810][ T43] kauditd_printk_skb: 57 callbacks suppressed [ 58.201859][ T43] audit: type=1400 audit(1788604412.430:493): avc: denied { write } for pid=6586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.299974][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.300305][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.334203][ T6040] usb 8-1: USB disconnect, device number 6 [ 58.411662][ T43] audit: type=1400 audit(1788604412.640:494): avc: denied { write } for pid=6591 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.418937][ T43] audit: type=1400 audit(1788604412.650:495): avc: denied { ioctl } for pid=6592 comm="syz.2.183" path="socket:[15138]" dev="sockfs" ino=15138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.463537][ T57] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 58.483984][ T57] usb 9-1: device descriptor read/8, error -71 [ 58.552507][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.555382][ T5995] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 58.555420][ T5995] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 58.617863][ T6597] syzkaller0: entered promiscuous mode [ 58.620181][ T6597] syzkaller0: entered allmulticast mode [ 58.637212][ T43] audit: type=1400 audit(1788604412.870:496): avc: denied { write } for pid=6595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.753245][ T57] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 58.767184][ T43] audit: type=1400 audit(1788604413.000:497): avc: denied { write } for pid=6600 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.785021][ T57] usb 9-1: device descriptor read/8, error -71 [ 58.894302][ T57] usb usb9-port1: unable to enumerate USB device [ 59.171829][ T43] audit: type=1400 audit(1788604413.400:498): avc: denied { mount } for pid=6566 comm="syz.1.181" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.543883][ T43] audit: type=1400 audit(1788604413.780:499): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.770183][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 59.770247][ T6617] netlink: 14 bytes leftover after parsing attributes in process `syz.1.190'. [ 60.288242][ T6608] warning: `syz.3.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.366164][ T43] audit: type=1400 audit(1788604414.600:500): avc: denied { write } for pid=6621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.448773][ T6633] ip6t_rt: too many addresses specified [ 60.496428][ T6637] FAULT_INJECTION: forcing a failure. [ 60.496428][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 60.496487][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.3.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.496513][ T6637] Tainted: [L]=SOFTLOCKUP [ 60.496518][ T6637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.496525][ T6637] Call Trace: [ 60.496529][ T6637] [ 60.496533][ T6637] dump_stack_lvl+0x100/0x190 [ 60.496563][ T6637] should_fail_ex.cold+0x5/0xa [ 60.496579][ T6637] should_failslab+0xc2/0x120 [ 60.496596][ T6637] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.496612][ T6637] ? get_mm_exe_file+0x8a/0x1a0 [ 60.496623][ T6637] ? get_current_details+0xa0/0x670 [ 60.496641][ T6637] get_current_details+0xa0/0x670 [ 60.496658][ T6637] landlock_merge_ruleset+0x7ef/0xd10 [ 60.496682][ T6637] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 60.496705][ T6637] do_syscall_64+0x123/0x790 [ 60.496726][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.496737][ T6637] RIP: 0033:0x7fda0b99e159 [ 60.496747][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.496757][ T6637] RSP: 002b:00007fda0c836028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 60.496768][ T6637] RAX: ffffffffffffffda RBX: 00007fda0bc25fa0 RCX: 00007fda0b99e159 [ 60.496775][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 60.496781][ T6637] RBP: 00007fda0ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.496787][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.496793][ T6637] R13: 00007fda0bc26038 R14: 00007fda0bc25fa0 R15: 00007fffbe92d0d8 [ 60.496807][ T6637] [ 60.528948][ T43] audit: type=1400 audit(1788604414.760:501): avc: denied { write } for pid=6638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.633874][ T5995] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 60.633934][ T5995] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 60.640740][ T43] audit: type=1400 audit(1788604414.870:502): avc: denied { mount } for pid=6648 comm="syz.1.201" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.648547][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.713332][ T5817] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 60.795113][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.795912][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.861894][ T6658] bridge_slave_0: left allmulticast mode [ 60.864548][ T6040] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.864818][ T5817] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 60.866860][ T5817] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 60.866887][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.867866][ T5817] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 60.867879][ T5817] usb 9-1: Manufacturer: syz [ 60.871416][ T5817] usb 9-1: config 0 descriptor?? [ 60.883808][ T6658] bridge_slave_0: left promiscuous mode [ 60.887593][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.893466][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 60.908413][ T6658] bridge_slave_1: left allmulticast mode [ 60.911566][ T6658] bridge_slave_1: left promiscuous mode [ 60.911730][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.922824][ T5817] rc_core: IR keymap rc-hauppauge not found [ 60.924006][ T5817] Registered IR keymap rc-empty [ 60.925497][ T5817] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 60.928157][ T5817] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input12 [ 60.938999][ T6658] bond0: (slave bond_slave_0): Releasing backup interface [ 60.944861][ T6658] bond_slave_0: left allmulticast mode [ 60.962806][ T6658] bond0: (slave bond_slave_1): Releasing backup interface [ 60.967460][ T6658] bond_slave_1: left allmulticast mode [ 60.981854][ T6658] team0: Port device team_slave_0 removed [ 60.995655][ T6658] team0: Port device team_slave_1 removed [ 61.000588][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.005061][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.011760][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.015311][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.023426][ T6040] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 61.027529][ T6040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.027576][ T6040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.027624][ T6040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.031884][ T6658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.048860][ T10] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 61.055078][ T6040] usb 7-1: config 0 descriptor?? [ 61.055312][ T10] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.058536][ T10] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.060664][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.060677][ T10] usb 6-1: Product: syz [ 61.060730][ T10] usb 6-1: Manufacturer: syz [ 61.060738][ T10] usb 6-1: SerialNumber: syz [ 61.089482][ T10] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 61.105591][ T10] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 61.108143][ T10] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 61.323596][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 61.507868][ T6040] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 61.514561][ T6040] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 61.527429][ T6040] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0005/input/input13 [ 61.540208][ T6040] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 61.717638][ T6040] usb 7-1: USB disconnect, device number 3 [ 62.139323][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 62.335286][ T10] usb 9-1: USB disconnect, device number 14 [ 62.542543][ T6126] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.696256][ T6126] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 62.697337][ T6126] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 62.697363][ T6126] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.699068][ T6126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.699080][ T6126] usb 7-1: Product: syz [ 62.699087][ T6126] usb 7-1: Manufacturer: syz [ 62.699094][ T6126] usb 7-1: SerialNumber: syz [ 62.713035][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.716121][ T5995] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 62.716136][ T5995] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 62.796424][ T6662] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.014662][ T10] usb 7-1: USB disconnect, device number 4 [ 63.089279][ T6717] netlink: 'syz.4.209': attribute type 39 has an invalid length. [ 63.095346][ T6717] hsr_slave_0 (unregistering): left promiscuous mode [ 63.182373][ T6094] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 63.332828][ T6094] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.337458][ T6094] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.340123][ T6094] usb 8-1: config 0 has no interface number 0 [ 63.342183][ T6094] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 63.346226][ T6094] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 63.350027][ T6094] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.356023][ T6094] usb 8-1: config 0 descriptor?? [ 63.358154][ T6713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.374143][ T6094] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 63.441288][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 63.441382][ T43] audit: type=1400 audit(1788604417.670:525): avc: denied { bind } for pid=6730 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.450054][ T43] audit: type=1400 audit(1788604417.680:526): avc: denied { map } for pid=6730 comm="syz.4.214" path="socket:[16352]" dev="sockfs" ino=16352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.450296][ T43] audit: type=1400 audit(1788604417.680:527): avc: denied { read } for pid=6730 comm="syz.4.214" path="socket:[16352]" dev="sockfs" ino=16352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.529022][ T43] audit: type=1400 audit(1788604417.760:528): avc: denied { create } for pid=6732 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.586046][ T5816] usb 8-1: USB disconnect, device number 7 [ 63.751238][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6740 comm=syz.4.217 [ 63.832614][ T6662] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 63.832858][ T6662] ath9k_htc: Failed to initialize the device [ 63.835067][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 63.996097][ T6649] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 64.001812][ T6094] usb 6-1: USB disconnect, device number 9 [ 64.022654][ T6094] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 64.032088][ T6094] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 64.038021][ T6094] ti_usb_3410_5052 6-1:2.0: device disconnected [ 64.081914][ T43] audit: type=1326 audit(1788604418.310:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6748 comm="syz.4.220" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a699e159 code=0x0 [ 64.132498][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.150278][ T6751] netlink: 'syz.3.221': attribute type 21 has an invalid length. [ 64.282551][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 64.283143][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 64.284047][ T10] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 64.284071][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 64.285703][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.285715][ T10] usb 7-1: Product: syz [ 64.285722][ T10] usb 7-1: Manufacturer: syz [ 64.285729][ T10] usb 7-1: SerialNumber: syz [ 64.297632][ T10] ldusb 7-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 64.456696][ T43] audit: type=1400 audit(1788604418.690:530): avc: denied { create } for pid=6753 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.463296][ T43] audit: type=1400 audit(1788604418.690:531): avc: denied { setopt } for pid=6753 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.463326][ T43] audit: type=1400 audit(1788604418.690:532): avc: denied { read } for pid=6753 comm="syz.3.222" path="socket:[16540]" dev="sockfs" ino=16540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.523103][ T43] audit: type=1400 audit(1788604418.760:533): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.549326][ T57] usb 7-1: USB disconnect, device number 5 [ 64.549364][ C0] ldusb 7-1:1.0: usb_submit_urb failed (-19) [ 64.554679][ T6709] ldusb 7-1:1.0: Couldn't submit interrupt_out_urb -19 [ 64.566295][ T57] ldusb 7-1:1.0: LD USB Device #0 now disconnected [ 64.753701][ T6709] binder_alloc: 6708: binder_alloc_buf, no vma [ 64.952307][ T5089] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.955930][ T5995] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 64.955985][ T5995] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 65.216240][ T6773] fuse: Bad value for 'fd' [ 65.461633][ T43] audit: type=1400 audit(1788604419.690:534): avc: denied { ioctl } for pid=6778 comm="syz.2.230" path="socket:[16720]" dev="sockfs" ino=16720 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.282396][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 66.442984][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 66.446843][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.450337][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.455132][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.459899][ T9] usb 6-1: config 0 descriptor?? [ 66.471916][ T6794] kvm: pic: non byte read [ 66.475981][ T6794] kvm: pic: non byte read [ 66.477372][ T6794] kvm: pic: non byte read [ 66.478405][ T6794] kvm: pic: non byte read [ 66.479348][ T6794] kvm: pic: non byte read [ 66.480217][ T6794] kvm: pic: non byte read [ 66.481323][ T6794] kvm: pic: non byte read [ 66.482820][ T6794] kvm: pic: non byte read [ 66.484494][ T6794] kvm: pic: non byte read [ 66.485448][ T6794] kvm: pic: non byte read [ 66.889109][ T9] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 66.892094][ T9] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 66.899945][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0006/input/input15 [ 66.904910][ T6810] FAULT_INJECTION: forcing a failure. [ 66.904910][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 66.905318][ T6810] CPU: 2 UID: 0 PID: 6810 Comm: syz.4.238 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.905346][ T6810] Tainted: [L]=SOFTLOCKUP [ 66.905351][ T6810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.905358][ T6810] Call Trace: [ 66.905363][ T6810] [ 66.905368][ T6810] dump_stack_lvl+0x100/0x190 [ 66.905399][ T6810] should_fail_ex.cold+0x5/0xa [ 66.905417][ T6810] should_failslab+0xc2/0x120 [ 66.905436][ T6810] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.905451][ T6810] ? gadget_bind_driver+0x100/0xbf0 [ 66.905473][ T6810] ? dummy_alloc_request+0xa9/0x1b0 [ 66.905491][ T6810] dummy_alloc_request+0xa9/0x1b0 [ 66.905506][ T6810] usb_ep_alloc_request+0x6e/0x2e0 [ 66.905521][ T6810] gadget_bind+0xe7/0x660 [ 66.905538][ T6810] ? kernfs_create_link+0x1bd/0x240 [ 66.905553][ T6810] gadget_bind_driver+0x28c/0xbf0 [ 66.905569][ T6810] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 66.905585][ T6810] ? __pfx_gadget_bind_driver+0x10/0x10 [ 66.905602][ T6810] really_probe+0x241/0xa60 [ 66.905615][ T6810] __driver_probe_device+0x210/0x460 [ 66.905625][ T6810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.905642][ T6810] driver_probe_device+0x4a/0x140 [ 66.905653][ T6810] __driver_attach+0x21f/0x5b0 [ 66.905664][ T6810] ? __pfx___driver_attach+0x10/0x10 [ 66.905674][ T6810] bus_for_each_dev+0x13e/0x1d0 [ 66.905689][ T6810] ? __pfx_bus_for_each_dev+0x10/0x10 [ 66.905702][ T6810] ? bus_add_driver+0x2b5/0x5b0 [ 66.905721][ T6810] bus_add_driver+0x305/0x5b0 [ 66.905738][ T6810] driver_register+0x1e2/0x360 [ 66.905750][ T6810] ? rcu_is_watching+0x13/0xc0 [ 66.905767][ T6810] usb_gadget_register_driver_owner+0x132/0x210 [ 66.905787][ T6810] raw_ioctl+0x1a85/0x2b80 [ 66.905805][ T6810] ? __pfx_raw_ioctl+0x10/0x10 [ 66.905820][ T6810] ? selinux_file_ioctl+0x13b/0x290 [ 66.905842][ T6810] ? selinux_file_ioctl+0xb6/0x290 [ 66.905855][ T6810] ? __pfx_raw_ioctl+0x10/0x10 [ 66.905870][ T6810] __x64_sys_ioctl+0x18e/0x210 [ 66.905890][ T6810] do_syscall_64+0x123/0x790 [ 66.905904][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.905917][ T6810] RIP: 0033:0x7ff3a699ddeb [ 66.905927][ T6810] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 66.905938][ T6810] RSP: 002b:00007ff3a77a7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.905954][ T6810] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff3a699ddeb [ 66.905962][ T6810] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 66.905969][ T6810] RBP: 00007ff3a77a8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 66.905977][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.905983][ T6810] R13: 00002000000004c0 R14: 0000000000000005 R15: 0000000000000000 [ 66.905999][ T6810] [ 66.908645][ T6810] raw-gadget.1 gadget.4: usb_ep_alloc_request failed [ 66.908657][ T6810] udc dummy_udc.4: failed to start USB Raw Gadget: -12 [ 66.908668][ T6810] raw-gadget.1 gadget.4: probe with driver raw-gadget.1 failed with error -12 [ 66.910541][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.910739][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.029519][ T9] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 67.088997][ T9] usb 6-1: USB disconnect, device number 10 [ 67.297509][ T6813] netlink: 112 bytes leftover after parsing attributes in process `syz.2.239'. [ 67.367033][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.367113][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.440013][ T6819] gretap1: entered promiscuous mode [ 67.516649][ T6826] tmpfs: Unknown parameter '00000000000000000000044' [ 67.697001][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 67.855273][ T6852] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 67.855303][ T6852] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.855816][ T6852] vhci_hcd vhci_hcd.0: Device attached [ 67.866849][ T6853] vhci_hcd: connection closed [ 67.872675][ T12] vhci_hcd vhci_hcd.3: stop threads [ 67.873161][ T12] vhci_hcd vhci_hcd.3: release socket [ 67.873218][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 67.927635][ T6862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.250'. [ 68.049659][ T6876] binder: 6874:6876 ioctl c0306201 200000000080 returned -14 [ 68.096629][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 68.096828][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 68.096863][ T6881] netlink: 'syz.1.256': attribute type 7 has an invalid length. [ 68.114104][ T9] wiimote 0005:057E:0306.0007: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 68.118103][ T9] wiimote 0005:057E:0306.0007: New device registered [ 68.239136][ T6888] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.247736][ T6888] bridge_slave_0: left allmulticast mode [ 68.247792][ T6888] bridge_slave_0: left promiscuous mode [ 68.247907][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.255838][ T6888] bridge_slave_1: left allmulticast mode [ 68.255901][ T6888] bridge_slave_1: left promiscuous mode [ 68.256061][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263077][ T6888] bond0: (slave bond_slave_0): Releasing backup interface [ 68.268298][ T6888] bond0: (slave bond_slave_1): Releasing backup interface [ 68.275071][ T6888] team0: Port device team_slave_0 removed [ 68.278462][ T6888] team0: Port device team_slave_1 removed [ 68.278891][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.278902][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.281146][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.281157][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.284413][ T57] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 68.286184][ T6888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.294768][ T6888] team0: Port device xfrm0 added [ 68.295643][ T6888] tipc: Started in network mode [ 68.295664][ T6888] tipc: Node identity 52c3f6291562, cluster identity 4711 [ 68.295919][ T6888] tipc: Enabled bearer , priority 0 [ 68.301815][ T38] tipc: Resetting bearer [ 68.308288][ T6888] tipc: Enabling of bearer rejected, already enabled [ 68.332851][ T6662] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.375599][ T6898] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 68.419367][ T6903] Bluetooth: MGMT ver 1.23 [ 68.464198][ T57] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 68.468903][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.474487][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.474560][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.482993][ T6662] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 68.484323][ T6662] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 68.484339][ T6662] usb 7-1: config 1 has no interface number 0 [ 68.486214][ T6662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.486231][ T6662] usb 7-1: Product: syz [ 68.486241][ T6662] usb 7-1: Manufacturer: syz [ 68.486249][ T6662] usb 7-1: SerialNumber: syz [ 68.510824][ T57] usb 9-1: config 0 descriptor?? [ 68.518445][ T6662] usb 7-1: cannot find UAC_HEADER [ 68.567953][ T6662] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 68.600683][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.613662][ T6912] erofs (device loop3): cannot find valid erofs superblock [ 68.618249][ T6911] erofs (device loop3): cannot find valid erofs superblock [ 68.623657][ T6912] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 68.678074][ T6912] tmpfs: Unknown parameter 'mpol7ó¢JJ<›Qvu' [ 68.707308][ T5995] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) [ 68.725812][ T6876] FAULT_INJECTION: forcing a failure. [ 68.725812][ T6876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.733225][ T6876] CPU: 2 UID: 0 PID: 6876 Comm: syz.2.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.733268][ T6876] Tainted: [L]=SOFTLOCKUP [ 68.733274][ T6876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.733282][ T6876] Call Trace: [ 68.733288][ T6876] [ 68.733293][ T6876] dump_stack_lvl+0x100/0x190 [ 68.733313][ T6876] should_fail_ex.cold+0x5/0xa [ 68.733331][ T6876] strncpy_from_user+0x3b/0x2d0 [ 68.733346][ T6876] bpf_prog_load+0x14dc/0x2a80 [ 68.733364][ T6876] ? __pfx_bpf_prog_load+0x10/0x10 [ 68.733389][ T6876] __sys_bpf+0x1f46/0x4a30 [ 68.733403][ T6876] ? __pfx___sys_bpf+0x10/0x10 [ 68.733418][ T6876] ? __pfx_futex_hash+0x10/0x10 [ 68.733434][ T6876] ? __pfx_do_anonymous_page+0x10/0x10 [ 68.733461][ T6876] ? __pfx___handle_mm_fault+0x10/0x10 [ 68.733478][ T6876] ? __pfx___css_rstat_updated+0x10/0x10 [ 68.733502][ T6876] ? __x64_sys_futex+0x34f/0x4d0 [ 68.733517][ T6876] ? __x64_sys_futex+0x358/0x4d0 [ 68.733533][ T6876] ? exc_page_fault+0x6f/0xd0 [ 68.733546][ T6876] ? xfd_validate_state+0x129/0x190 [ 68.733560][ T6876] ? __x64_sys_bpf+0xce/0x140 [ 68.733570][ T6876] __x64_sys_bpf+0xce/0x140 [ 68.733580][ T6876] ? do_syscall_64+0xae/0x790 [ 68.733594][ T6876] do_syscall_64+0x123/0x790 [ 68.733609][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.733622][ T6876] RIP: 0033:0x7f99b879e159 [ 68.733632][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.733643][ T6876] RSP: 002b:00007f99b9636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.733654][ T6876] RAX: ffffffffffffffda RBX: 00007f99b8a25fa0 RCX: 00007f99b879e159 [ 68.733661][ T6876] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 68.733667][ T6876] RBP: 00007f99b8835024 R08: 0000000000000000 R09: 0000000000000000 [ 68.733674][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.733680][ T6876] R13: 00007f99b8a26038 R14: 00007f99b8a25fa0 R15: 00007ffe8f99b0d8 [ 68.733694][ T6876] [ 68.740076][ T5995] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input17 [ 68.746802][ T5995] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input18 [ 68.748439][ T5995] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input16 [ 68.821610][ T6876] binder: 6874:6876 ioctl c028aa03 200000000180 returned -22 [ 68.823539][ T10] usb 7-1: USB disconnect, device number 6 [ 68.837790][ T6874] wiimote 0005:057E:0306.0007: Device removed [ 68.941143][ T57] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 68.944591][ T57] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 68.950970][ T57] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0008/input/input19 [ 68.963669][ T57] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 69.137534][ T6662] usb 9-1: USB disconnect, device number 15 [ 69.413499][ T10] tipc: Node number set to 1201796649 [ 69.836065][ T6925] team0: Device gtp0 is of different type [ 69.916012][ T6927] can0: slcan on ttynull. [ 69.962784][ T6662] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 69.997865][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 69.997955][ T43] audit: type=1400 audit(1788604424.230:566): avc: denied { write } for pid=6929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.060612][ T43] audit: type=1400 audit(1788604424.290:567): avc: denied { write } for pid=6932 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.113330][ T6662] usb 8-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 70.114373][ T6662] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.114399][ T6662] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.114418][ T6662] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.114450][ T6662] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.116849][ T6662] usb 8-1: config 0 descriptor?? [ 70.162387][ T57] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 70.313129][ T57] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.316688][ T57] usb 9-1: config 0 has no interfaces? [ 70.317541][ T57] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 70.317558][ T57] usb 9-1: Manufacturer: syz [ 70.320085][ T57] usb 9-1: config 0 descriptor?? [ 70.336404][ T43] audit: type=1326 audit(1788604424.570:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.3.264" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda0b99e159 code=0x0 [ 70.486305][ T6662] usbhid 8-1:0.0: can't add hid device: -71 [ 70.486400][ T6662] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 70.493970][ T6662] usb 8-1: USB disconnect, device number 8 [ 70.525407][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.526128][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.526911][ T6040] usb 9-1: USB disconnect, device number 16 [ 70.583369][ T43] audit: type=1400 audit(1788604424.810:569): avc: denied { write } for pid=6938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.609455][ T6926] can0 (unregistered): slcan off ttynull. [ 70.637758][ T43] audit: type=1400 audit(1788604424.870:570): avc: denied { write } for pid=6941 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.729059][ T43] audit: type=1400 audit(1788604424.960:571): avc: denied { write } for pid=6943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.785849][ T43] audit: type=1400 audit(1788604425.020:572): avc: denied { write } for pid=6946 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.201220][ T25] cfg80211: failed to load regulatory.db [ 71.206753][ T43] audit: type=1400 audit(1788604425.440:573): avc: denied { checkpoint_restore } for pid=6948 comm="syz.4.268" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.214023][ T43] audit: type=1400 audit(1788604425.450:574): avc: denied { execute } for pid=6948 comm="syz.4.268" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.446043][ T43] audit: type=1400 audit(1788604425.680:575): avc: denied { read } for pid=6951 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.460808][ T6952] bridge_slave_1: entered promiscuous mode [ 71.565525][ T6957] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.812376][ T6662] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 71.942730][ T6662] usb 6-1: device descriptor read/64, error -71 [ 72.182748][ T6662] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 72.312401][ T6662] usb 6-1: device descriptor read/64, error -71 [ 72.422720][ T6662] usb usb6-port1: attempt power cycle [ 72.745867][ T6968] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 72.748099][ T6968] x_tables: duplicate underflow at hook 2 [ 72.764695][ T6662] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 72.786677][ T6662] usb 6-1: device descriptor read/8, error -71 [ 72.947401][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.026528][ T6662] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 73.044737][ T6662] usb 6-1: device descriptor read/8, error -71 [ 73.066992][ T6985] block2mtd: device name too long [ 73.102874][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 73.107034][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 73.107535][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.107556][ T9] usb 5-1: Product: Test Gadg [ 73.116614][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 73.121023][ T9] gspca_spca501: reg write: error -32 ** replaying previous printk message ** [ 73.121023][ T9] gspca_spca501: reg write: error -32 [ 73.121068][ T9] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 73.121128][ T9] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 73.123096][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 73.137660][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 73.141390][ C0] CPU: 0 UID: 0 PID: 5130 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 73.146076][ C0] Tainted: [L]=SOFTLOCKUP [ 73.147785][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.152128][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 73.154628][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 73.162665][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 73.165695][ C0] RAX: dffffc0000000000 RBX: ffff8880327c4000 RCX: 0000000000000102 [ 73.169513][ C0] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff8880327c4128 [ 73.172781][ C0] RBP: ffff8880327c4128 R08: 0000000000000004 R09: 0000000000000020 [ 73.175865][ C0] R10: 0000000000000020 R11: 0000000000000001 R12: ffff8880327c40f0 [ 73.178917][ C0] R13: ffff8880327c4128 R14: ffff8880327c4740 R15: 0000000000000001 [ 73.182110][ C0] FS: 00007f3d853d1c80(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 73.185830][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.188782][ C0] CR2: 000000110c26d2e4 CR3: 000000003412b000 CR4: 0000000000352ef0 [ 73.192763][ C0] Call Trace: [ 73.194324][ C0] [ 73.195684][ C0] f_midi2_set_alt+0x444/0x5f0 [ 73.197690][ C0] composite_setup+0x16f8/0x9290 [ 73.199784][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 73.201881][ C0] ? __pfx_composite_setup+0x10/0x10 [ 73.204090][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 73.206303][ C0] ? do_raw_spin_lock+0x128/0x260 [ 73.208245][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 73.209930][ C0] ? configfs_composite_setup+0xfb/0x130 [ 73.211708][ C0] configfs_composite_setup+0xfb/0x130 [ 73.213489][ C0] dummy_timer+0x2039/0x3700 [ 73.215206][ C0] ? __dequeue_task+0x18e1/0x2dc0 [ 73.217117][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.219819][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 73.221920][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 73.223429][ C0] ? rcu_is_watching+0x13/0xc0 [ 73.224908][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.226724][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 73.228272][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 73.229849][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 73.231481][ C0] handle_softirqs+0x1e6/0x9d0 [ 73.233189][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.235228][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.237191][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 73.239885][ C0] __irq_exit_rcu+0x194/0x210 [ 73.241885][ C0] irq_exit_rcu+0x9/0x30 [ 73.243802][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.246088][ C0] [ 73.247138][ C0] [ 73.248116][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.249990][ C0] RIP: 0010:__unwind_start+0x50/0x7e0 [ 73.252069][ C0] Code: 83 ec 18 e8 a2 67 c5 00 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 77 06 00 00 80 3d 25 cc b1 0c 00 <49> 89 6e 28 0f 84 22 02 00 00 65 48 3b 2d 56 5d d2 12 0f 84 7f 02 [ 73.260447][ C0] RSP: 0018:ffffc900037274e0 EFLAGS: 00000202 [ 73.263202][ C0] RAX: dffffc0000000000 RBX: ffffc900037275c0 RCX: 0000000000000000 [ 73.266309][ C0] RDX: 1ffff920006e4eab RSI: 0000000000000000 RDI: ffffc90003727590 [ 73.269077][ C0] RBP: ffff88802abc8000 R08: 0000000000000001 R09: 0000000000000000 [ 73.271774][ C0] R10: ffffc90003727530 R11: 0000000000000000 R12: 0000000000000000 [ 73.274295][ C0] R13: ffffc900037275f0 R14: ffffc90003727530 R15: ffffc90003727558 [ 73.277038][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.279277][ C0] arch_stack_walk+0x73/0xf0 [ 73.280740][ C0] stack_trace_save+0x8e/0xc0 [ 73.282214][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 73.283895][ C0] ? stack_trace_save+0x8e/0xc0 [ 73.285434][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 73.287103][ C0] kasan_save_stack+0x30/0x50 [ 73.288583][ C0] kasan_save_track+0x14/0x30 [ 73.290063][ C0] __kasan_kmalloc+0xaa/0xb0 [ 73.291564][ C0] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 73.293617][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 73.295433][ C0] ? __alloc_skb+0x185/0x710 [ 73.296956][ C0] kmalloc_reserve+0xe8/0x350 [ 73.298563][ C0] __alloc_skb+0x185/0x710 [ 73.300066][ C0] ? __alloc_skb+0x5b7/0x710 [ 73.301658][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 73.303298][ C0] ? try_to_wake_up+0x158/0x1c90 [ 73.304937][ C0] alloc_skb_with_frags+0xdd/0x760 [ 73.306667][ C0] ? find_held_lock+0x2b/0x80 [ 73.308141][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.309759][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 73.311376][ C0] sock_alloc_send_pskb+0x801/0x980 [ 73.313002][ C0] ? avc_has_perm+0x135/0x1e0 [ 73.314459][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 73.316204][ C0] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 73.318064][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 73.320043][ C0] ? sock_def_readable+0x1d2/0x600 [ 73.321577][ C0] unix_dgram_sendmsg+0x3c7/0x1810 [ 73.323148][ C0] ? __pfx_syslog_print+0x10/0x10 [ 73.324683][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 73.326472][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.328296][ C0] __sys_sendto+0x48b/0x4e0 [ 73.329814][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 73.331678][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 73.333270][ C0] ? do_syslog+0x18c/0x6d0 [ 73.334681][ C0] ? xfd_validate_state+0x129/0x190 [ 73.336311][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 73.337816][ C0] ? do_syscall_64+0xae/0x790 [ 73.339337][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.341064][ C0] do_syscall_64+0x123/0x790 [ 73.342721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.344818][ C0] RIP: 0033:0x7f3d85521407 [ 73.346419][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 73.352388][ C0] RSP: 002b:00007ffeec079a30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 73.355062][ C0] RAX: ffffffffffffffda RBX: 00007f3d853d1c80 RCX: 00007f3d85521407 [ 73.357562][ C0] RDX: 0000000000000066 RSI: 00007ffeec079b70 RDI: 0000000000000003 [ 73.360481][ C0] RBP: 00007ffeec079fa0 R08: 0000000000000000 R09: 0000000000000000 [ 73.363613][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffeec079fb8 [ 73.366185][ C0] R13: 00007ffeec079b70 R14: 000000000000004b R15: 00007ffeec079b70 [ 73.368678][ C0] [ 73.369665][ C0] Modules linked in: [ 73.370980][ C0] ---[ end trace 0000000000000000 ]--- [ 73.372709][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 73.372736][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 73.372746][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 73.372756][ C0] RAX: dffffc0000000000 RBX: ffff8880327c4000 RCX: 0000000000000102 [ 73.372763][ C0] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff8880327c4128 [ 73.372769][ C0] RBP: ffff8880327c4128 R08: 0000000000000004 R09: 0000000000000020 [ 73.372776][ C0] R10: 0000000000000020 R11: 0000000000000001 R12: ffff8880327c40f0 [ 73.372782][ C0] R13: ffff8880327c4128 R14: ffff8880327c4740 R15: 0000000000000001 [ 73.372789][ C0] FS: 00007f3d853d1c80(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 73.372811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.372820][ C0] CR2: 000000110c26d2e4 CR3: 000000003412b000 CR4: 0000000000352ef0 [ 73.372828][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 73.406483][ C0] Kernel Offset: disabled [ 73.407836][ C0] Rebooting in 86400 seconds..