last executing test programs: 56.296907448s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x128) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r4) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000240)={0x5, [[0x1, 0x4, 0x1, 0x7f, 0x9, 0xa9, 0x6], [0x710f9e63, 0x5, 0x10001, 0x5, 0x3, 0x3, 0xef, 0xf], [0x2, 0x9, 0xffff, 0x0, 0x488, 0x5, 0x1000, 0x72]], '\x00', [{0x8, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x3395, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x719fd441, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x20, 0x1, 0x0, 0x1}, {0x6, 0x5, 0x0, 0x1, 0x1}, {0xc, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xfffffff4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xfffffffa, 0x1, 0x1}, {0x7fff, 0x4}, {0xa7, 0x1000}], '\x00', 0x3}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="28820100000000001400350062726964276530000000000000000000"], 0x34}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r9) 53.208399249s ago: executing program 3 (id=43): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000091f000/0x1000)=nil) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, &(0x7f0000000180)=0x8) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30c}, 0x1, 0x0, 0x0, 0x20008840}, 0x81) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000010c0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 53.125571877s ago: executing program 3 (id=45): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r5, 0x202, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x84) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) shutdown(r1, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r8, 0x89f1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x30) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f00000006c0)={0x2, 0x6, @start={0x0, 0x1, "34927e34e46df90340581288776bcd06ba6539990f7cdd0bd1006c720891356d7ad51131ff46943b7291d5f16364050332b11f77e2e3e9a983625e18152eed72af3496a727bfb5634885c26344dba16ad307421ff719a34822de829335815408a8c3616fa551b18b93bf89c25913f840b28e399219406ad55ba9576812946c7898cc000b424410cea2e24d1ac5dd120282121c06608b6d743bad10232733d68b31a32518656ceb334d0511da4480427eb2e9bf32b03eb082dff1f2c74acde9ea9e3c21cb4ca21634435f2e30aadbaebce26705df83930cf9b6384e5447e35dcb7625af402ab5c4da4e1812b390ba45510e7e357dd10a60c6e1c0a752c75b3f1454c04a67c997649f28c5ab694433cf17043fd288352d5618e06e6404bc4a3c1f3055d0b8040dec977c955d35903eca7a70cae4df467104fb0ffb491e2e4689d1772641aa13ea15a380fbe3f2fa8587f84818faeee648a60c8cc0d3f49616ea20f4a83109e9d162b17924748c00dc6a858d50cfc30fb2c5afed845d7b4c7393de5009420b99415ee282c3a45532f7f0de8be7f95daa7adfd7d43a0f2700289b1cd026da631fe2591bdbb45f049d89154205def23bb3ad3393464cb4a4ff8c78f8fd01be8c0cb9eb8c9ce6110f643570487137a9870b464d6176001e9943d62d4ca12c029983d75ac3ec2135c5bf31107b1d12929765c07e03c0867f4036754b4e8acb43322180df30c95aa6d32af6a1fb6c31d508d04f9bf9091ec99cb6d2469d47686ae0725cd9c5a2d62f235a3cd39a7b5001d4a0a46102797d3021649a1f0d65cc12808510ec22428bc20f4ab147e8f7705ed0bfb80817cf5833e5e37ddebb8ac64dde5bdf4be6659e494b60631da4852d424186c6dc34b1e6977c1e3549e45b9e82cf0aa3ed3741c375c0df5277c690708024ee83ebe144e1dcb9841f699f13228f201c5fde275c969e5402a2926f241246d27dc22b7cfa5d489585f291be05664e978c6438c752d00e0eb8f8cd2b873693d8cd778e4735f34e23a3d0ae08157143eccb1b14f044c41be47655d9b05ebe326224f14c9670fd455df995bd421e422bf80450f3cb08d160c3c179f4fd3749fef471d103be21bc21f0a113e03f378dfd22abe783df58384f7377648f29044c47ee737e558ffef02a7607b70849bf2a902c8a657faf1b8b30c1dca9eb2e8c9b4ae38be5d7cee2eadd8a6a89c59ba842d72867245730dc7bc27819b395e2fb5d4f830cb2f82c55c9a305959c824dfa56e6464f735d59ca0f1b28bbe8b0baaf407ec8400e9ffd338ae1a3076923eeecd11a930f04276cdd28d3d73e0b18b2b80d117569c26b6ae8308a346aecc28718561c2fa3df74a4a16eea4971f0781e0ed52a5d4a5114264baf4b5b814bd61d34c9422c1a2b59110ada48801b94af3af00ecfed67aaf2e92a54eb1b0c1271a9d7", "447e0c284bd001e3e60ed8c220117edea537e43a18bd7660503a72f2fff6d60aad5c5d9fa533cc8526115c5277e0140868f849fadf77d1924aa5b0305507e5cac5ce4141b134b6e9a81733255c51c1f5ed086840369acc673627f875f9d0cd6b646a16a02888be08810c8532cd7e4ba877031e614ea517784a5f50dc4a653dc2dfe5789a0284edfd416836fd9dfb2b87ebb075d6d6fa317fc2dbf51686c1c003d92d30e188f59a2b554e511b5e4aa1d94c171bf7c4110db7541dc7a37806eb6c55b5a8d109317beb97879148b45a97a2f67f13268b38eb087fbbd5d3bd91a43401378955e9c1702badf811668eb5ee30b0060d9df3e694cda08434c25c802feb4c45d24f7fc8a8eebd9f8196bb1d0b9e156ffb0686936587d577ccdd296ea90a43defe370a27cb2e581d65f92992cfa4813ca39393f3577056d41a71c4bacde0247de88dbefa5b47e723560fef87690abb1264b23ff691af7f65595268874ac546e0d37111975e8de02b252fbff7c43e3d6729375d4a795f1b614cbcc0cba0f68ffbe276999e198fddd98955299253b1403474768b2dfaf4b54ab2f6272d28b5ec6a60916207bb0d29ad0982b1d1a44be9b0fb13cc658004b51be9fa5e367309fea448f7728789266ae900c200c889f81f4de1fd9aac3710871ad48b9f9ba1e71654d9de36a661a6f0307584133b5ae543a135bce0cb647794d1e7fe38a848fd34d772ebc6c7bdd3d8b836eccf6ef698adb8b0bb800afd13db802699ecd84dae7e8a149c7570ddd7774e96dbb254ccf35c58054ae655824d7a2f3b9ac36bbfeacfda4eae6ddc737204050f0b7f93a7348a176612e2a915685a59cc2d4911daae89c83aaf8240d977be57287a63e666effd2a1bec2f88f7aec7531d24269602729b9a07cf6b2acf9f7177b4c39dd5d409efd8f5c2ed6a3063358e0ade5c0f5c197f827625ab4116a30be96f0e48e92315bd55aa972c2e6ef234212302527f3c09b6ff51249b8a6e01113a4db778a9deeb0d1c05979d8a00d486bbc64a283d8a69dd97e7e48287aa7979be187187ca228c978b2aafd867262381e546fc45d33f33127482bdb27af7bac5e6ed4648da81951550ce37fcd37f12f0a05baff3bbdb4b4e568ab9ecfbf5949a6cc9dbf4847b432e92b19fd560785c934c21546d5789ce2be6adef0b578130468b96c94fb19b70f0dd78419501a913f738c76c8baf7ef4795d66e6db8a98d308dbef884b54b0ef1e84cfc043e8c7afef8b3552e80df1a9cefb622613fbb750cc2d4d46b7f53a83af3f2d9ac2c29a26748be9787e6ab5f887d766b3bc49b218868b9ef966c519182ce335b51b3cf09609653bd79692af69f691c6bc2e8bbc4f1d5a51e2fa17be7970e037af6e15e989635df70d8219a06ee6ef939f35b61addae0f10efdc7ceecb9e520d73117d7c5fc32bb5409eb0800ff7"}, [0x0, 0x8, 0xe, 0x0, 0x2, 0x5, 0x10, 0x9e5, 0x8, 0x4, 0x1, 0x10, 0x9b73, 0x0, 0x7fffffff, 0x3, 0x1, 0xd, 0x1, 0x8b0, 0x7, 0x4, 0x8, 0xb061, 0x8000, 0xae8, 0x401, 0x8, 0x800, 0x7, 0x8, 0x9, 0x2, 0x6, 0x8, 0xbc6, 0x7, 0x8, 0xe, 0x1, 0xa621, 0xa8e, 0x3438faeb, 0x6, 0xfffffffffffffff7, 0x3, 0x2, 0x5, 0x5a25, 0x62, 0x0, 0x4, 0xae, 0xffffffffffffffff, 0xe95, 0xa, 0xfffffffffffffff7, 0x8000000000000001, 0x5, 0x7, 0x9, 0xe0c, 0x4ef3141e, 0x8]}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x8, 0x4, 0xf}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000000)) 53.000245487s ago: executing program 3 (id=50): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffff", 0xa) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x1000000000009, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x456, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34009803}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.830127589s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0xc4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x8, 0x0, 0x7, 0x3, 0x4, 0x8, 0x1000, 0x10001, [{0x1ff, 0x8, 0x7, 0x1000}, {0x6, 0x9, 0x2, 0x1}, {0x3, 0xfffffbff, 0xa, 0x3ff}, {0x5524, 0x4, 0x6, 0x101}, {0x0, 0xf, 0x5, 0x3}, {0x8, 0x2, 0x8}, {0x4, 0xfb, 0x1000, 0xd3ba}]}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x1}}]}}]}, 0xc4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 52.770604649s ago: executing program 3 (id=54): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a0070000400000001000000040044"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f0000000140)='./file0\x00') ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110004, 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r7) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 37.783962602s ago: executing program 32 (id=54): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410001002a0070000400000001000000040044"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f0000000140)='./file0\x00') ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110004, 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r7) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 10.938565753s ago: executing program 2 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 10.8404141s ago: executing program 2 (id=533): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100000000000000000000000000000000000000000000130000000000000000", @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x1, 0x3, 0x0, &(0x7f0000000640)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x4, 0x7, 0x9, 0x3, 0x36, @mcast1, @empty, 0x7800, 0x700, 0x9, 0x80000000}}) 10.769894181s ago: executing program 2 (id=536): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfff, 0x9, 0x1a0, 0x2, 0x15, "c27092977b38d1280ae962d80687e7dab831ca"}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42200, 0x8) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r1) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10.663480783s ago: executing program 2 (id=537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) (async) clock_gettime(0x4, &(0x7f0000000040)) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) (async) r1 = fsopen(&(0x7f0000000080)='befs\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="c17718"]) 10.662949017s ago: executing program 2 (id=539): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="ba1aed2bd9ca", @multicast1, @broadcast, @rand_addr=0x64010101}}}}, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 10.590057547s ago: executing program 2 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000601"], 0x1c}, 0x1, 0x0, 0x0, 0x60004045}, 0x800) 2.198327202s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20004811) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x0) (async) write$tun(r2, &(0x7f0000000500)=ANY=[], 0xfdef) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0xfffffe3d}], 0x1, 0x4, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r14, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc, 0x0, 0x4}}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r6, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x6, 0x2, 0x1, 0x7, 0x1, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 1.880423217s ago: executing program 0 (id=680): syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8008550e, &(0x7f0000000380)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160001035c52b6c37384270b13"], 0x14}, 0x1, 0x0, 0x0, 0x24044001}, 0x890) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) chdir(&(0x7f00000000c0)='config\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4d1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) openat(r3, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) (async) openat(r3, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d8", 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000000)="d8", 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x6) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x6e22, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x93}, 0x1c) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 1.809006078s ago: executing program 1 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x11d100, 0x2c) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 1.740101628s ago: executing program 1 (id=682): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x8, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000017c0)=[{&(0x7f00000049c0)="bc", 0x1}], 0x1) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) close(r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) mkdirat(r3, &(0x7f0000000300)='./config\x00', 0x12e) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61bbcccb05656c6c2c646b8e459b29"]) r8 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000008000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000001000)={0x0, 0x0}) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000040)={0x8, 0x0, [{0x7}, {0xffffffff, 0x0, 0x9}, {0xfffffff4}, {0x7, 0x0, 0x1}, {0x100, 0x0, 0x4000001000}, {0x9, 0x0, 0x5}, {0x7, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x7, 0x0, 0x3}, {0x1, 0x0, 0x8}, {0xfffffe00, 0x0, 0x4000000e}, {0xfffffffe, 0x0, 0x1ff}, {0x5, 0x0, 0x6}, {0x5, 0x0, 0x7fffffffffffffff}, {0x7af6, 0x0, 0x6}, {0x0, 0x0, 0xc65e607}]}) getdents64(r4, &(0x7f0000000200)=""/171, 0xab) write(r4, &(0x7f0000000140)='1\x00', 0x2) 1.480607565s ago: executing program 1 (id=684): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) r4 = openat$cgroup_int(r3, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x6, 0x12) sendfile(r0, r4, 0x0, 0x10000a806) 1.479884657s ago: executing program 1 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRESDEC=r0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) (rerun: 32) socket(0x2a, 0x1, 0xa9) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80040002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x20000000) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000000), 0x4) (async, rerun: 64) close(r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x1, 0x12, r6, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000ac", @ANYRES16=r8, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r10, @ANYBLOB="06000600000000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080028bd7000fcdbdf25240000006d85b907121b465f7bc3fabdc4e01dee6e60b2e4813231daa26df1c4a7e15af82a3c4af67a2cb0cbd3428335ff8632753c73fcc0e4120a4e4b23aeb153a03b7aa46bbf97d2cc9ca26e56327faae8acd3b76b2c677f8c73a87d6072fc2b3a554449082c76aec8a79f98ea056585770d885434b17900e53885c368beff76a11d39e22d700de25edf8ef9d694711e78e113e9c152294727ac0e0092d4b276a032b2fe6f9f2e797b4244d8fc721b8edd0743a6e29de909323f6837"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x300200c0) (async) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000000040)=0x400) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000080)=0x40000) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) (async) syz_emit_ethernet(0x5d, &(0x7f00000006c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0x4e01, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x800, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "10f338f67cd50f8fd25e3c87096200"}]}}, {"a984ebf2201b5e03fa5bd663666fdbc64d0f6e"}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r12, 0x894c, &(0x7f0000000280)=0x4325) 1.350206774s ago: executing program 1 (id=687): syz_usb_connect(0x1, 0x56e, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xc3, 0x5d, 0x44, 0xff, 0x12d1, 0x1c23, 0x8687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55c, 0x2, 0x18, 0x4, 0x0, 0x0, "", [{{0x9, 0x4, 0xf6, 0x3b, 0xf, 0x2, 0x2, 0xff, 0x77, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "bb"}, {0x5, 0x24, 0x0, 0xc10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0xdc03, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x23}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15}]}, @uac_as], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0xc, 0xfd, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x7, 0x38, [@generic={0x51, 0x23, "f38647a1ef8eff051f13bef4fad4715e74985a158c596d2023526ceed06d5acbfd3b695d07e72534e2fef82801aced3e517bc1211f4d20f99c6e53d1c3121fd1e521fc6f194a6a259fafc8b497ef66"}, @generic={0x5c, 0xd, "818cb626be0e06757b827970e4636180174fce12e48964c0d6e0711377e7baa640a9061ccb6839a025b0ef0b804c31c99eee01b08a3d741333cb3817ca4bd3d817c7c9e0b9780f20b046758c82952bceed0da109b8ccd4df4d20"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x3, 0xb, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x61, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfe01}, @uac_iso={0x7, 0x25, 0x1, 0xf23f5bd23f7c895d, 0x7e, 0xe}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x7, 0x5, 0x19}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0xca, 0x0, 0x5, [@generic={0xb5, 0xd, "b36db1b2d988c31cd022ddc8a031488841fa45e912d150487e3a925acba5454cb5bf4e583f9c2352b5f28b3cb56f92eba89182a6c8365eb0ff9b81cfe5c5abef712e3cd2e5e839a5cb3c8c975e434fb8c550feec2d69aec8443d5f1beec24e8426819b0d1a295d1572c507fb3cbd3d7a906bfbe9b608ee5e4f5730c45fbf68e0db86e2cf9c66f43fd3b9e7639efeafe064e68f148bb2bcbb88df2dd5fd8482a7b4b5da050a977e07e1e95d17f2fd0256955631"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xf1, 0x6, 0x4f}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x18, 0xc0, [@generic={0x91, 0x22, "82520f0cc132864320c87db014f12024b74811aa9f2a708aede8833a8e937267cc5a8cf639f91610c8de1f3d6099936bff5cb0dc6438468297f76737a5959372942f035b9cec6afd77a4b7545f591e082cbda3e62c5634412a10d5cd9f7c26affee49fc4f5df1aec6021c0bd0935dd61a38fa6ea3d6ec8b8057f2fb5ee20b9a92230478b289f2158eaa6931612f376"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0xfe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd7, 0x4}, @generic={0xec, 0x6, "f5dcb99ba7b24e235a2ce70948cd0f371eefed10a7fb7227a7833acb43ee4b5f6c7c04c5d276cd0472070ccc4c23ed041f5f8ed59b1faa37bd79617d9dc8f40f9fd8af297d3f177b2941e6f55dd42fb5972e871323a61de7fb604259af44094195d93bb8605de15cebd0ede044157c2916593aab4766149e1f552bf2160c3718115094bc8c7b50b7beb36196e618c0f7cdb8ab25f246e4148e97bed0e8c6ac732db28b2c351c7a58254a95c27d5435d809762cfd7877c07a786c1e539df95af0216cdababe0737ef63d7313f19888d0deb9b36eb06c606a76d08613f9052999e37fcd26eb3a57a9758fb"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0x8f, 0x0, 0x200, 0xf9, 0x9, 0xf}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x30, 0x9f, 0xf7, [@generic={0x90, 0x8, "bbce50e93d20525db75af6c1f675c8eb2c9dbda84ec3abad50a1e2edfba810b3842e4db2f9a21688f44c11ebd56ebfea70047c136ef438f7c981f291c30ac38d7b5e94dda6c7608dd34cea3f5258b9c9d93cadbbc2fd910ef65cb267977a249b9c65dfc6997b480c136ed0d0fbaec4626006b15890f5ba24611421521060072202659d7f58ca8f5617c48cf559fe"}]}}]}}, {{0x9, 0x4, 0x4b, 0x7, 0x6, 0x2, 0x2, 0xff, 0x41, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x7f, 0x4, 0x4d}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xe6, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x7cbe9b6e06cb9cc1, 0x1, 0x10, 0x2, [@generic={0x98, 0xe, "e0ced9abc90623c00aec271079be6b05e62ba29d1f3ba09b4634aacc9b3d28a7aa1d5129e4d956cbba3dc2c705b7d04f8db27217dfabcbddc99fea2088b96125f8461e714f5dae664a535b05679ef8c5f2eb2b4af2857c1a834de1074d7f48bbe2ba945624eb7aa2558fe1fe1bf8609e446db54df7fcd4875ea668f61d25cfb190d9df41dfb2580aa7b03ea103f32b01d28d0761f632"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xff80}]}}, {{0x9, 0x5, 0x80, 0x2, 0x1df, 0x81, 0xd, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x9, 0x2, 0x6}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0xa, 0x6, 0x81, 0xff, 0xfe}, 0x50, &(0x7f0000000d40)={0x5, 0xf, 0x50, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "be719858f53cf6a0426328554567c5a0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x1, 0x5}, @generic={0x1f, 0x10, 0xa, "e51e102b2c732386c8d111531350666d8d335f074821f78f765754b5"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x4, 0xe97, 0xd5}]}, 0x9, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2401}}, {0xbb, &(0x7f0000000e00)=@string={0xbb, 0x3, "b6fc8df3991415cccb308b2bb21677cfbf2b13bd6e6adb5a41faa7b5d6f22d3e9a6c09d21fc934f92671fd3574f30000a045d66629de9e85e0d7cbce1adf09b7164a13367763b810f1359cfd3704b3b1cbdad3596cdd130a0ad4e1cb2f1a54298d01e11420b463d2b4bb49c58fc90c642ffff7db3722f7d1187744b5511a2691d35d8b5bc7bbe3c600bc0abf38e0ce0612720e10ca0a932f2a507791889c77741d270433bce532b704f3bd3fee84a0032023938a485f640f4d"}}, {0xeb, &(0x7f0000000ec0)=@string={0xeb, 0x3, "9ec624e80db2ee5984103a287188aff23f49b95a30ab81b4adc1cffc30488f21af763b13fb951ed287df50ff1d06078076d6b381cce500210d7ace6aeefad0081992baffe6a89f0c8dcfb12b0c6b65a35e27cadae70796eea4f6cae729ecc9f7832d1db727e845cd1144505f1f776667cb0d7f791e61ddc679739a29642837478108619678fe9047c6d2a9647833226c492341948c11e1068d69a79cf6e3b813bc045ddca556d409f04aba405a13a2bae2fa768c6500cf7e7f4dac499c4010c712570f3e79a1eb121586313967a70e77f874fb59b14ab92094b9acc3194eb5bf4f971cb0bd581eff16"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x41a}}, {0xfb, &(0x7f00000010c0)=@string={0xfb, 0x3, "c414b80271ee2764a3054ab3a7e35aa50be4967bb17c8c99ddf45904e9a6ebb752ef51d97f3f139c9d0dfd14e2f4092e5549ad129edf47c1d931f5d1631a0a215de75df398df951a6ef48ee264cc52f9f8067a1a031133558d5c33d47f1e90e27795f69b6f4327bde8cd1bb77de7f830cf3afc88a8f541a7a71da8fd7cb714f51bfc8f7cc29d347a569db78e688d1c013e7ef1a45fcc0e3ad6b6e0ff1fce872526f7d3589a33c7a9f92fe37c2f719914c0b064314462f53106d0f87c67805f84ca0377a5bea97e103411c8b39de5a5a27f8998f55dfd088287172e0ebf0e8f28ad723085ef48c1515269711b72f00a2a35310a212d05b7fb8b"}}, {0x37, &(0x7f00000011c0)=@string={0x37, 0x3, "ef5c11b18126f2be2b896685f1346bd4486441bbe5d079b5a4797eca961e10333e2261eeaa9638bb3cc57aabfa6c77f7b7b5c1e61f"}}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000080)={0x8, 0x3}) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 998.44229ms ago: executing program 0 (id=688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000500)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000400)=""/160}, 0x20) syz_usb_disconnect(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x933, 0xffffffffffffffff) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)) ptrace(0x10, r1) 559.441622ms ago: executing program 4 (id=689): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4, 0x9, 0x100, "4029f0b39d3cc2eedff4d27a977588f7e040aad022a09f8f356de0bde45bd73e", 0x31365258}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xfffffffa, 0x1, 0x5, 0x1000000, 0x6}) 558.120009ms ago: executing program 4 (id=690): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x39) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/37) ioctl$FIONCLEX(r0, 0x5450) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{r2, r3/1000+10000}, {0x77359400}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x153}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1db}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x79}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x0, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4008044) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd902}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_io_uring_setup(0x4514, &(0x7f0000000680)={0x0, 0xe5ec, 0x100, 0x2, 0x129}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, r7, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "c044810b8d"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000900)=0x1ff) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r11, 0xc0406619, &(0x7f0000000980)={@id={0x2, 0x0, @d}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f00000009c0)={0x6, 'vcan0\x00', {0x8}, 0xff3}) pipe2$watch_queue(&(0x7f0000000a00), 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r12, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x100, r13, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x40000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xbade}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}]}, 0x100}, 0x1, 0x0, 0x0, 0x44008}, 0x4010) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000cc0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xfbec, 0x2, 0x6, 0x5, 0x5ab}, &(0x7f0000000d80)=0x98) 480.659848ms ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x26, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000002b096bf003b58e83b0e0001006e650f5b523e73696d0000000f0002006e657464657673696d30000008000300002200000800910004000000060016000200000005001200000000009100b0c8cacf889295f310075ea2603a382b"], 0x54}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4b, '\x00', {0x9, 0x6, "0dce78", 0x8, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, [@fragment={0x3a, 0x0, 0xb, 0x1, 0x0, 0x1a, 0x66}], "5cdec169"}}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:1d.7\x00', 0xd) 290.123332ms ago: executing program 0 (id=692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x800c0) socket$kcm(0x2, 0x3, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0x7, 0x7, 0x8e4, 0x5}, 0x4a, [0x4, 0x6, 0x40, 0x8, 0x344, 0x1, 0x80, 0x7fffffff, 0x1f2, 0x7, 0xff, 0x3, 0x6b, 0x4, 0x9, 0x56a6a682, 0xffff, 0x0, 0xc7, 0x4, 0x80000000, 0x2, 0x9, 0x0, 0x8, 0x7, 0x0, 0x400, 0x5, 0x80000000, 0x2, 0x401, 0xc, 0x200, 0x2, 0x2, 0x49, 0x3, 0xfffffff6, 0xc, 0x3ff, 0x3, 0x80, 0x9, 0x4, 0xd5, 0x39, 0x6, 0x5a, 0xffff, 0x650fdaa8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x5, 0x1887, 0x1, 0x8000, 0x5, 0x200, 0x400], [0x9, 0x10, 0xfffffff7, 0x8000, 0x8, 0x3ebc, 0x10000, 0x2, 0xb428, 0xfff, 0x0, 0xb960, 0x3ff, 0x6, 0x5, 0x6, 0x10000, 0xffff, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4f, 0x88, 0xa532, 0x5, 0x1, 0xfffffffb, 0xc5fe, 0x0, 0x0, 0x3, 0x2, 0x3, 0x6689, 0x7, 0xffffffff, 0x4, 0xd8d6, 0x3, 0x2, 0x6, 0x80000001, 0x2, 0x1, 0x1, 0x1, 0x6df, 0xffffffff, 0xffffffff, 0x73, 0x6, 0x1, 0x7ff, 0x6, 0x7e, 0xb9, 0x7, 0x76ba, 0x7, 0xf1], [0x9, 0x8, 0x7, 0x9, 0x4, 0x100, 0x800, 0x80000001, 0x3, 0x4, 0x9fa, 0x6, 0x80000001, 0x9, 0xd970, 0x0, 0x80000001, 0x7, 0x8, 0x8, 0x5, 0x2, 0x6, 0x3, 0x6, 0xfffffffa, 0x80000001, 0x0, 0x1ff, 0xf, 0xfffffff8, 0x0, 0x6, 0x200, 0x5, 0x413, 0xfffffff8, 0x5, 0x1, 0xde, 0x9, 0x6, 0x6, 0x4, 0x1, 0x2a0e, 0x0, 0x1, 0xe5, 0xfffffff9, 0xc0000000, 0x2, 0x9, 0x80000001, 0x0, 0x7, 0x0, 0x4, 0x3, 0xd, 0x4a7, 0x1, 0x3043, 0x800], [0x6, 0x0, 0x80, 0x5, 0x34, 0x249d, 0x8, 0x36fb, 0x0, 0xbe28, 0xfffffff7, 0xa1, 0x100, 0x3, 0x8, 0x3, 0xfffffff9, 0xb92e, 0x6, 0x2, 0x9, 0x7a9, 0x881c, 0x3, 0x665, 0x2, 0x2, 0x81, 0x4b, 0x4099, 0x5, 0x40, 0x7, 0xb, 0xffff, 0x1, 0x8, 0x9, 0xbc, 0xfffffff8, 0x8, 0x4, 0x3ff, 0x2, 0x5, 0x7, 0x7fffffff, 0x1c, 0x6, 0x2, 0x7, 0x4, 0x0, 0xb, 0x8, 0x8670, 0x4, 0x10000, 0x1, 0x8, 0x2, 0xa5f, 0x2000, 0x9]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = dup(r2) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x800c0) (async) socket$kcm(0x2, 0x3, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz1\x00', {0x7, 0x7, 0x8e4, 0x5}, 0x4a, [0x4, 0x6, 0x40, 0x8, 0x344, 0x1, 0x80, 0x7fffffff, 0x1f2, 0x7, 0xff, 0x3, 0x6b, 0x4, 0x9, 0x56a6a682, 0xffff, 0x0, 0xc7, 0x4, 0x80000000, 0x2, 0x9, 0x0, 0x8, 0x7, 0x0, 0x400, 0x5, 0x80000000, 0x2, 0x401, 0xc, 0x200, 0x2, 0x2, 0x49, 0x3, 0xfffffff6, 0xc, 0x3ff, 0x3, 0x80, 0x9, 0x4, 0xd5, 0x39, 0x6, 0x5a, 0xffff, 0x650fdaa8, 0x8, 0x6, 0x0, 0x0, 0x4, 0x5, 0x1887, 0x1, 0x8000, 0x5, 0x200, 0x400], [0x9, 0x10, 0xfffffff7, 0x8000, 0x8, 0x3ebc, 0x10000, 0x2, 0xb428, 0xfff, 0x0, 0xb960, 0x3ff, 0x6, 0x5, 0x6, 0x10000, 0xffff, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4f, 0x88, 0xa532, 0x5, 0x1, 0xfffffffb, 0xc5fe, 0x0, 0x0, 0x3, 0x2, 0x3, 0x6689, 0x7, 0xffffffff, 0x4, 0xd8d6, 0x3, 0x2, 0x6, 0x80000001, 0x2, 0x1, 0x1, 0x1, 0x6df, 0xffffffff, 0xffffffff, 0x73, 0x6, 0x1, 0x7ff, 0x6, 0x7e, 0xb9, 0x7, 0x76ba, 0x7, 0xf1], [0x9, 0x8, 0x7, 0x9, 0x4, 0x100, 0x800, 0x80000001, 0x3, 0x4, 0x9fa, 0x6, 0x80000001, 0x9, 0xd970, 0x0, 0x80000001, 0x7, 0x8, 0x8, 0x5, 0x2, 0x6, 0x3, 0x6, 0xfffffffa, 0x80000001, 0x0, 0x1ff, 0xf, 0xfffffff8, 0x0, 0x6, 0x200, 0x5, 0x413, 0xfffffff8, 0x5, 0x1, 0xde, 0x9, 0x6, 0x6, 0x4, 0x1, 0x2a0e, 0x0, 0x1, 0xe5, 0xfffffff9, 0xc0000000, 0x2, 0x9, 0x80000001, 0x0, 0x7, 0x0, 0x4, 0x3, 0xd, 0x4a7, 0x1, 0x3043, 0x800], [0x6, 0x0, 0x80, 0x5, 0x34, 0x249d, 0x8, 0x36fb, 0x0, 0xbe28, 0xfffffff7, 0xa1, 0x100, 0x3, 0x8, 0x3, 0xfffffff9, 0xb92e, 0x6, 0x2, 0x9, 0x7a9, 0x881c, 0x3, 0x665, 0x2, 0x2, 0x81, 0x4b, 0x4099, 0x5, 0x40, 0x7, 0xb, 0xffff, 0x1, 0x8, 0x9, 0xbc, 0xfffffff8, 0x8, 0x4, 0x3ff, 0x2, 0x5, 0x7, 0x7fffffff, 0x1c, 0x6, 0x2, 0x7, 0x4, 0x0, 0xb, 0x8, 0x8670, 0x4, 0x10000, 0x1, 0x8, 0x2, 0xa5f, 0x2000, 0x9]}, 0x45c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) (async) inotify_init1(0x0) (async) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x44000160) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) dup(r2) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) (async) 268.11495ms ago: executing program 4 (id=693): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r2, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x2141, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x40000, 0x111) read$watch_queue(r5, &(0x7f0000000340)=""/155, 0x9b) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x5, 0xffffffff, 0xa4a}) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 267.871359ms ago: executing program 0 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbc7000ff0fcfffff000000d1000000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x3, 0x3, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000040)=['-[\'\x10'], 0x4}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0x40010004, 0x6, 0x200b, 0xac, 0xffeffffa, 0x0, 0x0, 0x2, 0xff}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000080000000049000000080001007063690011000200303030300100000031302e300000000008007300000000000e0001006e517464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x60}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x10, 0x2, {{0x77d, 0x26d, 0x10, 0x2d82, 0x9, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000140)={0x800000000000000, 0xa000, 0x70000000000000, 0x9, 0x18}) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000000280)={@mcast2}, 0x14) ioctl$NILFS_IOCTL_GET_VINFO(r10, 0xc0186e86, &(0x7f0000000640)={&(0x7f00000004c0)=[{0xffffffffffffffff, 0x4, 0x0, 0x8001}, {0xfff, 0x3, 0xa, 0x6}, {0x3, 0xffffffffffffffff, 0x40, 0x6}, {0xeb2, 0x1, 0x5026, 0x3}, {0x797, 0x4, 0x9, 0x5}, {0x8, 0xb, 0x6, 0x5885}, {0xfffffffffffffffd, 0xe1b2, 0x8, 0x2}, {0x6, 0x80, 0x8, 0xffffffff}, {0xfffffffffffffff7, 0x6, 0x100, 0x1}], 0x9, 0x20, 0x9, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r14, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r15 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r15, 0xae80, 0x0) 266.736504ms ago: executing program 4 (id=695): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000080000000000000001000000000000000000000000000000000000000000000000f0000000000000", @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x1, 0x3, 0x0, &(0x7f0000000640)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x4, 0x7, 0x9, 0x3, 0x36, @mcast1, @empty, 0x7800, 0x700, 0x9, 0x80000000}}) 140.332496ms ago: executing program 4 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf0, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x90, 0x2, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xfffffff9, 0x10000000, 0x8, 0x2}, 0x6, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x2, 0x3ff, 0x10000}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x6, 0xbc9, 0x1}, 0x4, r1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d98a02e20ae6c23828462696e643d7374617469633a", @ANYRESDEC]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0xb, r4, 0x0, r5}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xbf, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) close_range(r6, r6, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg$inet(r7, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x2c}], 0x1}}], 0x1, 0x800) 58.564947ms ago: executing program 0 (id=697): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x7a1400) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000c40)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0xfffffffffffffffa, 0xffffffffffffffff, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x100, 0x7, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0x34, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x10000000000000, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x7b33, 0x0, 0x0, 0x80000000000000, 0x4, 0x200000000004, 0x0, 0x800000000, 0x40, 0xfffffffffffffffc, 0x100000000000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x40000000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0xffffffffffffffff, 0x8, 0x4, 0x0, 0x2, 0xfffffffffffffff7, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xde4, 0x401, 0x4, 0x100000000]}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000180)={0x0, 0x0, '\x00', {0x0, @bt={0xfffffff8, 0xfffffff7, 0x0, 0x3, 0x5, 0x355, 0x8, 0x1, 0x7fffffff, 0x10001, 0x7, 0x6, 0x3, 0x7fffffff, 0x10, 0x20, {0xe, 0x7f}, 0xa, 0x2}}}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x4, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d64b3e5a7c9b7ae"}, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f00000000c0)={0x4, {"dfa42cb98dc632375aa7ab3380423074", "5fa48dff6911db23b8612e1b1d5cc3ec", "2b6e34ea1bb045c2ed2afeeecc2aebca"}, 0xd, 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 0s ago: executing program 0 (id=698): prctl$PR_SET_MM(0x4e, 0x2, &(0x7f00002d5000/0x1000)=nil) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x7ffffffffffffffc, 0x8001, 0x10000, 0x9, 0x1000, 0xf, 0x10, 0x4, 0x7ffffffffffffffd, 0x1, 0x0, 0x3, 0x5, 0x6, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x310, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x2, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x36, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffff8, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=699): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26371' (ED25519) to the list of known hosts. [ 47.369682][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 47.369700][ T42] audit: type=1400 audit(1785915496.021:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.383248][ T42] audit: type=1400 audit(1785915496.041:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.386483][ T5718] cgroup: Unknown subsys name 'net' [ 47.395786][ T42] audit: type=1400 audit(1785915496.051:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.597737][ T5718] cgroup: Unknown subsys name 'cpuset' [ 47.604313][ T5718] cgroup: Unknown subsys name 'rlimit' [ 47.780074][ T42] audit: type=1400 audit(1785915496.431:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.789275][ T42] audit: type=1400 audit(1785915496.431:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.796875][ T42] audit: type=1400 audit(1785915496.431:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.803414][ T42] audit: type=1400 audit(1785915496.431:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.809626][ T42] audit: type=1400 audit(1785915496.451:148): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 47.818328][ T42] audit: type=1400 audit(1785915496.451:149): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 47.826480][ T42] audit: type=1400 audit(1785915496.461:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 47.855175][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.789554][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.151142][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.151155][ T42] audit: type=1400 audit(1785915501.801:158): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.280669][ T42] audit: type=1400 audit(1785915501.931:159): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.286751][ T42] audit: type=1400 audit(1785915501.931:160): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.294589][ T42] audit: type=1400 audit(1785915501.931:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.302086][ T42] audit: type=1400 audit(1785915501.941:162): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[2739]" dev="sockfs" ino=2739 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.317105][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.320831][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.320950][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.323063][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.323617][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.324866][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.325106][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.325402][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.325546][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.326604][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.327612][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.328266][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.328750][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.329583][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.331872][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.333871][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.334465][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.337657][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.337724][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.338757][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.341832][ T42] audit: type=1400 audit(1785915501.991:163): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.383338][ T42] audit: type=1400 audit(1785915501.991:164): avc: denied { open } for pid=5736 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.395900][ T42] audit: type=1400 audit(1785915502.001:165): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.403207][ T42] audit: type=1400 audit(1785915502.001:166): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.409641][ T42] audit: type=1400 audit(1785915502.021:167): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.968952][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.975841][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.978675][ T5734] bridge_slave_0: entered allmulticast mode [ 53.981649][ T5734] bridge_slave_0: entered promiscuous mode [ 53.986026][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.988729][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.991822][ T5734] bridge_slave_1: entered allmulticast mode [ 53.999114][ T5734] bridge_slave_1: entered promiscuous mode [ 54.073357][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.104069][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.206492][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.209705][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.213050][ T5733] bridge_slave_0: entered allmulticast mode [ 54.216860][ T5733] bridge_slave_0: entered promiscuous mode [ 54.221060][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.223509][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.226005][ T5744] bridge_slave_0: entered allmulticast mode [ 54.228789][ T5744] bridge_slave_0: entered promiscuous mode [ 54.235076][ T5734] team0: Port device team_slave_0 added [ 54.249955][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.252348][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.254853][ T5733] bridge_slave_1: entered allmulticast mode [ 54.257668][ T5733] bridge_slave_1: entered promiscuous mode [ 54.268158][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.271437][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.274789][ T5744] bridge_slave_1: entered allmulticast mode [ 54.278678][ T5744] bridge_slave_1: entered promiscuous mode [ 54.283519][ T5734] team0: Port device team_slave_1 added [ 54.338257][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.341208][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.352081][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.360027][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.364987][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.368063][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.370883][ T5736] bridge_slave_0: entered allmulticast mode [ 54.375399][ T5736] bridge_slave_0: entered promiscuous mode [ 54.380024][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.383070][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.386126][ T5736] bridge_slave_1: entered allmulticast mode [ 54.388867][ T5736] bridge_slave_1: entered promiscuous mode [ 54.394707][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.397761][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.399953][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.407983][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.414204][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.425969][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.463191][ T5744] team0: Port device team_slave_0 added [ 54.481639][ T5733] team0: Port device team_slave_0 added [ 54.484839][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.489987][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.494730][ T5744] team0: Port device team_slave_1 added [ 54.518813][ T5733] team0: Port device team_slave_1 added [ 54.543202][ T5734] hsr_slave_0: entered promiscuous mode [ 54.546612][ T5734] hsr_slave_1: entered promiscuous mode [ 54.570255][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.573379][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.583879][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.589951][ T5736] team0: Port device team_slave_0 added [ 54.592298][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.594577][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.602525][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.606676][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.609622][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.620699][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.637860][ T5736] team0: Port device team_slave_1 added [ 54.640665][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.642919][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.650754][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.752734][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.756783][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.767396][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.777126][ T5733] hsr_slave_0: entered promiscuous mode [ 54.780278][ T5733] hsr_slave_1: entered promiscuous mode [ 54.783913][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 54.786385][ T5733] Cannot create hsr debugfs directory [ 54.806768][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.809842][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.820467][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.844466][ T5744] hsr_slave_0: entered promiscuous mode [ 54.848316][ T5744] hsr_slave_1: entered promiscuous mode [ 54.851325][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 54.854580][ T5744] Cannot create hsr debugfs directory [ 54.944672][ T5736] hsr_slave_0: entered promiscuous mode [ 54.947737][ T5736] hsr_slave_1: entered promiscuous mode [ 54.950872][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 54.953209][ T5736] Cannot create hsr debugfs directory [ 55.215926][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.223189][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.225874][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.230669][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.236467][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.246963][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.250695][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.256869][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.307753][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.312913][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.315637][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.319825][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.323571][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.330175][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.335535][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.341412][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.396248][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.400558][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.403319][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.406998][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.410565][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.414267][ T5093] Bluetooth: hci3: command tx timeout [ 55.414278][ T5747] Bluetooth: hci1: command tx timeout [ 55.416893][ T5750] Bluetooth: hci2: command tx timeout [ 55.423459][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.424418][ T5750] Bluetooth: hci0: command tx timeout [ 55.427400][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.435113][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.532210][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.535721][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.540622][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.543936][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.547725][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.550702][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.555495][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.558275][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.562423][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.611541][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.625690][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.633026][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.636281][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.653479][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.655830][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.677347][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.687657][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.690748][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.713349][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.720160][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.723050][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.754196][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.762363][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.765244][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.776012][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.778371][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.790397][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.818386][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.832585][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.835600][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.843281][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.846285][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.908557][ T5744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.040168][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.065726][ T5734] veth0_vlan: entered promiscuous mode [ 56.072479][ T5734] veth1_vlan: entered promiscuous mode [ 56.089946][ T5734] veth0_macvtap: entered promiscuous mode [ 56.099864][ T5734] veth1_macvtap: entered promiscuous mode [ 56.108368][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.119844][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.130860][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.142185][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.159382][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.194471][ T5733] veth0_vlan: entered promiscuous mode [ 56.218272][ T5733] veth1_vlan: entered promiscuous mode [ 56.240898][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.244345][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.254690][ T5744] veth0_vlan: entered promiscuous mode [ 56.259519][ T5736] veth0_vlan: entered promiscuous mode [ 56.284707][ T5733] veth0_macvtap: entered promiscuous mode [ 56.292258][ T5744] veth1_vlan: entered promiscuous mode [ 56.296178][ T5736] veth1_vlan: entered promiscuous mode [ 56.299140][ T5733] veth1_macvtap: entered promiscuous mode [ 56.304731][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.307503][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.325503][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.336550][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.360135][ T5744] veth0_macvtap: entered promiscuous mode [ 56.362666][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.370299][ T5744] veth1_macvtap: entered promiscuous mode [ 56.377404][ T5736] veth0_macvtap: entered promiscuous mode [ 56.388104][ T5736] veth1_macvtap: entered promiscuous mode [ 56.409665][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.416308][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.429401][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.442534][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.453083][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.479849][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.486780][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.530672][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.534267][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.557925][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.562366][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.578516][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581057][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.593709][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.597059][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.612462][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.615373][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.627743][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.632045][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.642882][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648277][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.651519][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.654839][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.659237][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.666459][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.683566][ T5545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.686746][ T5545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.697884][ T5889] process 'syz.2.5' launched '/dev/fd/6' with NULL argv: empty string added [ 56.719530][ T5889] pim6reg1: entered promiscuous mode [ 56.721499][ T5889] pim6reg1: entered allmulticast mode [ 56.775685][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.787089][ T5893] jffs2: notice: (5893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.791821][ T5894] Bluetooth: MGMT ver 1.23 [ 56.802970][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.805920][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.824981][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828841][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860356][ T5903] pim6reg1: entered promiscuous mode [ 56.864557][ T5903] pim6reg1: entered allmulticast mode [ 57.123041][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.285950][ T9] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 57.289843][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 57.294920][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.301219][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 57.305128][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 57.308639][ T9] usb 8-1: Product: syz [ 57.310488][ T9] usb 8-1: Manufacturer: syz [ 57.312350][ T9] usb 8-1: SerialNumber: syz [ 57.320384][ T9] usb 8-1: config 0 descriptor?? [ 57.327482][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 57.330240][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 57.336991][ T9] usb 8-1: selecting invalid altsetting 0 [ 57.451510][ T5925] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 57.462973][ T5827] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.493542][ T5750] Bluetooth: hci1: command tx timeout [ 57.493811][ T5093] Bluetooth: hci0: command tx timeout [ 57.494597][ T5747] Bluetooth: hci2: command tx timeout [ 57.494628][ T5747] Bluetooth: hci3: command tx timeout [ 57.544837][ T5938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5938 comm=syz.0.16 [ 57.622880][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 57.628961][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.633710][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 57.637814][ T5827] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.641621][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.648292][ T5827] usb 6-1: config 0 descriptor?? [ 57.790595][ T5947] sctp: [Deprecated]: syz.0.20 (pid 5947) Use of int in max_burst socket option deprecated. [ 57.790595][ T5947] Use struct sctp_assoc_value instead [ 57.799434][ T5947] fuse: blksize only supported for fuseblk [ 57.858465][ T5827] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 57.897229][ T5952] i2c i2c-0: new_device: Extra parameters [ 57.950440][ T5902] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 58.060007][ T5920] iowarrior 6-1:0.0: Error -90 while submitting URB [ 58.068730][ T2325] usb 6-1: USB disconnect, device number 2 [ 58.111131][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 58.116405][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.119612][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.123743][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.126181][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.154323][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 58.154344][ T42] audit: type=1400 audit(1785915506.811:283): avc: denied { write } for pid=5958 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.165417][ T42] audit: type=1400 audit(1785915506.821:284): avc: denied { create } for pid=5956 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.167718][ T5961] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.173417][ T42] audit: type=1400 audit(1785915506.821:285): avc: denied { ioctl } for pid=5958 comm="syz.0.25" path="socket:[9810]" dev="sockfs" ino=9810 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.188266][ T42] audit: type=1400 audit(1785915506.831:286): avc: denied { write } for pid=5956 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.213075][ T42] audit: type=1400 audit(1785915506.861:287): avc: denied { read write } for pid=5962 comm="syz.0.26" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.223775][ T42] audit: type=1400 audit(1785915506.871:288): avc: denied { open } for pid=5962 comm="syz.0.26" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.323517][ T5902] usb 8-1: failed to restore interface 0 altsetting 251 (error=-71) [ 58.331871][ T5882] usb 8-1: USB disconnect, device number 2 [ 58.382546][ T5902] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 58.420938][ T42] audit: type=1400 audit(1785915507.071:289): avc: denied { create } for pid=5967 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.423511][ T5968] nfs: Unknown parameter 'addr>127.0.0.1' [ 58.427188][ T42] audit: type=1400 audit(1785915507.071:290): avc: denied { write } for pid=5967 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.432092][ T5968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5968 comm=syz.0.27 [ 58.439697][ T42] audit: type=1400 audit(1785915507.071:291): avc: denied { node_bind } for pid=5967 comm="syz.0.27" saddr=127.0.0.1 src=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.439724][ T42] audit: type=1400 audit(1785915507.081:292): avc: denied { connect } for pid=5967 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.794212][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 59.517130][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 59.519999][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 59.537767][ T6000] Zero length message leads to an empty skb [ 59.583578][ T5093] Bluetooth: hci0: command tx timeout [ 59.583685][ T5750] Bluetooth: hci3: command tx timeout [ 59.585686][ T5093] Bluetooth: hci2: command tx timeout [ 59.587605][ T64] Bluetooth: hci1: command tx timeout [ 59.809117][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 59.835989][ T6020] mmap: syz.0.42 (6020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.876404][ T6031] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 59.886278][ T6031] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 59.938737][ T6037] netlink: 'syz.0.47': attribute type 4 has an invalid length. [ 59.968586][ T6041] program syz.1.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.975498][ T6040] No such timeout policy "syz1" [ 60.031483][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 60.034600][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 60.035810][ T6041] Falling back ldisc for ttyS3. [ 60.037527][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 60.047335][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 60.050222][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 60.083098][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.086592][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.090063][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.093551][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.322486][ T6066] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 60.322486][ T6065] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 60.592248][ T6092] loop4: detected capacity change from 0 to 7 [ 60.618098][ T6092] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 60.619892][ T6092] loop4: partition table partially beyond EOD, truncated [ 60.628136][ T6092] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 60.677492][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 61.641752][ T6132] bridge: RTM_NEWNEIGH with invalid ether address [ 61.644644][ T6132] bridge: RTM_NEWNEIGH with invalid ether address [ 61.653311][ T5750] Bluetooth: hci2: command tx timeout [ 61.653361][ T5093] Bluetooth: hci3: command tx timeout [ 61.653419][ T5747] Bluetooth: hci0: command tx timeout [ 61.655749][ T64] Bluetooth: hci1: command tx timeout [ 61.754579][ T6138] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 61.770287][ T6138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.781220][ T6138] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 61.794450][ T6138] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 61.854821][ T6141] /dev/sg0: Can't lookup blockdev [ 61.876511][ T6143] syz.0.77 uses obsolete (PF_INET,SOCK_PACKET) [ 61.885239][ T5812] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.939514][ T6147] nilfs2: Unknown parameter 'discardsys/net/ipv4/conf/syz_tun/accept_source_route' [ 62.003781][ T5812] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.068280][ T6151] CacheFiles: Failed to register: -95 [ 62.211238][ T6160] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 62.211238][ T6160] program syz.0.84 not setting count and/or reply_len properly [ 62.631273][ T6179] kvm: pic: non byte write [ 63.166918][ T6183] netlink: Unknown conntrack attr (type=5894, max=9) [ 63.170110][ T6183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.233377][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 63.233392][ T42] audit: type=1400 audit(1785915511.891:367): avc: denied { create } for pid=6184 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.287869][ T6188] __nla_validate_parse: 9 callbacks suppressed [ 63.287882][ T6188] netlink: 52 bytes leftover after parsing attributes in process `syz.1.93'. [ 63.289221][ T42] audit: type=1400 audit(1785915511.941:368): avc: denied { ioctl } for pid=6187 comm="syz.1.93" path="socket:[11076]" dev="sockfs" ino=11076 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.329838][ T42] audit: type=1400 audit(1785915511.981:369): avc: denied { getopt } for pid=6190 comm="syz.1.94" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.339087][ T42] audit: type=1400 audit(1785915511.981:370): avc: denied { mounton } for pid=6190 comm="syz.1.94" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 63.348832][ T42] audit: type=1400 audit(1785915511.981:371): avc: denied { accept } for pid=6190 comm="syz.1.94" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.392606][ T42] audit: type=1400 audit(1785915512.041:372): avc: denied { create } for pid=6194 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.405079][ T42] audit: type=1400 audit(1785915512.041:373): avc: denied { bind } for pid=6194 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.411261][ T42] audit: type=1400 audit(1785915512.041:374): avc: denied { listen } for pid=6194 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.423086][ T42] audit: type=1400 audit(1785915512.041:375): avc: denied { connect } for pid=6194 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.437149][ T42] audit: type=1400 audit(1785915512.051:376): avc: denied { setopt } for pid=6194 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.519731][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 63.524488][ T6210] netlink: 80 bytes leftover after parsing attributes in process `syz.0.101'. [ 63.528728][ T6210] netlink: 232 bytes leftover after parsing attributes in process `syz.0.101'. [ 63.588873][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.104'. [ 63.593682][ T6218] netlink: NAT attribute has 5 unknown bytes [ 63.595204][ T6220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6220 comm=syz.0.104 [ 63.596176][ T6218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.602677][ T6220] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 63.607913][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 63.611737][ T6220] dummy0: entered promiscuous mode [ 63.699623][ T6237] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.702301][ T6237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.707628][ T6237] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 63.710406][ T6237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 63.727991][ T6239] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 63.731238][ T6239] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 63.852385][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 63.891194][ T6253] binder: 6252:6253 ioctl c0306201 200000000080 returned -14 [ 63.902451][ T6253] binder: 6252:6253 ioctl c0306201 2000000003c0 returned -14 [ 63.957217][ T6265] loop4: detected capacity change from 0 to 7 [ 63.974602][ T6265] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 63.977341][ T6265] loop4: partition table partially beyond EOD, truncated [ 63.981693][ T6265] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 64.012488][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.102895][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.196244][ T6275] XFS (nbd2): no-recovery mounts must be read-only. [ 64.254570][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.258455][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 64.262272][ T34] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 64.266350][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.284509][ T34] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 64.304413][ T34] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 64.411622][ T6284] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 64.453144][ T6286] ======================================================= [ 64.453144][ T6286] WARNING: The mand mount option has been deprecated and [ 64.453144][ T6286] and is ignored by this kernel. Remove the mand [ 64.453144][ T6286] option from the mount to silence this warning. [ 64.453144][ T6286] ======================================================= [ 64.464162][ T6286] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 64.467786][ T6286] cramfs: wrong magic [ 64.649901][ T6251] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 64.654445][ T6251] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 64.658511][ T6251] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 64.699514][ T6299] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 64.703217][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 64.707036][ T6299] team_slave_1: entered promiscuous mode [ 64.709408][ T6299] team_slave_1: entered allmulticast mode [ 64.717211][ T6299] team0: Port device team_slave_1 removed [ 64.719993][ T6299] bridge0: port 3(team_slave_1) entered blocking state [ 64.722704][ T6299] bridge0: port 3(team_slave_1) entered disabled state [ 64.741139][ T6251] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 64.745546][ T6251] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 64.767161][ T6251] syzkaller0: entered promiscuous mode [ 64.769597][ T6251] syzkaller0: entered allmulticast mode [ 64.995952][ T6303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'. [ 65.856208][ T6329] overlay: Unknown parameter '/file0' [ 66.479940][ T6333] fuse: Bad value for 'fd' [ 66.526636][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 66.863485][ T848] usb 6-1: USB disconnect, device number 3 [ 66.890264][ T848] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 66.895932][ T848] spcp8x5 6-1:1.0: device disconnected [ 66.981487][ T6359] fuse: Bad value for 'fd' [ 67.044715][ T5093] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 67.045132][ T5093] Bluetooth: hci1: Malformed LE Event: 0x02 [ 67.165585][ T6378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.206108][ T6379] netlink: 'syz.2.154': attribute type 5 has an invalid length. [ 67.209157][ T6379] netlink: 'syz.2.154': attribute type 5 has an invalid length. [ 67.242621][ T6378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.303303][ T6378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.371940][ T6378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.402941][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.503076][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.506067][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.509016][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.511972][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.574986][ T5813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.578524][ T5813] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 67.584567][ T5813] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 67.587964][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.590903][ T5813] usb 5-1: Product: syz [ 67.592436][ T5813] usb 5-1: Manufacturer: syz [ 67.594221][ T5813] usb 5-1: SerialNumber: syz [ 67.804557][ T5813] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 68.026634][ T5522] usb 5-1: USB disconnect, device number 2 [ 68.037200][ T5522] usblp0: removed [ 68.478494][ T42] kauditd_printk_skb: 39085 callbacks suppressed [ 68.478507][ T42] audit: type=1400 audit(1785915517.131:39462): avc: denied { read write } for pid=6385 comm="syz.1.157" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.490141][ T42] audit: type=1400 audit(1785915517.131:39463): avc: denied { open } for pid=6385 comm="syz.1.157" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.490168][ T42] audit: type=1400 audit(1785915517.131:39464): avc: denied { ioctl } for pid=6385 comm="syz.1.157" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.536691][ T6395] tmpfs: Unknown parameter 'h!Ğ9uge' [ 68.572624][ T42] audit: type=1400 audit(1785915517.221:39465): avc: denied { create } for pid=6398 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.574797][ T6399] sock: sock_set_timeout: `syz.0.160' (pid 6399) tries to set negative timeout [ 68.580987][ T42] audit: type=1400 audit(1785915517.231:39466): avc: denied { setopt } for pid=6398 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.596888][ T42] audit: type=1400 audit(1785915517.241:39467): avc: denied { read } for pid=6398 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.603799][ T42] audit: type=1400 audit(1785915517.251:39468): avc: denied { read } for pid=6398 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.613952][ T42] audit: type=1400 audit(1785915517.251:39469): avc: denied { view } for pid=6404 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.645531][ T42] audit: type=1400 audit(1785915517.301:39470): avc: denied { write } for pid=6413 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.654125][ T6415] __nla_validate_parse: 4 callbacks suppressed [ 68.654135][ T6415] netlink: 236 bytes leftover after parsing attributes in process `syz.0.166'. [ 68.659088][ T6415] netlink: 236 bytes leftover after parsing attributes in process `syz.0.166'. [ 68.667760][ T6415] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.695388][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'. [ 68.707546][ T6425] ip6gre1: entered promiscuous mode [ 68.709292][ T6425] ip6gre1: entered allmulticast mode [ 68.718900][ T42] audit: type=1400 audit(1785915517.371:39471): avc: denied { watch } for pid=6426 comm="syz.1.169" path="/54/file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.747006][ T6437] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 68.831994][ T6446] capability: warning: `syz.0.174' uses deprecated v2 capabilities in a way that may be insecure [ 68.950744][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 69.011574][ T6470] netlink: 'syz.2.182': attribute type 21 has an invalid length. [ 69.023561][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 69.029121][ T6468] netlink: 'syz.1.180': attribute type 5 has an invalid length. [ 69.031552][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 69.040675][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 69.046463][ T6468] netlink: 'syz.1.180': attribute type 5 has an invalid length. [ 69.052616][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 69.056319][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.059427][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.073072][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.080974][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.103789][ T6479] veth1_macvtap: left promiscuous mode [ 69.105591][ T6479] macsec0: entered promiscuous mode [ 69.107290][ T6479] macsec0: entered allmulticast mode [ 69.110858][ T6479] macsec0: left promiscuous mode [ 69.112487][ T6479] macsec0: left allmulticast mode [ 69.169853][ T6486] anx7411 0-002c: fail to probe typec property. [ 69.179452][ T6486] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 69.444541][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 69.448828][ T6514] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 69.498591][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 69.643627][ T2325] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.715376][ T6535] zswap: compressor not available [ 69.752896][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.813678][ T2325] usb 7-1: Using ep0 maxpacket: 8 [ 69.816910][ T2325] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 69.819592][ T2325] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.822610][ T2325] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.826108][ T2325] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.829634][ T2325] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.833922][ T2325] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.837411][ T2325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.842081][ T6543] syzkaller1: entered promiscuous mode [ 69.844176][ T6543] syzkaller1: entered allmulticast mode [ 69.915198][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.919370][ T5813] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 69.928099][ T5813] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.932142][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.935729][ T5813] usb 5-1: Product: syz [ 69.937589][ T5813] usb 5-1: Manufacturer: syz [ 69.939634][ T5813] usb 5-1: SerialNumber: syz [ 70.043254][ T2325] usb 7-1: usb_control_msg returned -32 [ 70.045139][ T2325] usbtmc 7-1:16.0: can't read capabilities [ 70.151662][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.167395][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.171732][ T5813] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 70.176996][ T5813] usb 5-1: USB disconnect, device number 3 [ 70.397416][ T6566] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 70.493562][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.600146][ T29] usb 7-1: USB disconnect, device number 2 [ 70.654047][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 70.658139][ T5813] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 70.660845][ T5813] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 70.664257][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.667601][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.671361][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.674940][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.678463][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.682074][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.755683][ T6573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16488 sclass=netlink_route_socket pid=6573 comm=syz.1.208 [ 70.892895][ T5813] usb 5-1: GET_CAPABILITIES returned 0 [ 70.894666][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 71.097746][ T5811] usb 5-1: USB disconnect, device number 4 [ 71.246178][ T6576] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 71.269197][ T6576] bond1: entered promiscuous mode [ 71.271355][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.426672][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.429426][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436135][ T6584] 9pnet_virtio: no channels available for device syz [ 71.445884][ T6584] EXT4-fs (nbd2): unable to read superblock [ 71.600413][ T6590] kvm: emulating exchange as write [ 71.937349][ T6637] fuse: Bad value for 'fd' [ 71.962081][ T6632] veth0_vlan: entered allmulticast mode [ 71.994235][ T6646] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 72.089457][ T6646] bond3: entered allmulticast mode [ 72.094121][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 72.103637][ T6646] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 72.106951][ T6646] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 72.111603][ T6646] bond3: (slave vti0): making interface the new active one [ 72.114259][ T6646] vti0: entered allmulticast mode [ 72.119341][ T6646] vti0: left allmulticast mode [ 72.302331][ T6658] netlink: 'syz.2.234': attribute type 30 has an invalid length. [ 72.307296][ T6658] netlink: 'syz.2.234': attribute type 30 has an invalid length. [ 73.148937][ T6677] 9pnet_virtio: no channels available for device syz [ 73.155633][ T6677] nfs: Unknown parameter '@' [ 73.175876][ T6679] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b1d01a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 73.182413][ T6679] Call Trace: [ 73.183820][ T5093] Bluetooth: hci1: unexpected event 0x05 length: 6 > 4 [ 73.183844][ T6679] [ 73.184375][ T6681] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 73.186640][ T6679] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 73.186703][ T6679] ? native_send_call_func_ipi+0xcb/0x1b0 [ 73.186743][ T6679] ? on_each_cpu_cond_mask+0x1/0x90 [ 73.186792][ T6679] mce_cpu_restart+0xd5/0x1f0 [ 73.186841][ T6679] ? __pfx_mce_cpu_restart+0x10/0x10 [ 73.186870][ T6679] ? on_each_cpu_cond_mask+0x40/0x90 [ 73.186892][ T6679] smp_call_function_many_cond+0x153b/0x1870 [ 73.186918][ T6679] ? __pfx_mce_cpu_restart+0x10/0x10 [ 73.186950][ T6679] ? lockdep_hardirqs_on+0x78/0x100 [ 73.187012][ T6679] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.187037][ T6679] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 73.187064][ T6679] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 73.187105][ T6679] ? __timer_delete_sync+0x151/0x1c0 [ 73.187127][ T6679] ? __pfx_mce_cpu_restart+0x10/0x10 [ 73.187156][ T6679] on_each_cpu_cond_mask+0x40/0x90 [ 73.187182][ T6679] set_bank+0x240/0x3a0 [ 73.187208][ T6679] ? __pfx_set_bank+0x10/0x10 [ 73.187235][ T6679] ? find_held_lock+0x2b/0x80 [ 73.187272][ T6679] ? sysfs_file_kobj+0xe4/0x290 [ 73.187317][ T6679] ? sysfs_file_kobj+0xe4/0x290 [ 73.187349][ T6679] ? __pfx_set_bank+0x10/0x10 [ 73.187375][ T6679] dev_attr_store+0x58/0x80 [ 73.189282][ T6681] iwpm_hello_cb: Unable to parse nlmsg [ 73.192480][ T6679] ? __pfx_dev_attr_store+0x10/0x10 [ 73.192517][ T6679] sysfs_kf_write+0xf2/0x150 [ 73.245649][ T6679] kernfs_fop_write_iter+0x3e0/0x5f0 [ 73.247848][ T6679] ? __pfx_sysfs_kf_write+0x10/0x10 [ 73.250003][ T6679] vfs_write+0x6ac/0x1050 [ 73.251887][ T6679] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 73.254313][ T6679] ? __pfx_vfs_write+0x10/0x10 [ 73.256376][ T6679] ksys_write+0x12a/0x250 [ 73.258180][ T6679] ? __pfx_ksys_write+0x10/0x10 [ 73.260226][ T6679] do_syscall_64+0x115/0x870 [ 73.262186][ T6679] ? clear_bhb_loop+0x40/0x90 [ 73.264226][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.266675][ T6679] RIP: 0033:0x7f44d659e019 [ 73.268535][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.276285][ T6679] RSP: 002b:00007f44d739f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.279691][ T6679] RAX: ffffffffffffffda RBX: 00007f44d6825fa0 RCX: 00007f44d659e019 [ 73.282953][ T6679] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000004 [ 73.286184][ T6679] RBP: 00007f44d663500c R08: 0000000000000000 R09: 0000000000000000 [ 73.289237][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.292091][ T6679] R13: 00007f44d6826038 R14: 00007f44d6825fa0 R15: 00007ffe57c0db78 [ 73.295118][ T6679] [ 73.612846][ T5827] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 73.764570][ T5827] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 73.768000][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.772121][ T5827] usb 5-1: config 0 has no interfaces? [ 73.774697][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 73.778305][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.782972][ T5827] usb 5-1: config 0 descriptor?? [ 74.008124][ T5827] usb 5-1: string descriptor 0 read error: -71 [ 74.012571][ T5827] usb 5-1: USB disconnect, device number 5 [ 74.400652][ T6741] __nla_validate_parse: 12 callbacks suppressed [ 74.400666][ T6741] netlink: 104 bytes leftover after parsing attributes in process `syz.2.248'. [ 74.608041][ T6756] netlink: 14 bytes leftover after parsing attributes in process `syz.0.251'. [ 74.661874][ T6757] vcan0: tx address claim with dest, not broadcast [ 74.745751][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 74.745769][ T42] audit: type=1400 audit(1785915523.401:39505): avc: denied { nlmsg_tty_audit } for pid=6758 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.757422][ T42] audit: type=1400 audit(1785915523.401:39506): avc: denied { read } for pid=6758 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.882926][ T6764] nbd0: detected capacity change from 0 to 63 [ 74.888914][ T6765] block nbd0: NBD_DISCONNECT [ 74.891160][ T6765] block nbd0: Disconnected due to user request. [ 74.894831][ T6765] block nbd0: shutting down sockets [ 74.898045][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.899532][ C3] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 74.901057][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 74.904039][ C3] Buffer I/O error on dev nbd0, logical block 1, async page read [ 74.909369][ C3] Buffer I/O error on dev nbd0, logical block 2, async page read [ 74.911803][ C3] Buffer I/O error on dev nbd0, logical block 3, async page read [ 74.914432][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.918636][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 74.921696][ T35] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 74.925033][ T35] Buffer I/O error on dev nbd0, logical block 1, async page read [ 74.927592][ T35] Buffer I/O error on dev nbd0, logical block 2, async page read [ 74.930088][ T35] Buffer I/O error on dev nbd0, logical block 3, async page read [ 74.933757][ T1307] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.936995][ T1307] Buffer I/O error on dev nbd0, logical block 0, async page read [ 74.939433][ T1307] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 74.942453][ T1307] Buffer I/O error on dev nbd0, logical block 1, async page read [ 74.946972][ T1313] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.952098][ T1313] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.956272][ T1313] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 74.960482][ T6770] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 74.964292][ T5929] ldm_validate_partition_table(): Disk read failed. [ 74.967062][ T5929] Dev nbd0: unable to read RDB block 0 [ 74.969628][ T5929] nbd0: unable to read partition table [ 74.979368][ T5929] ldm_validate_partition_table(): Disk read failed. [ 74.983502][ T5929] Dev nbd0: unable to read RDB block 0 [ 74.987176][ T5929] nbd0: unable to read partition table [ 75.001861][ T42] audit: type=1400 audit(1785915523.651:39507): avc: denied { create } for pid=6768 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.009332][ T6769] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 75.012495][ T6769] netlink: 'syz.0.254': attribute type 4 has an invalid length. [ 75.015037][ T42] audit: type=1400 audit(1785915523.661:39508): avc: denied { read } for pid=6768 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.021235][ T6769] netlink: 224 bytes leftover after parsing attributes in process `syz.0.254'. [ 75.027510][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.232711][ T42] audit: type=1400 audit(1785915523.881:39509): avc: denied { execute } for pid=6782 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.248385][ T42] audit: type=1400 audit(1785915523.891:39510): avc: denied { execute_no_trans } for pid=6782 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.261808][ T42] audit: type=1400 audit(1785915523.901:39511): avc: denied { watch watch_reads } for pid=6777 comm="syz.2.256" path="/88" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.337101][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.345312][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.349536][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.354742][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.358694][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.476820][ T42] audit: type=1400 audit(1785915524.131:39512): avc: denied { append } for pid=6794 comm="syz.1.260" name="2:0:0:0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.487816][ T6795] syz.1.260: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 75.501378][ T42] audit: type=1400 audit(1785915524.151:39513): avc: denied { name_connect } for pid=6791 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 75.614309][ T42] audit: type=1400 audit(1785915524.261:39514): avc: denied { create } for pid=6791 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 75.806110][ T6820] netlink: 348 bytes leftover after parsing attributes in process `syz.0.266'. [ 75.888722][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.891677][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.897198][ T6786] bridge_slave_0: entered allmulticast mode [ 75.902996][ T6786] bridge_slave_0: entered promiscuous mode [ 75.907832][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.910943][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.914418][ T6786] bridge_slave_1: entered allmulticast mode [ 75.918424][ T6786] bridge_slave_1: entered promiscuous mode [ 75.961301][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.968100][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.994168][ T6786] team0: Port device team_slave_0 added [ 75.997279][ T6786] team0: Port device team_slave_1 added [ 75.998626][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 76.010994][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.013610][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.021457][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.026289][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.028503][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.036558][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.061486][ T6786] hsr_slave_0: entered promiscuous mode [ 76.063874][ T6786] hsr_slave_1: entered promiscuous mode [ 76.065973][ T6786] debugfs: 'hsr0' already exists in 'hsr' [ 76.067795][ T6786] Cannot create hsr debugfs directory [ 76.167880][ T6786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.172716][ T6786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.175671][ T6786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.179350][ T6786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.182107][ T6786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.186265][ T6786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.189071][ T6786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.194114][ T6786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.213155][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.215498][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.218243][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.220418][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.252851][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.262425][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.265934][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.272897][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.281606][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.284745][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.291476][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.294956][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.558735][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.718218][ T6786] veth0_vlan: entered promiscuous mode [ 76.725246][ T6786] veth1_vlan: entered promiscuous mode [ 76.755290][ T6786] veth0_macvtap: entered promiscuous mode [ 76.764079][ T6786] veth1_macvtap: entered promiscuous mode [ 76.775849][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.780142][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.842893][ T5545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.854926][ T5545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.896950][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.903031][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.940738][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.943598][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.944400][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.951991][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.050456][ T6912] xt_hashlimit: overflow, rate too high: 1 [ 77.119000][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 77.139254][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 77.283119][ T6936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 77.413480][ T5093] Bluetooth: hci4: command tx timeout [ 77.649237][ T6955] SELinux: policydb version 0 does not match my version range 15-35 [ 77.654382][ T6955] SELinux: failed to load policy [ 77.772977][ T5827] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.912945][ T5827] usb 7-1: device descriptor read/64, error -71 [ 77.950517][ T6970] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.163396][ T5827] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 78.165427][ T6980] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.293312][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 78.296279][ T5827] usb 7-1: device descriptor read/64, error -71 [ 78.416774][ T5827] usb usb7-port1: attempt power cycle [ 78.501460][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.308'. [ 78.538960][ T6993] binder: BINDER_SET_CONTEXT_MGR already set [ 78.541841][ T6993] binder: 6991:6993 ioctl 4018620d 2000000000c0 returned -16 [ 78.580931][ T6995] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.583759][ T6995] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 78.622892][ T34] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 78.754266][ T5827] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.774392][ T5827] usb 7-1: device descriptor read/8, error -71 [ 78.775282][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.780634][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.784425][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 78.788569][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.791619][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.800662][ T6988] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 78.806986][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 78.809875][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 78.813813][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 78.815570][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 78.820194][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 78.822205][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 79.013286][ T5827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.038298][ T5827] usb 7-1: device descriptor read/8, error -71 [ 79.143995][ T5827] usb usb7-port1: unable to enumerate USB device [ 79.234764][ T7019] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 79.245743][ T7019] cramfs: wrong magic [ 79.287185][ T7021] input: syz1 as /devices/virtual/input/input6 [ 79.500271][ T7027] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 79.504124][ T5093] Bluetooth: hci4: command tx timeout [ 79.602370][ T6988] cdc_wdm 5-1:1.0: Error autopm - -16 [ 79.602508][ T29] usb 5-1: USB disconnect, device number 6 [ 79.627569][ T6998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.765049][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.910075][ T7059] __nla_validate_parse: 2 callbacks suppressed [ 79.910087][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 79.912842][ T29] usb 5-1: device descriptor read/64, error -71 [ 80.143275][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.245217][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.250394][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.260802][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 80.260817][ T42] audit: type=1800 audit(1785915528.911:39565): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.333" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 80.272925][ T29] usb 5-1: device descriptor read/64, error -71 [ 80.385743][ T29] usb usb5-port1: attempt power cycle [ 80.528240][ T42] audit: type=1400 audit(1785915529.181:39566): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 80.622031][ T42] audit: type=1400 audit(1785915529.271:39567): avc: denied { bind } for pid=7083 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.630558][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'. [ 80.635251][ T42] audit: type=1400 audit(1785915529.291:39568): avc: denied { listen } for pid=7083 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.689488][ T42] audit: type=1400 audit(1785915529.341:39569): avc: denied { unlink } for pid=7085 comm="syz.2.339" name="#1" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.722956][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.743561][ T29] usb 5-1: device descriptor read/8, error -71 [ 80.782862][ T5093] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.790722][ T7088] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 80.793948][ T7088] nbd: couldn't find device at index 131080 [ 80.797400][ T7088] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.804738][ T7088] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.814932][ T7088] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 80.819348][ T7088] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 80.822667][ T7088] overlayfs: d_ino too big (gadget, ino=4611686018427391801, xinobits=3) [ 80.826272][ T7088] overlayfs: d_ino too big (snd_seq, ino=4611686018427391992, xinobits=3) [ 80.830352][ T7088] overlayfs: d_ino too big (netdevsim, ino=4611686018427415615, xinobits=3) [ 80.834119][ T7088] overlayfs: d_ino too big (serio, ino=4611686018427391818, xinobits=3) [ 80.837433][ T7088] overlayfs: d_ino too big (ulpi, ino=4611686018427391755, xinobits=3) [ 80.840674][ T7088] overlayfs: d_ino too big (coreboot, ino=4611686018427391904, xinobits=3) [ 80.846153][ T7088] overlayfs: d_ino too big (hdaudio, ino=4611686018427391998, xinobits=3) [ 80.849558][ T7088] overlayfs: d_ino too big (iio, ino=4611686018427391934, xinobits=3) [ 80.853696][ T7088] overlayfs: d_ino too big (firewire, ino=4611686018427415629, xinobits=3) [ 80.976717][ T42] audit: type=1400 audit(1785915529.631:39570): avc: denied { getopt } for pid=7096 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.985179][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 81.005174][ T29] usb 5-1: device descriptor read/8, error -71 [ 81.116380][ T29] usb usb5-port1: unable to enumerate USB device [ 81.187582][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 81.190392][ T7102] block nbd0: Unsupported socket: should be TCP or UNIX. [ 81.407919][ T42] audit: type=1400 audit(1785915530.061:39571): avc: denied { ioctl } for pid=7116 comm="syz.0.348" path="socket:[16950]" dev="sockfs" ino=16950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.470069][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 81.478579][ T7117] macvlan2: entered allmulticast mode [ 81.480365][ T7117] veth0_macvtap: entered allmulticast mode [ 81.480885][ T42] audit: type=1326 audit(1785915530.131:39572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.2.350" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff753797d97 code=0x7ffc0000 [ 81.505174][ T42] audit: type=1326 audit(1785915530.131:39573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.2.350" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff75373f399 code=0x7ffc0000 [ 81.513343][ T42] audit: type=1326 audit(1785915530.131:39574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.2.350" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff753797d97 code=0x7ffc0000 [ 81.533770][ T7130] fuse: Unknown parameter 'rootmode?00000000000000000040000' [ 81.542711][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 81.547105][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 81.547847][ T7133] [U]  [ 81.583118][ T5093] Bluetooth: hci4: command tx timeout [ 81.663736][ T56] cfg80211: failed to load regulatory.db [ 81.952846][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 82.092827][ T34] usb 5-1: device descriptor read/64, error -71 [ 82.332904][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 82.351153][ T7148] jffs2: notice: (7148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.362663][ T7148] xt_connbytes: Forcing CT accounting to be enabled [ 82.366358][ T7148] Cannot find set identified by id 0 to match [ 82.463252][ T34] usb 5-1: device descriptor read/64, error -71 [ 82.476114][ T7136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.574224][ T34] usb usb5-port1: attempt power cycle [ 82.710065][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 82.843887][ T7177] overlayfs: invalid origin (0000) [ 82.885001][ T7179] exFAT-fs (nbd4): unable to read boot sector [ 82.889130][ T7179] exFAT-fs (nbd4): failed to read boot sector [ 82.891468][ T7179] exFAT-fs (nbd4): failed to recognize exfat type [ 82.915227][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.921711][ T7184] program syz.1.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.924754][ T7184] ata1.00: invalid command format 67 [ 82.935005][ T34] usb 5-1: device descriptor read/8, error -71 [ 83.083517][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.152390][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 83.175132][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 83.193645][ T34] usb 5-1: device descriptor read/8, error -71 [ 83.222704][ T7208] protocol 0000 is buggy, dev veth0_vlan [ 83.314174][ T34] usb usb5-port1: unable to enumerate USB device [ 83.652811][ T5093] Bluetooth: hci4: command tx timeout [ 87.524438][ T42] kauditd_printk_skb: 7609 callbacks suppressed [ 87.524451][ T42] audit: type=1400 audit(1785915536.181:47184): avc: denied { write } for pid=7239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.592325][ T42] audit: type=1400 audit(1785915536.241:47185): avc: denied { write } for pid=7242 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.987869][ T42] audit: type=1400 audit(1785915538.641:47186): avc: denied { write } for pid=7244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.037100][ T42] audit: type=1400 audit(1785915538.691:47187): avc: denied { write } for pid=7247 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.265851][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 93.273723][ T7257] evm: overlay not supported [ 93.306794][ T7271] Invalid source name [ 93.359192][ T7276] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 93.367612][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.408546][ T42] audit: type=1400 audit(1785915542.051:47188): avc: denied { map } for pid=7281 comm="syz.0.385" path="/121" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.446115][ T42] audit: type=1400 audit(1785915542.051:47189): avc: denied { execute } for pid=7281 comm="syz.0.385" path="/121" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.446137][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.466681][ T42] audit: type=1400 audit(1785915542.051:47190): avc: denied { setattr } for pid=7281 comm="syz.0.385" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.523913][ T42] audit: type=1400 audit(1785915542.181:47191): avc: denied { remount } for pid=7294 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.576109][ T7299] exFAT-fs (nbd4): unable to read boot sector [ 93.579702][ T7299] exFAT-fs (nbd4): failed to read boot sector [ 93.589368][ T7299] exFAT-fs (nbd4): failed to recognize exfat type [ 93.661749][ T42] audit: type=1400 audit(1785915542.311:47192): avc: denied { mount } for pid=7307 comm="syz.4.393" name="/" dev="rpc_pipefs" ino=18751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 93.698659][ T7312] usb usb8: usbfs: process 7312 (syz.1.394) did not claim interface 0 before use [ 93.710772][ T7312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.394'. [ 93.795119][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'. [ 93.806418][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 93.866095][ T42] audit: type=1400 audit(1785915542.521:47193): avc: denied { mounton } for pid=7317 comm="syz.1.396" path="/123/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 93.867345][ T7318] 9pnet_virtio: no channels available for device ./file0 [ 94.025148][ T42] audit: type=1400 audit(1785915542.681:47194): avc: denied { create } for pid=7327 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.034913][ T42] audit: type=1400 audit(1785915542.691:47195): avc: denied { write } for pid=7327 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.076646][ T7330] IPVS: length: 117 != 8 [ 94.080113][ T42] audit: type=1400 audit(1785915542.731:47196): avc: denied { read } for pid=7329 comm="syz.0.401" path="socket:[18796]" dev="sockfs" ino=18796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.100630][ T42] audit: type=1400 audit(1785915542.751:47197): avc: denied { checkpoint_restore } for pid=7329 comm="syz.0.401" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.180379][ T7334] netlink: 'syz.0.402': attribute type 13 has an invalid length. [ 94.336831][ T7338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7338 comm=syz.0.404 [ 94.341197][ T7338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7338 comm=syz.0.404 [ 94.391745][ T7336] tracefs: Unknown parameter 'seV0x0000000000000000' [ 94.530713][ T7352] hpfs: hpfs_map_sector(): read error [ 94.665126][ T7355] batadv_slave_0: Caught tx_queue_len zero misconfig [ 94.702110][ T7365] jffs2: notice: (7365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.709582][ T7365] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 94.759914][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 94.763504][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 94.804294][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 95.348181][ T7400] bond2: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 95.773949][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.802247][ T7409] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 95.805910][ T7409] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 95.809651][ T7409] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 95.813854][ T7409] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 95.922860][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 95.926874][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 95.930569][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.934901][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.939163][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.945076][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.950687][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.954705][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.979891][ T7414] No source specified [ 96.165214][ T34] usb 6-1: usb_control_msg returned -32 [ 96.167089][ T34] usbtmc 6-1:16.0: can't read capabilities [ 96.301732][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 96.528474][ T7431] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 96.720399][ T848] usb 6-1: USB disconnect, device number 4 [ 96.813815][ T7413] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.847772][ T7437] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 96.957376][ T7442] 9pnet_virtio: no channels available for device syz [ 96.957665][ T7443] 9pnet_virtio: no channels available for device syz [ 97.118046][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 97.123337][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 97.127143][ T7459] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 97.283444][ T7472] lo: entered allmulticast mode [ 97.289658][ T7472] /dev/sg0: Can't lookup blockdev [ 97.293207][ T7472] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 97.352042][ T7471] lo: left allmulticast mode [ 97.420048][ T7486] kAFS: bad VL server IP address [ 97.425426][ T7485] kAFS: bad VL server IP address [ 97.456246][ T7495] X25: diagnostic #104 - 9A 18 5F [ 97.602673][ T7511] 9pnet_virtio: no channels available for device syz [ 97.836780][ T7538] openvswitch: netlink: IP tunnel TTL not specified. [ 97.881158][ T7550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=154 sclass=netlink_route_socket pid=7550 comm=syz.4.466 [ 97.951656][ T7544] kvm: pic: non byte write [ 97.977804][ T7558] Mass Storage Function, version: 2009/09/11 [ 97.981120][ T7558] LUN: removable file: (no medium) [ 97.987408][ T7561] capability: warning: `syz.0.469' uses 32-bit capabilities (legacy support in use) [ 98.414647][ T7610] __nla_validate_parse: 5 callbacks suppressed [ 98.414666][ T7610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.482'. [ 98.426844][ T7610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7610 comm=syz.1.482 [ 98.439349][ T7610] ipvlan2: entered allmulticast mode [ 98.441278][ T7610] batadv_slave_1: entered allmulticast mode [ 98.446516][ T7610] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.448852][ T7610] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.449684][ T7612] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 98.460658][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.472171][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.477063][ T7610] batman_adv: batadv0: Interface activated: ipvlan2 [ 98.505317][ T7615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.519038][ T7615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.559336][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.863165][ T7630] Cannot find set identified by id 0 to match [ 98.873036][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 98.972216][ T7635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.489'. [ 98.973012][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 98.974465][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'. [ 99.077923][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 99.077937][ T42] audit: type=1400 audit(1785915547.731:47235): avc: denied { node_bind } for pid=7645 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 99.089321][ T42] audit: type=1800 audit(1785915547.741:47236): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.492" name="file1" dev="overlay" ino=801 res=0 errno=0 [ 99.119491][ T7648] ata1.00: invalid cdb length 6 [ 99.122974][ T42] audit: type=1400 audit(1785915547.781:47237): avc: denied { write } for pid=7647 comm="syz.2.494" path="socket:[18316]" dev="sockfs" ino=18316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.131503][ T7650] ata1.00: invalid cdb length 6 [ 99.168528][ T7656] netlink: 88 bytes leftover after parsing attributes in process `syz.2.496'. [ 99.240164][ T7661] tmpfs: Unknown parameter 'TcPTA|qa6;EB>'ug' [ 99.315261][ T7663] netlink: 'syz.2.499': attribute type 39 has an invalid length. [ 99.363627][ T42] audit: type=1400 audit(1785915548.011:47238): avc: denied { listen } for pid=7673 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.524342][ T7683] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 99.973020][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 100.144628][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 100.148855][ T24] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.152041][ T24] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 100.155288][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.159723][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.162829][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.165399][ T24] usb 5-1: Product: з [ 100.166751][ T24] usb 5-1: Manufacturer:   [ 100.168294][ T24] usb 5-1: SerialNumber: Ƨ芭ힾ䍧ਸꛂ㴱ⳛ᠎읜懼਄첳䊴䇆㘎Ꮚ꿽−㟻腩樫ꃢ䓠㉅᫥縞캊ᨿ㧦낀떆蔃⍁ု㦕鲨Ꮮ쭑꿁덬瀣ၹ賔뛾벼铷䍕ꢄ쏓䋜塷慚ꉣㅉᚖ껯톅蓔쇘ꪮৡ꫷敢ᙉę날౰顝뉴ಇ걺㻘⬅袅ꖞ횉⋮䑲톒㮒ቀﶿ [ 100.182491][ T7689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.185322][ T7689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.436103][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.439591][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.444355][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 100.447330][ T7703] dlm: no locking on control device [ 100.450522][ T24] usb 5-1: USB disconnect, device number 15 [ 100.458560][ T24] usblp0: removed [ 101.018230][ T7714] can0: slcan on ttyS3. [ 101.116336][ T7714] can0 (unregistered): slcan off ttyS3. [ 101.122885][ T42] audit: type=1400 audit(1785915549.771:47239): avc: denied { write } for pid=7719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.188018][ T42] audit: type=1400 audit(1785915549.841:47240): avc: denied { write } for pid=7724 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.275191][ T42] audit: type=1400 audit(1785915549.931:47241): avc: denied { write } for pid=7730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.279098][ T7728] ceph: Path missing in source [ 101.335919][ T7739] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 101.339550][ T42] audit: type=1400 audit(1785915549.991:47242): avc: denied { write } for pid=7737 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.616254][ T7751] Bluetooth: MGMT ver 1.23 [ 101.622415][ T42] audit: type=1326 audit(1785915550.271:47243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.0.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d659e019 code=0x7ff00000 [ 101.636423][ T42] audit: type=1326 audit(1785915550.271:47244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7749 comm="syz.0.523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44d659e019 code=0x7ff00000 [ 101.792602][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 102.087286][ T7789] input: syz0 as /devices/virtual/input/input9 [ 102.273395][ T7815] PKCS8: Unsupported PKCS#8 version [ 102.322933][ T7821] 9p: Bad value for 'wfdno' [ 102.547490][ T7838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=7838 comm=syz.4.544 [ 102.552701][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.544'. [ 102.588258][ T7842] x_tables: duplicate underflow at hook 2 [ 102.709179][ T7856] openvswitch: netlink: Tunnel attr 99 out of range max 16 [ 102.758572][ T7863] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 102.765673][ T7863] .`: renamed from bond0 (while UP) [ 102.820846][ T7871] netlink: 'syz.0.554': attribute type 7 has an invalid length. [ 102.862961][ T5545] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.865791][ T5545] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.868542][ T5545] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.871351][ T5545] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.880489][ T7873] gadgetfs: bound to dummy_udc driver [ 102.896784][ T7875] tmpfs: Bad value for 'mpol' [ 103.122917][ T848] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 103.127306][ C0] gadgetfs: connected [ 103.129997][ T848] gadgetfs: disconnected [ 103.641828][ T7899] bond5: (slave batadv0): Device is not bonding slave [ 103.644983][ T7899] bond5: option active_slave: invalid value (batadv0) [ 103.649931][ T7899] bond5 (unregistering): Released all slaves [ 103.770777][ T7902] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 103.949378][ T7922] 9pnet_virtio: no channels available for device syz [ 103.978860][ T7922] overlayfs: overlapping lowerdir path [ 104.019356][ T7927] __nla_validate_parse: 5 callbacks suppressed [ 104.019370][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.570'. [ 104.058979][ T7929] netlink: 'syz.1.571': attribute type 4 has an invalid length. [ 104.111821][ T42] kauditd_printk_skb: 614 callbacks suppressed [ 104.111840][ T42] audit: type=1400 audit(1785915552.761:47859): avc: denied { bind } for pid=7932 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.122440][ T42] audit: type=1400 audit(1785915552.761:47860): avc: denied { name_bind } for pid=7932 comm="syz.1.573" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 104.132886][ T42] audit: type=1400 audit(1785915552.761:47861): avc: denied { node_bind } for pid=7932 comm="syz.1.573" saddr=fc01:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 104.152920][ T42] audit: type=1400 audit(1785915552.771:47862): avc: denied { mount } for pid=7930 comm="syz.0.572" name="/" dev="hugetlbfs" ino=20107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.160204][ T42] audit: type=1400 audit(1785915552.781:47863): avc: denied { bpf } for pid=7930 comm="syz.0.572" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.174625][ T42] audit: type=1400 audit(1785915552.831:47864): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 104.398410][ T7941] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 104.406411][ T5827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 104.408085][ T7941] Error validating options; rc = [-22] [ 104.572842][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 104.576668][ T5827] usb 6-1: unable to get BOS descriptor or descriptor too short [ 104.580130][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 104.587239][ T5827] usb 6-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 104.590908][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.594558][ T5827] usb 6-1: Product: syz [ 104.596431][ T5827] usb 6-1: Manufacturer: syz [ 104.598453][ T5827] usb 6-1: SerialNumber: syz [ 104.811642][ T7944] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 104.814635][ T7944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.824272][ T7944] vhci_hcd vhci_hcd.0: Device attached [ 104.825709][ T5827] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.833582][ T7945] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 104.841229][ T5545] vhci_hcd vhci_hcd.4: stop threads [ 104.844260][ T5545] vhci_hcd vhci_hcd.4: release socket [ 104.846633][ T5545] vhci_hcd vhci_hcd.4: disconnect device [ 104.864544][ T5827] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 104.869738][ T5827] usb 6-1: USB disconnect, device number 5 [ 104.882475][ T7948] udevd[7948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.939297][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 104.949385][ T42] audit: type=1400 audit(1785915553.601:47865): avc: denied { mmap_zero } for pid=7949 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 105.007856][ T42] audit: type=1400 audit(1785915553.661:47866): avc: denied { bind } for pid=7954 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.318095][ T7968] input: syz0 as /devices/virtual/input/input11 [ 105.407423][ T7970] CacheFiles: Empty directory specified [ 105.744623][ T5827] IPVS: starting estimator thread 0... [ 105.791453][ T8012] 9pnet_virtio: no channels available for device syz [ 105.797253][ T8012] overlayfs: overlapping lowerdir path [ 105.806781][ T8012] loop2: detected capacity change from 0 to 7 [ 105.814338][ T8012] Dev loop2: unable to read RDB block 7 [ 105.816288][ T8012] loop2: AHDI p1 p2 p3 [ 105.817671][ T8012] loop2: partition table partially beyond EOD, truncated [ 105.820431][ T8012] loop2: p1 start 1601398130 is beyond EOD, truncated [ 105.823988][ T42] audit: type=1400 audit(1785915554.471:47867): avc: denied { read write } for pid=8018 comm="syz.4.596" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.826980][ T8012] loop2: p2 start 1702059890 is beyond EOD, [ 105.838855][ T42] audit: type=1400 audit(1785915554.481:47868): avc: denied { open } for pid=8018 comm="syz.4.596" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.840042][ T8012] truncated [ 105.849608][ T8007] IPVS: using max 43 ests per chain, 103200 per kthread [ 105.919924][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 106.725026][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'. [ 106.725507][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'. [ 106.900733][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.190522][ T8086] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.212226][ T8086] netlink: 'syz.4.613': attribute type 2 has an invalid length. [ 107.489766][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.624'. [ 107.752348][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 107.765057][ T8127] autofs4:pid:8127:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 107.770146][ T8127] autofs4:pid:8127:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 108.180776][ T8171] dummy_hcd dummy_hcd.0: remove, state 4 [ 108.183474][ T8171] usb usb5: USB disconnect, device number 1 [ 108.204735][ T8171] dummy_hcd dummy_hcd.0: stopped [ 108.206852][ T8171] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 108.226331][ T8171] /dev/sr0: Can't open blockdev [ 108.408335][ T8180] tmpfs: Bad value for 'mpol' [ 108.454908][ T8180] could not allocate digest TFM handle sha3-512-ce [ 108.574352][ T8192] le0: renamed from macvtap0 (while UP) [ 108.818093][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 108.825948][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 109.102904][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 109.257665][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.260808][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 109.268615][ T34] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 109.274063][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.277853][ T848] IPVS: starting estimator thread 0... [ 109.285954][ T34] opticon 6-1:1.0: opticon converter detected [ 109.294122][ T34] usb 6-1: opticon converter now attached to ttyUSB0 [ 109.364089][ T8213] IPVS: using max 44 ests per chain, 105600 per kthread [ 109.374189][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 109.480706][ T8219] overlay: Bad value for 'workdir' [ 109.528429][ T5093] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 109.542357][ T8200] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 109.568532][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 109.672179][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 109.693757][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 109.693768][ T42] audit: type=1400 audit(1785915558.351:47885): avc: denied { setopt } for pid=8235 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.745118][ T10] IPVS: starting estimator thread 0... [ 109.754083][ T2325] usb 6-1: USB disconnect, device number 6 [ 109.763336][ T2325] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 109.766151][ T2325] opticon 6-1:1.0: device disconnected [ 109.848468][ T8246] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 109.852199][ T8246] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 109.857262][ T8239] IPVS: using max 43 ests per chain, 103200 per kthread [ 110.032331][ T42] audit: type=1400 audit(1785915558.681:47886): avc: denied { append } for pid=8249 comm="syz.4.666" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.043459][ T8250] netlink: 'syz.4.666': attribute type 21 has an invalid length. [ 110.046953][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 110.050610][ T8250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 110.064697][ T8251] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 110.068324][ T8250] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 110.076598][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 110.081675][ T8253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 110.083037][ T8251] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 110.088708][ T8253] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 110.277410][ T42] audit: type=1400 audit(1785915558.931:47887): avc: denied { setopt } for pid=8265 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.330865][ T8270] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.381094][ T8268] block nbd1: shutting down sockets [ 110.622318][ T105] nvmet: connect request for invalid subsystem n! [ 110.626585][ T8278] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 110.698621][ T8282] xt_hashlimit: size too large, truncated to 1048576 [ 110.820321][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 110.864422][ T8295] overlayfs: missing 'lowerdir' [ 111.243044][ T5545] bond2: (slave gretap1): link status up again after 0 ms [ 111.247480][ T5545] bond2: (slave dummy0): link status up again after 0 ms [ 111.251066][ T5545] bond2: (slave gretap1): failed to get link speed/duplex [ 111.256232][ T5545] bond2: (slave dummy0): failed to get link speed/duplex [ 111.260076][ T42] audit: type=1400 audit(1785915559.911:47888): avc: denied { mounton } for pid=8315 comm="syz.1.682" path="/182/file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 111.362992][ T5545] bond2: (slave gretap1): failed to get link speed/duplex [ 111.366563][ T5545] bond2: (slave dummy0): failed to get link speed/duplex [ 111.382632][ T42] audit: type=1400 audit(1785915560.031:47889): avc: denied { mounton } for pid=8315 comm="syz.1.682" path="/182/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 111.382698][ T8316] afs: Unknown parameter 'aell' [ 111.482885][ T5545] bond2: (slave gretap1): failed to get link speed/duplex [ 111.485466][ T5545] bond2: (slave dummy0): failed to get link speed/duplex [ 111.505084][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 111.537246][ T8325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 111.561118][ T42] audit: type=1400 audit(1785915560.211:47890): avc: denied { connect } for pid=8328 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.593077][ T5545] bond2: (slave gretap1): failed to get link speed/duplex [ 111.596951][ T5545] bond2: (slave dummy0): failed to get link speed/duplex [ 111.882999][ T5813] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 111.985867][ T8334] binder: 8333:8334 ioctl c00c620f 200000000500 returned -22 [ 112.013343][ T5813] usb 6-1: device descriptor read/64, error -71 [ 112.252904][ T5813] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 112.393017][ T5813] usb 6-1: device descriptor read/64, error -71 [ 112.511593][ T8341] ehci-pci 0000:00:1d.7: remove, state 1 [ 112.513829][ T5813] usb usb6-port1: attempt power cycle [ 112.518786][ T8341] usb usb1: USB disconnect, device number 1 [ 112.522032][ T8341] usb 1-1: USB disconnect, device number 2 [ 112.628411][ T8341] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 112.875138][ T5813] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 112.907163][ T5813] usb 6-1: device descriptor read/8, error -71 [ 112.908543][ T8359] tmpfs: Bad value for 'mpol' [ 112.912918][ T848] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 112.931157][ T8361] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 113.079951][ T848] usb 2-1: not running at top speed; connect to a high speed hub [ 113.107720][ T848] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 113.110880][ T848] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 113.113925][ T848] usb 2-1: Product: QEMU USB Tablet [ 113.115607][ T848] usb 2-1: Manufacturer: QEMU [ 113.117156][ T848] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 113.133281][ T8370] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 113.138402][ T8370] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 113.138707][ T848] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input12 [ 113.142083][ T8370] CPU: 3 UID: 0 PID: 8370 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(full) [ 113.149713][ T8370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.153918][ T8370] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 113.156342][ T8370] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 113.163039][ T42] audit: type=1400 audit(1785915561.791:47891): avc: denied { read } for pid=5125 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 113.164320][ T8370] RSP: 0018:ffffc9002363fb48 EFLAGS: 00010246 [ 113.164342][ T8370] RAX: dffffc0000000000 RBX: ffff888021dc0c00 RCX: ffffc90004869000 [ 113.164354][ T8370] RDX: 0000000000000000 RSI: ffffffff87d05d67 RDI: ffff888021dc1290 [ 113.171177][ T42] audit: type=1400 audit(1785915561.791:47892): avc: denied { search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.173655][ T8370] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 113.173671][ T8370] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888057ab0050 [ 113.173686][ T8370] R13: 0000000000000000 R14: ffff88802cdc74f1 R15: ffff88802cdc7008 [ 113.173702][ T8370] FS: 00007f44d739f6c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 113.176580][ T42] audit: type=1400 audit(1785915561.791:47893): avc: denied { write search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.179508][ T8370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.179525][ T8370] CR2: 00007f44d6587640 CR3: 0000000026afe000 CR4: 0000000000352ef0 [ 113.182922][ T5813] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 113.186819][ T42] audit: type=1400 audit(1785915561.791:47894): avc: denied { add_name } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.189480][ T8370] Call Trace: [ 113.189491][ T8370] [ 113.228123][ T8370] gadget_bind_driver+0x4ac/0xbf0 [ 113.230289][ T8370] ? __pfx_gadget_bind_driver+0x10/0x10 [ 113.232644][ T8370] really_probe+0x241/0xa60 [ 113.233285][ T5813] usb 6-1: device descriptor read/8, error -71 [ 113.234618][ T8370] __driver_probe_device+0x20e/0x450 [ 113.238739][ T848] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 113.239171][ T8370] driver_probe_device+0x4a/0x140 [ 113.246143][ T8370] __driver_attach+0x21f/0x5b0 [ 113.248203][ T8370] ? __pfx___driver_attach+0x10/0x10 [ 113.250452][ T8370] bus_for_each_dev+0x13e/0x1d0 [ 113.252506][ T8370] ? __pfx_bus_for_each_dev+0x10/0x10 [ 113.254782][ T8370] ? bus_add_driver+0x2b5/0x5b0 [ 113.256855][ T8370] bus_add_driver+0x305/0x5b0 [ 113.258854][ T8370] driver_register+0x1e2/0x360 [ 113.260877][ T8370] ? rcu_is_watching+0x12/0xc0 [ 113.262964][ T8370] usb_gadget_register_driver_owner+0x132/0x210 [ 113.265605][ T8370] raw_ioctl+0x1a85/0x2b80 [ 113.267566][ T8370] ? __pfx_raw_ioctl+0x10/0x10 [ 113.269602][ T8370] ? selinux_file_ioctl+0x13b/0x290 [ 113.271836][ T8370] ? selinux_file_ioctl+0xb6/0x290 [ 113.274029][ T8370] ? __pfx_raw_ioctl+0x10/0x10 [ 113.276104][ T8370] __x64_sys_ioctl+0x18e/0x210 [ 113.278157][ T8370] do_syscall_64+0x115/0x870 [ 113.280178][ T8370] ? clear_bhb_loop+0x40/0x90 [ 113.282204][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.284715][ T8370] RIP: 0033:0x7f44d659dcab [ 113.286608][ T8370] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 113.294657][ T8370] RSP: 002b:00007f44d739cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.298130][ T8370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f44d659dcab [ 113.301460][ T8370] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 113.304756][ T8370] RBP: 00007f44d739dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 113.308084][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.311393][ T8370] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.314704][ T8370] [ 113.316046][ T8370] Modules linked in: [ 113.318140][ T8370] ---[ end trace 0000000000000000 ]--- [ 113.323031][ T8370] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 113.325412][ T8370] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 113.334713][ T8370] RSP: 0018:ffffc9002363fb48 EFLAGS: 00010246 [ 113.337318][ T8370] RAX: dffffc0000000000 RBX: ffff888021dc0c00 RCX: ffffc90004869000 [ 113.346455][ T8370] RDX: 0000000000000000 RSI: ffffffff87d05d67 RDI: ffff888021dc1290 [ 113.349910][ T8370] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 113.353560][ T8370] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888057ab0050 [ 113.356984][ T8370] R13: 0000000000000000 R14: ffff88802cdc74f1 R15: ffff88802cdc7008 [ 113.360321][ T8370] FS: 00007f44d739f6c0(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 113.364427][ T8370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.367956][ T8370] CR2: 00007f44d6587640 CR3: 0000000026afe000 CR4: 0000000000352ef0 [ 113.371380][ T8370] Kernel panic - not syncing: Fatal exception [ 113.374010][ T8370] Kernel Offset: disabled [ 113.375393][ T8370] Rebooting in 86400 seconds..