last executing test programs: 37.272831523s ago: executing program 0 (id=245): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x10004, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) write$dsp(r3, &(0x7f00000004c0)="7c4b1025ade524b1148211963d09e519dd52d2d52dbbf9d4cbc8d63a93ed0a46f98cce0c7a5902c717c139204355aef4d13a97263636a4b4467c3e7cc88a6c59fee272c79f9e151b53c6eb88adb4fa3df0b386d7e626393562e8faecf52eb941ca13231b26fa8730bb181ef92fd6012b217fd12399ea0813b1128bd3a736ec9296ac02ba13cfb81e72ce62ef2001845056b302fe8458c46833f077a0559f46c618db5620d1ed1338d4aab5a3269977246135ed85c91a708ae7f07f0f2beb928ced7fec2e7dbc90973be54bd774fc88e71550be3cc6fb65124adb00fed63e3c", 0xdf) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x988) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 37.272319248s ago: executing program 0 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x420000, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000011c0)=0x3ff) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2100, 0x20c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x8000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe95, 0x40000, 0x2, 0x250}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400000037000702fefffffffbdbdf25017c00000e0003"], 0x24}, 0x1, 0x0, 0x0, 0x60004841}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="11ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0xfffffffffffffffd) 37.183025403s ago: executing program 0 (id=247): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a001501000000000000000002"], 0x24}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x53, 0xffffffffffffffff, 0x506, 0x9, @scatter={0x9, 0x0, &(0x7f0000002600)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/80, 0x50}, {&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f00000023c0)=""/218, 0xda}, {&(0x7f00000024c0)=""/145, 0x91}, {&(0x7f0000002580)=""/12, 0xc}, {&(0x7f00000025c0)}]}, &(0x7f0000000000)="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", &(0x7f0000001180)=""/24, 0xfff, 0x10032, 0x2, 0x0}) 37.111561671s ago: executing program 0 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000)='\x00 ', &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/84, 0x54}, {&(0x7f0000001140)=""/102, 0x66}, {&(0x7f00000011c0)=""/238, 0xee}, {&(0x7f00000012c0)=""/19, 0x13}], 0x4, &(0x7f0000001340)=""/174, 0xae}, 0x40) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r7}, 0x14) syz_emit_ethernet(0xd81, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001680)={r2}, 0x8) write$vhost_msg_v2(r8, &(0x7f0000002940)={0x2, 0x0, {&(0x7f0000001840)=""/4096, 0x1000, &(0x7f0000002840)=""/247, 0x3, 0x4}}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x13, &(0x7f00000014c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018250000", @ANYRES32=r1, @ANYBLOB="000000000400000018000000080000000000000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001580)='GPL\x00', 0x9, 0x1c, &(0x7f00000015c0)=""/28, 0x0, 0x40, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000001600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0x7, 0xe6bd, 0xb}, 0x10, 0x1cd11, 0xffffffffffffffff, 0x7, &(0x7f00000016c0)=[r5, r2, r0, r8, r0, r3, r5], &(0x7f0000001700)=[{0x3, 0x2, 0xb, 0xb}, {0x3, 0x5, 0x10, 0x6}, {0x5, 0x2, 0xe}, {0x4, 0x3, 0xd, 0x6}, {0x2, 0x4, 0x10, 0xb}, {0x3, 0x4, 0x2, 0x1}, {0x3, 0x5, 0x1, 0x8}], 0x10, 0x7}, 0x94) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 37.111079124s ago: executing program 0 (id=250): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) ppoll(&(0x7f00000005c0)=[{r0, 0x21}], 0x1, &(0x7f0000000640)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\n', 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000580)={@map=r2, r2, 0x2d}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000003c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000000000000001, 0x3a, '^x\x00ID`\x87\xecuv\x9c\xeb\xc1\xd6\t\xaao\x92\x1d\xd7zP', 0x3a, ':dev/bus/usb/00#/00#\x00hKB\xd4$\xbc~\xcf4g-\xc1\xebD\xca\xa1\x1d\xd5GK\x8c\xad\xdfU\xb0\xcb\x9f\xda\r\x05\xbf\x17k\x13\'\xec\x18\xd2Y\xc7\x00{\xe8W\x98\x9eK}\x99\xc5\xe2\x80\x87\x91#\x92g[>}m\x14\xd7\'\x0e}+\xf9\x86\x0f\xe6\x98\xc3\x18V\n:\xb2$\x90\x0e\xaa\xa7\xee;K\x859\x01\t!Y\xb2\xee\xb7\x12\xcc\xc6\xb6&\xae\x9d\xc4\x03\xc52v \xe8\x92eV\xe8\xb8\xa6\xdb\xec\xee\xc1\xa6\xbc\x11Wk=P\xfb\x85\xa8\x06\xc65~\xa8\x99:\xed\xd9Em\xcb\xc3\x89\x82\xcfF\xfb\xf5\xeciy\xfc\xc5\xb8\x81\xab1\xc9\xf8\xc6z\r\xc3\x8b\xd4\xf9\x18\x8f\x87p\xa4\xf6\x18\xf8\xfa\xdc\x83ZM\xaa\xc5\x84\xab\xa3\"s\xa8\x988MF\xdc\x9b\xa5\x9c\nJ{\xb2\xa3\x9e\x92\xa9gG\x8e0P\x18\xd2\xaf}T\xae\xcdW\xa1\xa1\xb5\x93\xfc\xae\xc6\xec\xfb%\xe0\x1c\xc9\xaf\x12\xac\xb7\xe8rM\xb7\b\xdfo]\x99\xaf:[\xdf5y\xf1t\xa9h\x02\xa61\x84[<\xc6\xe1/?\xa9Q\xc64\xd7J\xd5\x8d\x12\x0f\xfe\x91#\xd8\x99Z\x052\xe2\xcc\x96\xfe\xd5L\xc8\xfe7\x01a\xfc\xa5Cj\x19\xfe\x12\xba\xf0\xa7\xdc\xd0\x7f\xef\x01^\xdf;\xa2J', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x4f, 0x46, 0x4f, 0x4f, 0x43]}, 0x190) 37.002926133s ago: executing program 0 (id=251): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x8000) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2d, 0x6, 0x910, 0x2, 0x4, 0x4, 0x3, 0x0, 0x0, 0x80, 0x4}}, 0x50) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, 0x2020) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x8000) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2d, 0x6, 0x910, 0x2, 0x4, 0x4, 0x3, 0x0, 0x0, 0x80, 0x4}}, 0x50) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x40, 0x0, "1cdc0dca1d9f6884"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, 0x40000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4620, @private=0xa010102}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x33, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x40}}, 0x24040084) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x3, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 5.302869506s ago: executing program 2 (id=486): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x6}, {0x0, 0x200, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, 0x154}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 5.212720178s ago: executing program 2 (id=487): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x6ec004) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80800) socket$netlink(0x10, 0x3, 0x2) (async) r0 = socket$netlink(0x10, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40058}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40058}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@generic={0x2c, "94407281a63bbcf9525318a53908caf5f97c4ba463a3d357c4f20c0b8cc48f841fb1a1e71050599cb11950205723457647df4d037e52deb63086a37f7da2d7bff7b659263f5384abce6f2779e12f24e421fc0fab0c4acd3ad3cc6721be6ed47ddf3907f054d78f106287caec337978b0e4639a2978177fcd50ccbccb7a94"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000000)="452dd7e9fa26b0", 0x7}], 0x1}, 0x40000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) close(r7) (async) close(r7) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) sysfs$1(0x1, &(0x7f0000000140)='udf\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffff7fd, {0x2006, 0xfd, 0x20fe, 0x2, 0xe, 0x7ff, 0x10009, 0x7, 0xfffff3ca, 0xa000, 0x2, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x5}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffff7fd, {0x2006, 0xfd, 0x20fe, 0x2, 0xe, 0x7ff, 0x10009, 0x7, 0xfffff3ca, 0xa000, 0x2, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x5}}}, 0xa0) 4.010427886s ago: executing program 2 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x3b, 0x1, 0x70b52b, 0x4, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8094) 4.008986322s ago: executing program 2 (id=495): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000080)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", "0500", ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "00000000d220b34b00", "081c18016476d41a3000"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x0, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x2, 0xc8, {0x7, 0x25, 0x1, 0x8, 0x2, 0x9}}}}}}}}]}}, 0x0) 2.251533341s ago: executing program 1 (id=521): read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180400000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x2a, 0xc, @void}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x1800000, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x283e, @empty, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="43fcd5628a1bb73b1ef13281dc5355c6fbfd2b5782113fb7c8af7e0a2569a0eada0373e69eed9a9c90a1f34f263d74261ee9e967bc0ef486576aeef88b194d95b40f93cbf7bd1501c63e2976fcc92e2e2e91a7717cfbad788ecb1bcd7d59f9973a34c12d7727f6c7c9229ad571b3ac4e7d36f0705b4464", 0x77}, {&(0x7f0000000680)="35803ef1437308b894c63100fbba07a2b96cd69e84ac6d792331c097193b6e3bbf72254caec234041f3e17df67753370e9f727cf83e5982701ed4ec7307adb8acd1c6c9c006fcb0eed2f0bf196e1c0ac12b73477ee080a252203f6edb1ef5c6b1442db74830383629174b7721c82c0f558", 0x71}, {&(0x7f0000000340)="1e398e8231ee01cda44c43aaa2d38caa6942a8aee55dab7a27ee6518c8bcac143d74c64c732fd0361905a35d265686154523c54687e0c3e7901d7a792a3761945109b8a268f6e792ca513ca4f183efa4d019612c94d484f9d2e8a0c5cfb30d162de988e5bc9a566acafa3636c48e5c4419b927ca6f52e0c77aa34c0d35c16357410804f984fea55c83e9620d004e280d9b99c17704", 0x95}, {&(0x7f0000000400)="d7526093fbcf34b82f384b45e1b4e12511", 0x11}, {&(0x7f0000000440)="0ded216ff707ddfca20d183fdc5ab2fa005a5726dc3ec9d314bacb7a264dbda5ddb81ab9e4153972ba4d127519b1c1629ed06fb4e682fd3d1cb701be3e18c4f69d1013e698c481582f32bd4ee2173221ba49f936a891c2d307268d6de316ad2ed6e4ca21099421c519f271c4f321d0ac9067b78d09b0445585c7bb1b3b7bbbd7d3af77da8239f0b3b068a7ed6a8b715ec17dc9005b6a6f68c232cada48284385a4c95e063984", 0xa6}, {&(0x7f0000000500)="867bfd47fc2705155dbb80a753f9f15a23909c6ee23a57150c80b98d70e55d4846b60ea5e9eb68b8a1e2b10a15b75222f163207e4352ca185b2b03411b0b77e023eb3ff8138a565d278c9c34b982aadfc11b91972fbd6b", 0x57}], 0x6}, 0x48043) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64) 2.247383694s ago: executing program 1 (id=522): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0xa00, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0401410604"], 0x7) write(0xffffffffffffffff, &(0x7f0000000200)="b82ca8", 0x3) (async) write(0xffffffffffffffff, &(0x7f0000000200)="b82ca8", 0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) ioctl$BSG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@dellinkprop={0x20, 0x6d, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x84, 0x10000}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x200400c4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) 2.172358317s ago: executing program 1 (id=523): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xf5]}, 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x10000, r1, r2, 0x2a8ca1, 0xc3, 0x0, 0x219880}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)={0x2f, 0x9, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x7, [0x9d0, 0x9, 0x5, 0xfffffffffffffffc]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @enc_lim={0x4, 0x1, 0x1}]}, 0x58) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000180)=0x9) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000001c0)=0x81, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=""/215, &(0x7f0000000300)=0xd7) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0x5, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000003c0)=r0) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000400)=""/127, &(0x7f0000000480)=0x7f) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x6, 0x8, 0x5, 0xba8b, 0x0, 0x7cb, 0x7, 0x40, 0x4, 0x7, 0x2, 0x3, 0x80000000, 0xec3, 0x2]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000600)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xf925, 0x5, 0xed, 0x8, 0x7}, &(0x7f00000006c0)=0x98) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000700)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000740)={0xa, 0x4e23, 0xfffffeff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x2, 0xc04, 0x11, @remote, @remote, 0x40, 0x80, 0x5573, 0xff}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x9c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000) r9 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000ac0)) r10 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_GETNEXTQUOTA(r10, 0xffffffff80000900, r11, &(0x7f0000000c00)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_TESTMODE(r12, &(0x7f0000002f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000000d00)={0x21bc, r13, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x44, 0x45, "33ab49f7f7a53b7f02bcbe70f2e632bf86c494eb7599e0f067ac49c952703be02fba6abc29ce3c38875d19839499bb34103f0fc39ccafb6c456d39d8db1e43f1"}, @NL80211_ATTR_TESTDATA={0x4a, 0x45, "b22268049012ee7d0fe82ab918755eff5dccf4c90e2adeb7ac34511e072ff22c44ec679c66f74be5242b8f01de36f6804c08f86db4277d77f362381a3462e3a21ad43b52192e"}, @NL80211_ATTR_TESTDATA={0x3e, 0x45, "0a966118840576ef4dee03d68728a2574697822ea511ca135b4b6e15819dcb00d154e9e4587db44b255248ba146f00711243180d3e4d3a4493b1"}, @NL80211_ATTR_TESTDATA={0xcf, 0x45, "0b4caf20f5fd6e7b26b4f7a8203140f21990ef89bfd3b4a42009bf347056240a28ab1da9f61bbe418ba68ed38930ca90d65597e2b7362e8f96b31609a1358a68326361904f053f36d78460824cc09566c0ca00faaf23f2aadf8df9105b1acbfecafe702e5ba05c463002f92000b172e337953aad04bf34496ea32291e5f5eb22153dbbb88fbf9101dceecb37fe7bf142a436c0633e0fb3081f507dff49dafe15d6ce9335af3778ae6c7e8303ff9254ee3f227381c1723411f7f39a18416ef87a2bd9a7bac1a3ca4e9a2a45"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x21bc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40810) 2.17177338s ago: executing program 1 (id=524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3ff}, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbbb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a0c0) close(r0) sendto$inet_nvme_pdu(r1, &(0x7f0000000200)=@data_h2c={{0x6, 0x4, 0x18, 0x4, 0x8000}, 0x1, 0x2, 0xcc, 0x7, "fab449de"}, 0x80, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x2, 0xc, 0xaa, 0x3, 0x6, 0xfffffffa, 0x2f, 0x40, 0x1ca, 0x80000001, 0x0, 0x38, 0x4, 0xf800, 0xfffa, 0x2}, [{0x0, 0xd, 0x9, 0x2, 0x7fffffff, 0xffffffffffff0001, 0xff, 0xffffffffffffffff}, {0x70000000, 0x101, 0x5, 0x4, 0x9fa, 0x5, 0x63, 0x9}, {0x6474e551, 0x5b22, 0xfffffffffffffffb, 0x0, 0xa5, 0x2, 0x0, 0xece6}, {0x1, 0xafed, 0x400, 0x8, 0x4, 0x0, 0x1, 0x6}], "8f75", ['\x00']}, 0x222) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2b6, 0x0, 0x0, 0x0, 0x77}, [@call={0x85, 0x0, 0x0, 0x8c}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000640)='syzkaller\x00', 0xd3f919b, 0xf, &(0x7f0000000680)=""/15, 0x41000, 0x4, '\x00', r4, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000a80)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0xd}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000b80)=0x9, 0x4) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40005}, 0x80) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000d40)={0x2020}, 0x2020) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002dc0), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000003000)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x1b4, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x999}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc644}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x1000) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000003040)={0x5, 0x1ff, 0x9, 0x1, 0x7000, 0xffff}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$MEMSETBADBLOCK(r1, 0x40084d0c, &(0x7f0000003080)=0x3) clock_gettime(0x0, &(0x7f0000003100)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000030c0)={[0xd9]}, 0x0, &(0x7f0000003140)={r11, r12+10000000}, 0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000031c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000003200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000003300)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x54, r13, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x4c, r13, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffa1cb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x62}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x44010) execveat$binfmt(r3, 0x0, &(0x7f0000003580)={[&(0x7f00000034c0)='IPVS\x00', &(0x7f0000003500)='{\x00', &(0x7f0000003540)='/dev/dlm-monitor\x00']}, &(0x7f0000003840)={[&(0x7f00000035c0)='broadcast-link\x00', &(0x7f0000003600)='@:\x00', &(0x7f0000003640)='\xfd+\x00', &(0x7f0000003680)='batadv_slave_1\x00', &(0x7f00000036c0)='.&-$-*+\x00', &(0x7f0000003700)=']\x00', &(0x7f0000003740)='batadv_slave_1\x00', &(0x7f0000003780)='eth\x00', &(0x7f00000037c0)='^]!\x00', &(0x7f0000003800)='%)\x00']}, 0x1000) 1.263060714s ago: executing program 1 (id=526): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r2, 0x0) sendmmsg$inet(r2, &(0x7f0000004b80), 0x0, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x104) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r5, 0x0, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40008090) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x45d2, &(0x7f0000000340)={0x0, 0x6253, 0x2, 0x2, 0x284}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1.032683998s ago: executing program 4 (id=528): r0 = syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xaa, 0x27, 0xf9, 0x20, 0x19d2, 0xffb7, 0x8365, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x1, 0x9, 0x5c, 0x10, 0x5, "", [{{0x9, 0x4, 0xf5, 0xff, 0x8, 0xff, 0xff, 0xff, 0x3, [@hid_hid={0x9, 0x21, 0x2, 0x80, 0x1, {0x22, 0xf0f}}, @generic={0x12, 0x8, "8816093e26dc1e66378d8a6546034f40"}], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x1, 0xa, 0xe4, [@generic={0xb0, 0xf, "e2075e5c97ff17d3a66a991e274e702a89f7b62847c8bb532222d3753c433ef12603ebb5c78a87887238d279a9357cf8223f93e85871e8fad526e4d2e1ec8915eb04f72f169bbe935b3bce91a84ea9c73ccfda6c5852f0f40fc467fce920a52bffb297328ac681363e61a5cfc7009fd6f1154b1dfdbaad59dfa68d2ce618b7c31d8932315e56dbccd93b1c74c8e3d44bf56fc2389dd6afe89d317f6cf705326b6d90a1fd2bbbde40a26e00f7778e"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xff, 0xe3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xb}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x2, 0x9, 0x4, [@generic={0x8d, 0x22, "6a2214530208233fc0a31c30fde5828c8030b404a6fc5a6206a8fba3e2ff7471417e181760967e72260eda1b464883fda14417175a73879c788a0b3fe07c2345c7d2ebb5f757148c1873d9d13b79ba8a54ef6eea07467813c8bf95e1519a01c2bea2cf6eac491fc1feae9381929a53a449b134421b13627a421437684ee7b5a0479470fc89eb68943550b5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x9, 0xfc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8}]}}, {{0x9, 0x5, 0xd, 0x4, 0x5ff, 0x5, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8c, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x3, [@generic={0x10, 0xa, "18f2a7a68e32c26e1614b2f75c8e"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x7, 0x8, 0x47, [@generic={0xbe, 0x8, "a630b7d1876f3cf33ed5a1acefc5ef01ac66295d50f266a20f13df933c4ceab928102ecd586662726689b901b5a466108fe788a25b4606c82904ca9caaa120605ed6c48d933c1dd3c1051e4b8a7f0372cb06f3e99a57ac77845d35eaa7e28d38be97fc101c6b5b94d98b02534919d8717cc661d373a5cc543b886532d500742901403502fdb76a57d164d6d5b2081da768c9775652cb604573ac6042a2780b73247a050e2801e40a2bacbfef3923b0e048734e82e7e1be0119611b1d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xcfe}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x6}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0xe, 0x2, 0x94, 0x8, 0x5}, 0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="150f4e00150a1003020a002f02ffff071002067b0600141004003342e350f661666bbd668a1d93880401ef8708469750bfcd81bdb5157196b08a21b2b705617816000ff209000f00000000002200"], 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000100)) syz_usb_ep_read(r0, 0xff, 0x1000, &(0x7f0000000740)=""/4096) setns(0xc9, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) 932.821985ms ago: executing program 2 (id=529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000002c0)='(') readv(r1, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x6, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) sendfile(r6, r6, 0x0, 0x68) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r6, 0xffffffffffffffff, 0x38, 0x18, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="750a00000000000061119c00000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000950059e73117eb2604cf1c5737abea000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 709.76512ms ago: executing program 3 (id=530): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x2) write$hidraw(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 709.278023ms ago: executing program 1 (id=531): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000100)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000002100)="3026aef98d9915fdd28771bcc6e0fb3ddf8085572dd42af5b80af279976058954d73641521c411b42d4627d0ec1a7fef8db6291a7d3d2cd14ca61c046b4c1aebfa13ce7d5e90d774f4198f07d3da57f6a10695c1861ac717be461c6512b1eed9d6aebf18d56db0bdbef9008b72c908fe684da59f3ec2847c0f42c83b0bfc2ffe12ad10251f15c8eaa079e309314ddba4fba28866cab8245df9409d6b9323806c3b5309249d199a65b8fc699fded1ba7b2022834e89a9342639cc70c588fc1aa34ef3dc9228dd70fed4337b84b7738c66c7e4b7c3f8c84553d07ad5d759869592e0734fc9b78017698a77b18fc5b547add8790c85c078e33abfacd14c8cdbd3314ab83ea2f8d7823537b2328e08f7c26395650f03fa05139d17c17a3c71cc87bf3cab6f2f26f7c08cf68d37fbe604cc8db4d014df46a47b75f33778c677834ac00b580ca7269fd439db948c7e135a31ce894fad0cb364abc2a7b6c94a78c918c00618454ddda5df32641884c318d57d19d923a1c5cd3787d0027e96308b56d5d8501ee21d7621e6b48081a01c52209b38b22c08fdc5c990ef0a56c7e2dfe144516dd644f694a0d640af90fdf059f36712c0f08a7319d02a1530cca582b6975b4ab40ae8f912332846ed4b7cfa3cc9e5f41b168bada703377d674d3f31597c63a9342981cad40ad848ecd6f92c43961b9c733b61e03e1904a4c4df80d2f5ffa12036bd7db9e28e9ba01a4fb6175d7013027b9f3958c43a8ba3670987a4218352931d090aabfc2def095a2bc05170605527c61c26922acbfb64bf8a4cdc90c0b3ad8c3c2a88b7359f5842ca2f9b7c81fc2fb514e2903dd5b38ed42d13a0d521a861f437483aa6c8617e4a18728f2a7307f7418c707322089a973c56911c23706bca8d3e38c28adfebb4172a4f824b0b45628f7a39605ba2f3335a9c850c686c0b954b80a9678d9c3e8509995d9abd36d8e6580398ca105cb79587cbf50fa248cc3ec080085fe0ca8ee80e3157184bbe96c3985aaa26bb96b03889b68788f76bc7f8a22c3cabc26fedd7f74a56707f34205e4bbd904c83f967d18989428c50c30357ef7c5ffffad97fbca02d7f5ea3b07ac143b90c076216b4d56d8b153f14781361f657316135353860d6e38e3e17ade91978d4cc03734181bf832f021ad805f3359a16e5dd13413586db70191291d86e8b2799c2ea009a6f5f041417bb774fb346e7f3b6da67bf0aea4006bc1b9898853dc7043b433fb9667940c554e45cb13343a3b1bb966ae294902574527821f0fe1f9ba11d7e670554deec90f0c60595cc50ba9b2160ff2fdccec7e61a99669a3b94e4f88d5dcc395ee53bd3e3d564d5f7deff9e507670ef8e1cad0c8f0de51f62a6616245d696679b9066a562e36f2197e7e27b772148a24a30ba29d2daa892a47a24aa2a0175535ff82dbe2d3652c4868e3590b325ed5a391661877a9b80b7d6c44879ef79cf24eeb08946af35f5fffa2fcc2bb21e3b8b5da221ea865108fa6d2f788205d9646cb3a0ad1615e7bb7a561e43fa9fa10d4c8a6e967c5b45b1f3a26671fcf724f717e6fa655b420f1133f9a449a552a4799c3b8aafba2c742b8b522ee6214c7b15f36372f4c8abdd9eea2ba347d2af37712ec2c0a40116c445b1d9f95fc944e6626646531b7250e338d49e8b5cc629d4b4065e96a81c2c6d4801c481659d2c5e35b2beb0fcdb87f0bb0ffb30cb2d3233252db7a9feae630e486bcd396a6f11727e0a87cb723f28b37e50eaefe49a24d0b5821cb2bbb527adefb48426611bdbd3c43bd5a4cc40353b47b327f0fbce12b79db3d968918a59ea6d2aabdf92cd5ac381a5efc1e257971ce44df6974450d9d0435d0dfde1e05ffbf48bc2928977516eb5ebc4e658a8727dbdd0f20f5bb42dc8485244aaeb0487941bdcd8a2dbd346229a751e14f7d809ab09b44b92e3d1fbf1fd77d48727e5b9e6bf8cf43c5e56acb5bb2d71a816c5fa40ed3fec4986178281b14e5339568207c38a8804a37814d62279f2ee46f0a61ceeca38e7730f45a7572797ec22c43484e2bba760c6251eb02a6f246662abbfd7a4bdfb48ac741b77931e409dffb7b8f61f88414cc334067072ec8ca6f86f5392bfc07bae71ea26067c55129bac3fc5b749a47d70869101188cd50a600943ab7c2d43bb053ec2827bda02a0099d8be7d99cd582470ce9882bdff1fc98143b7560bec06508aa7de343cbb310c19dcd71657d3c46f357f98a277037dfee73a244c4ce1d8b72a40d01989910ff1c7e102b831a0f624a17ba85b6a21ca74a7269193bd958a26a0e328ef9347cd48b7f9c72748a63df78930cd34bca15ec275dced71bafe5b9bbc0671175e84018d092929c16033a5a6e65cb8bf1e6ee64ef01506c69c23de1a6479d17b5e36e046084c24ceccde26d9e597006699f6f0e91527d06449615b44ca96b77c329c6abae151dd734032f10292ecdc0978d8681b391c76295950ab4e49496e33ee1a0af4d4bf98518d77199750e3b2f0c68e39c66b61f8fa8f01e4209cd4cbad6cd9334a009257019c42f073c6adbeee1b18dc150067813d795abd1b2133a1cbc510ca9a697c39e84a9298d9e731a8f55c2d63bdb33ddf524e4ce2635d7f11e5addf25491a929caf1b382a1b1d3c0e9d45dd5e6a4e9be4566cacd375246e6cd3d5355f510dbfdc303a8040382fddb8d527ad96c956ed7338f58d75976bce4e5a38f2822e9093e2dd30f3ba84c4537b97f2ad404ff293b051ad4d32d6aca19f9543938330fda06d700859e1683811be43a50588d19585cccf8f5812eff822a6bf767164395b93837ed032309f1abff182d7e573754c4da171722421c59b046504248dbdabb0a14ce25201d0e585da86c06b8d48ef53ef21574e310590d8454e2863400d0be2aeba37164987e082eebfde545f1f9964cc9fc15d6bf78b4b186538100f12ac008be6f3360d6f895e61aaa8ea9deb3a115eb555e4425d8fe8999200cabd472e71bf9953fc8623eacc7d80aaa30e7525dd555a5f8356f88e074563bc4d7fddf832fd098e23c4d15433bce11ac2e50ee094c515d81c30d0dae00e01f58068a9a0a63df3db0cb9ecab16f460b55db6e17968c4d02fbf09aad4c5a46d0539029f0830f55bf1f29361e45244fd09b70e182a578f441b159280924b5101419b724e40cb5cbd0565bd4fac10b5576360d533da0639153e7d3bddeca59bc75006d9728cae661f11a527db181253b373631adcadc0b767e916301c456f6745e4f75bc3512b88adee25750afb27d8bbd82f54292223c312f3a8719e42774a6af26abf0a00fb423fe0044e6e9a682721de10881a4bc886a53043d15bb8d2bca598c2e582cff9a9b032dcfde9ae73ab8a589ef473a2807aba1855e0b6b0bf982aed73d64885c83456e69273dacf3bc6238ec51984ee5fc42a82d8e0dff297d578b63b9d7f686ccead507aa51ac80c88f36e22e4166cee75904217ef1d4a1a28ea0e8473000c0bf573fb67e924c810d431b2d2877cdd94155bb89ed6189642bf18c24f165f15ea23bf7eab55daa070042638ff224ba52e4e85a292db54bb6a5f1f9055e303d47de916562227b092402123c9fd472975106ec7bc6ee7fe77b9b1e8f716f64bca5e2e37603307a844671dbafaea802d68d6f8482d464854f31dde983249939d84c5a741e335d900a8f278cd32d7ee24465eacc3a2142614099edd2b466bde23cafd1579074224c6d183697d01161bd4e6af1af10e63d28eb1f3b1c3fd98abf056414aa1c061edc149af7f667f4c837fbd425805a45289ff15d7910e438de7c5956a36b76090486a2e64428e634416c780c7122481a2c83503619e99ce1b6a02981c77c98cd83bd9e9b7aad39d0d09a8ed516644f74260772c0d84907f32b08fafdaada38f8d703a5c5333d9dbb74df6e3db000bcbbf7c30baae7209b69198c2e1d32219925c7f867bbfdb146d57376c6ca94e18c56fdd0c8636bd366cdc9c4f5a6a6c50ba5fd0dc40cca6bbaff52f20935992494d02c3a9f3a5786f466d38d0f8b5840dbdea95e475b87531f9078d6d93bdeae5bf1f03c5b634c9c8d41c5a7ad2bc6dbe68d9ef4e366d52509e51488bf48254fe8f375e7a2648d94e745ce96cf06f4cf926837ecdb69abf89f351c1de2429544e5a41f02048841a61d12e56946aff724809f2b114674d097f1ecba8339e1c1f770b31ec014cdb09db5148d6d6b13a7755018f8c76b8aefbf738b28f1c9302c6902f7d8efc9971d2984773558f6111b84cd77b1d2fa2e231136598c79edf6405207c605d62c231dbea057936b653b288507670ca443d43a1d02caaa805b1676374318179c9909499e9a8e0573368521d3970be84952d5a786008f44969e37fc624ff8068671f0fe5790ab654450ac70910e4a2dd641a07cba15e68a8de0f374b3690994f415ec4c81597ec1b61db8cc43107e6cf9605d76883c62b45cf9b31742a2d50c866f7f8464967849d02ea22b9b53196efa2e143f3c438f47a4243f8b77a4f6ee871eb8522e1d386ef46a3db6b477423429922c1515d49bf529ce317b3245c3016cab334684feaecff7320a38516c93008cd84a6580af17d1dbd85dc2b85c8e40e4e7a6a72f99fd4b2e55deda496f20d3ed8ac18d851d4dae302c1c9176c9f617a330743e074a14d5e5d09161b65b0c4da7bc714c03f3e2c30b78d75e719f33eb5cdb5dbdd6ffb96ad30122920f04c6d5b53814b7836f6a2993494dea7147bd125a0a2b1eae792b973e944811345a26fbac4ba52d9c13048ad38100ac2d4c060e398128c018242f73b9aa12150ed83101fbaf129e9356ccf48780b29a59990d4e355dcb30dc550527aa039f7923e89fe2d1933aeb3f64e96a5306c8c6c06b7f530d34859b34a3161d56307d8066554d5535e2a60c71bf960f483048eb12a6677e8f8ddec9a2579a43a255950c62bfe4b7e4d280594f6a12368e3f575a2145e17aa3f066de4cc57dada1e2cc2d5520937b1b4d929f4664b51b2d71eb22c0ed8f23d876cc68aa9703b6f5df24411216f5085e17000b30f405980ec79188d26a7acc61756d0e011881502f1e1f4caf8998fb56e7ca1d316128aa34032d8c9506ddb69f4d563e3bfaa4c220a465d2b8e9f9900d892d3c540705a58435d49b19fa60fd28cf6864cef3a670f00faa86b49558aa520dbb46c3e2ceafcecf20495826efce9b05f9b038215b402b0da28531648157a00a0452316b999cc5e1ff02c91bee2554c291927beac92dbbff7659d40b995695adb140b01a2ea4fd4aa530e970e9416a222e2765ef804c2d01fc8bfb901361dfed036705040bf73c566dd7ae37cc6a276457e4efc8b4e364306bf3ad3ab4dca8b830a322dc0d22d2e16d44d14b0e1a9ad4a0c0bd7fd3aa856b27a0990222b8b5048be13c468c2c85265b5686d51762b3925e840adec3fcca1900e3f5656a06a5abdbedbd19ea5c288de1d8a83eca7ce2fc8efab62ead570012de77fcb6d9ca4160dadb5b89a9d4ef3d36db9caf009cc081c7358769ddeb7515978bf6264708ba991b6c57b1b6b2e8c76e1b26e880b586afcb91467c4da2b1f162304e1ffca506b0bc7c20a24aee8a78f713cdef77dc61cb29b2cb5d02d8300df3345def179a71f9ef2da57f759dafbcaca4a6da19d2d7be6eca64e08ee74f105fb3091b72e4f17cc0c17d32e408ccdf9b562409df48beab1de0bd0a2bb5fadcd090bf4e1a9dfd624f9649d93207e92cf72b5f2c8ec1112e53644739f963534f61d49a1ea043fd40e01180538e1cdacd563a460181b14594cd2e38d7892f821a33bd156a8dfc3433ebaeef1c15523b22732129d6e00ef60c8a27b33bc68c3ff5ba36f83bb9e6ca749cd55e6b4adac8ec359e648bd9b1400dc885725e409eb4137e48f191b75eb4c08df8298c01ebb2079e69f571f3a87d27a81d84d802e6d008131ea5bee3d69c50ccfcf36e2681a6df7ef8362bd69bf25ceef876c4656b92ef4ab0fdc68084658f087ebad102870d04a80d2ebdec406ada5dbe204cf065ad59426039fe856bdf930431ac338f5cb7705ab8daf9e90ee9eb2df8e3d8720f156f65cdbba6607f53c2fd4f4c56a7f197fade99acae746e5f8ef4ca801307ee076086cb36f882236fc36e047e75ddf7aef8804b4483600b662c674601009fbb1dd65952ca5962609f49fbd23344cec586eff2e2f5e1d5b4608b18db76a3ff7983a715205cddb389c626afac04c15e996dac3a8b82075653ba6a3559543215cf46f08ccea187448eb6ccee05cbff8bc6c51069041e09f36af1124597d6ed88cc05b2eb93ce60779854581566366e352b74b2e0bb5c703bc5d32b4b832ba0c5279485567aae10f617fccd374a811f9955a8c9cae65ffe6340052dc590e797bc789da58f9f3376c5a6d98546b46fd7fed82c1c756949b9b40b1bab244baef9d6404e1aa0a8d7d69ef0bea6684d9b2ec6fc870d8232bd3282c24b7c75c8ac4f2fd7ff8b2e3c89c349e5674fbc9a4af5b1b6aab4042ca650cb5ae1dd8dd3e40c5d2c080dac8966b768528726eee478e6086c9bb92d7e5ca9a2200bbc2ab8dd5ffac9a1567fb230107fd316b02162b4a9abe8a67ad3754deb9fc4b7198af6e6fe25b2e8ce80d4aa234b53939b7cb5ace24ef09d9c2ad3d023398a2383fa27dc552f0ee1f8ce7f6fab06289edcc034b3eb3fc4ee79d4146aaf6e6ea5de80c8a1fdfa74212ee9d9f71556053a6f00aaee757b8e13c924bb0687c13624c452aaa9c2be4e682611bc78165c17019325ee1ce8836f803b0e8510261f43ce81a2cb8d71becfe1403a1a272c90515ce7a718b9d47a7d1fcc12d6d4ae72904cac9ede12019959ebd2bd80f93db7e85254fa2f99afd63ddca8985dfa7604b4c0c40ddce63a5b5e10ec153d2a2bbbabede60f39067369159c62c6868250c5523db51fd1bceaf51edb0087e824bc29f5e2080c760f845091c480f02c61a47edf620b7aa275bb97b3482c46096ed00f0e88261d096cc4f5d3ab681ac5580b2eb17ffbe17eb64c9e6cc7f6eff52d3283d8d41e562d6cab1bb6fdd4dac360456067b3b7b737d8b365c36b049a31f11e383495558b848a009667215bba6be14d69116f6fc854dc0445c17ea098c6424a16780313c91eaa3588835ed22b2fc56c814d2a472afcdca5b588226bcfdde588bf739ce3e7d939c39c3281c2fb968a63f1647ca76ad2b97ffc0e027646c0e6cac56f5e84f720feac564123b6b81d7e5d7ebc1517e4e1c6562773e26c48ccd3c01cdd3907797db3e513877a85555ef7df36d6561232bd33ddb4b72f3d0a9d5d204083f9a503bb0083e77d2b5e33441ba77f757157d1b8c63e5c4f1df2bd79efab8ae52e1ea5c497277241674d58ec5a392af1ec15f90116caf1fde157f2807cc15db5d86ddf5964bfb93925f4744b9fcf538f95fed7348c6675bd0d7d860bd3e0187717d5196ce0839c0b3e3e79e71d90e2ef4e204c7182afb37f36a22f648e2ca0fdaceb2575372af4e25ea97368e97bd439fbfd3ba673da43697c2c529bdbcc94202aeb7cdee81c69a301f6803a8c53f664511dac89d63438be606a9bf2ace1682bd37c515947350e0fd827314c47a800ea33b02fa0e3bdfabf6734723033db75804f3b0601ca49c5a8aff1f159f2f304eb5fdcd207ef71b4f4c8b4a07d8a883092befd2aec92ad5ad4834113de4bd0b18d30978416bc99ddd34fe9de2c82d28fd1ca6b876b679c7c38f8b54fb7eff35f4baa3cfa8cfff285822e7c8b831715e417d8fb4f007580df8e60a7dd74d142149b6bf73f9c4459de953aaddc9908c9c43698a175e6b9dcf8393efda9e8b052bf7b8291778f287737e4388448e7b72c9f6b156b29b83578825ee850678870bcde20f88e69dcc2d597bbd94d9ea09b6d53a858522aa7528e90403d57f0b3e03b3347d7e12254914ddfd5a79b287258c4888bb9dca2368a6d9b5a191ad67c4015f2d79b9cd12d5e8cf78daf70ed74975e2004fdfdcfdad56b4158929364389cb5299fc77a37e2a67fd2e7147fced6e1b266a1ce47b60ccb8ba336b6c44b2ae07cedac3929cfe46c8ebc5d4aca01faa9113f101128b883c212db008908065d8a018ea5e9af4d4dc28f105ea4408123770cd1995224b9ae71137a000784db83624deb3b290ab982dd29380ecb6b453b9512c60d416fb23f202bd70af46df1f740873e358d6a593b25152c152cfb7799943b38ed9928560fb69ab89e319070a321e21d8b800e6d4082267663b5dad1e449ce72b68ed7e8cd9c7b0fbdb04d983e6feefce9a72f86b70ec74c9ebec463c493f9b24a1df04e02d82d591d14218345033bb4d6ac054e25e53decd2fc497f64a9e1129fc3c0120858536e563623d8d6ef6b981c0139a342b418d5bd84e42e400431d5538a435820fe1023d4de94b95b2ad817b8be7bd18d40034a04a152b6f70c49a8c1298b82171a7a9e94847c1749a2aafb73c041c89b41bcd24335fc383a38ff81dee1efb018978837c050969974167bf73176252ba820260842b5a701660b93e0aa3854f64c3038febc4fde4a910b479ff7a4c6856fd9fdfe26f3d29a74c9d05909a115d6c0d7a24e24cb7cb2678df486e22994b556023c1ce61bbd1488b805f9f687d00fe3c062b4d60a934ea3265d69deaecd742c277a11496a8ce7a0073324958a1c163f9406018a9c68ad1316527435dc948076790f1292a25d083b72a2a6c942d5be839d689cd42363d1ef2187010a2e2c9dd4ddef0e48a3d5c373434314f06e2ce1f6d14559131574970e7b3879ad35ac98ea6ddee6ca7007061120b364d19560b15bfadc5d631e77cff70dfe20445dfab8e1a311074e0471f0aea8c3aef9708f1b9e07821464d69a34d5ef619f495919d257986a704b3f1f6d7a277d1dc6782c31f634c35cbf0600d2e2e2f84019d3083963dbed95488651d9f3a24b57b11f5c4a4781b4fe882efa2f2476587642b8ef63984fe801f3644ca02a735f8dd906e34226697c3c246af64077d6a44123004152ec0df9707f414fcee4b5ec6aab4d610d9458fe8405b65c8428284669b200e4573c55c11b2d851301414e4e400d5e33a4361032ad44231300291d902e27d8af1641a914cb51aff5481abd933e8fe216fa3950ecadbe953c133361402cbb20f5e3efbd1de317d878382a072e82969e83af7018c7fbfaecf34d094cd48910d7e3869799e7ae5aac9edc78d81f9ee3057002113412673d71dd48df1a40e0af3314d2cfb6dc40994804da3906c5b4298cb139d067bb3e4fdff97a98523e35db4149b972fa7ec8fd11bdf8de2b8bb969a4561f53dd79821ac49e9b7c9d9ebe18f2e7f88b0353f7338467346823f73758316908fa2087a85189fdc1b6a66b9003fe328c624d71bff1cc6c5c4b0ab64e7a78f78d83250bb5c05e8be0da2b54e30f71d2d0e692572578d850d04ef9814f0ac7d6a42fdea3e5e6aa387a8f35d5316aa11389a6722d19c901379bb92f1786b5f7e792d7a35eead6e5fd986e772771ec5d564222b46236174b7cdd1a6686d6b7d7363478f6bfa8807f868b4f7d7b635f2b1ef929802b599e58f42ebfacf39ecbe6956623ff35bcd2bd7e8dfdffda2acc10a245e001435a0b1335518c232e304edc140ba41510f0550ee01256717f72ead6249ca7ae4d86af56e60b9b4bb70fca3cf3a5b44e58e2e775e0b505dd4cd017645d37c365e5c8878cb44c433f4b972fa80d85ff0e18b7cdceb83d24c9c241907103c0a06590d2e870f778e833c332092f3028c026a930c6f29f4f3f444bd02283b15a6970ba533c12377f83258306026cbc19519b90df5372087546a76fc408fa2a6ff418df964a334a63eeeec3ae384de43af223af5184bf41ae715d703a87f74ad49fd014de2c26b3e24d5be2d2bf4d6aea9b213967ec73d0a50661cf38d69b2f738a3911ec2e9381c7da9dbd89c292cf540a5c2d707cb1591e4c50da1a767bfcd71038cb876bc705984a913d6a0ce20bdc96cdae02f0482668b2cc50e95143bf03c9c2f928c8cd470a1a84f316106d8595b56faa4872a3a3f0586fd4c7e6adc28b3f9bfdb28e8551598d257c30d588676e6bd6cc223964d49466841ffbca447add3cdb4eb200d2a8f144ea7eeccd42abd4275ba4dfb2e1eb8fcb27699f7453e9a2233fefa74284ea7e7bcbfeb57578a30538e2f2d418daadb41c21e49bf8ea64471da592c463bba670983edec8f67102258f7cc0312048f50009597fc6ad6ad9478764e3a01df11c8db927acebb37f85cef9ab85d43cb8078e0ea23ff144911d517df246b13f3d441f9e87b1da00ad405e522d1ff896660e10fdafce272bd51b75c73775f771b44c124d63d790125e0ed37a6e23a16d695f741072032ac762252d90f803c64e6d2641ce39a207c1887838f9886a79a74e58968895e853412f67af15e0c848a067d1639c4b0da0ad7c14e68a7557cf700c124f59674f484178cd4770ae31d8366eb560b895b56ed7df4f1ff24ccca3c0e0e4fe63c45d68c3f2de528375e2533698ec86da823634db67f99df17b21d61c2339f05bc79b1619d2af666a1dab7960cd27f1f368b9134305706356365d60921cf8cb395b7f6e3afa32a28a204ea9a217c1de34cd8b88f6dd939a6e3095a993bc405bd204f8ce6e65daee3eb4fec1e674378ab391a8425e00ab6fec0dd29a2447b28bc60e4cb9d52a1c357632c46a2ce1c9fcffc15d07750f0f0e997688fab6b362be70be9e5e875c33aea38f4c4fc7204badd0f344c277324dc14fca5ff03a1e122ca29e7179a3f0fb02710b75980d29163333451eaae51083720b435045faf9851eb37665841caa53241e55fdc39676a55de097d15b2b4c5463151eb121205cd6682d097f06b297e218e1eb74957107ebfe8357da6ed6498893c12ebd55f6da8945f6af4a1ce19ef23938ee2eaf5b6e7cc715d8f7709e81411b3d3740e4de35628e7513638357bee3ac3fa4e85d323b0e3cb5b8484db1e5ce59fe2f00018b8da68c059e6c00dbe080b6d95dd8d72e7d3abb26d0ba6d46116a12d13189179c932854ac982da12cc248c8147fd23655cbb74bcaa4d6422bd750abb13763e4b321e1d3567e870a714f5796737c17a6ebd2411ce61ca951de0c2b2c5929638908ceaf59500fe489539483cab3957c9e2d7e3db0b453797226e34e4d3091040cff1b3a14e2026d498001864ba9813ac2f9470bd2818a0678e22a7dce9341f76a2cf6eab6cfe3c199bd517ae55b18e4ff8f469da5a1d010408e2bcfdca04c651ce4c99d73946caa1b9d3ef89d738a765dbcc83d2590044ff799f6857dae90be9ebc6dbdd52f642038e86bc8b1ca6e0f765394951a232a823a63a7ddd5f80c48a93e173a710012200b408f3752cee183369a7814800f3bd24867d57d7232fa33f4fa686e9683c2e6d43ff677d42f7cabeae4c3851cbc65ab70a79c269efe72e065524e96f1a64a13103c5d7adbcc00e105fc740016a1e2077ee804e9c5c70826aa632c2e1321deea17b7b8fb6ae158eb4afd405963ebf9514389ff0470d88630a0e6df0a04be000d4e9c4218c580f4fb30edc9173ad54009e2598f101fc1327bf1755c057b911fe98ed515d8215d", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0x0, 0x2000b3404, {0x7, 0x2d, 0x5, 0x210420, 0xca, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x40, 0x3, 0x46d, 0x6, 0x0, 0x8000000, "0600ff0900a10185021901292015002501750195408102c03abb42f439b17767502ec8281801f95b7d1e0dfba0aa9a3d166e8e81b0796425122dd447e3fb99e4"}}, 0x158) syz_usb_control_io$hid(r2, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x10, 0x1, 0x8, 0xf, 0xfffffffa, 0x10001, "b1ff3a983c3908c135ad55bae7230671"}}, 0x128) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 602.33701ms ago: executing program 3 (id=532): r0 = socket$unix(0x1, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x5) (async) r1 = socket(0x2a, 0x2, 0x5) connect$inet6(r1, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_TDX_INIT_VM(r6, 0xc008aeba, &(0x7f0000000700)={0x1, 0x0, &(0x7f0000000480)={0x1, 0x400, [0x7f, 0x1, 0x5, 0x0, 0xb, 0x5], [0x8, 0x9, 0x5, 0x434, 0x3, 0x100000001], [0x3be, 0x16, 0x5, 0xd, 0x700000, 0x7], '\x00', {0x8, 0x0, [{0x80000000, 0x6, 0x3, 0xfffffff9, 0xa4, 0x7, 0xa628}, {0x0, 0x3, 0x0, 0xd, 0x35, 0x9, 0x9f}, {0x40000000, 0xfffffffd, 0x4, 0x3, 0x0, 0x9, 0x3232}, {0xa, 0xfad, 0x0, 0x621, 0xa5, 0x3}, {0x1, 0x10001, 0x4, 0x0, 0x7fffffff, 0x1, 0x9d5}, {0xe389b6fe4ed2a322, 0x96, 0x1, 0x2ff8200a, 0x3, 0x3, 0x2}, {0x80000000, 0x8, 0x0, 0x9, 0x2, 0x6, 0x3}, {0x6, 0x4, 0x5, 0x80000000, 0x3, 0x5, 0x800}]}}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000880)={[0x220, 0x80000001, 0x80000000000008, 0x38010000000000, 0x5, 0x10001, 0x4000000004, 0xf0, 0x1, 0x4000000000010, 0xffff, 0x6, 0x1, 0xff, 0xb08, 0xfff], 0x0, 0x80}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r8, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r8, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 452.37945ms ago: executing program 4 (id=533): mount$9p_virtio(&(0x7f0000000080), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x100000c, &(0x7f0000000200)={'trans=virtio,', {[{@access_any}], [{@dont_hash}]}}) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) socket(0x3, 0xa, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd,d\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r5 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000140)=""/120, &(0x7f0000000000)=0x78) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) creat(&(0x7f0000000000)='./file0\x00', 0x0) 372.589436ms ago: executing program 4 (id=534): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', {0x2}, 0xd80d}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 372.35556ms ago: executing program 3 (id=535): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) (async) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 210.476258ms ago: executing program 3 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x100, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x1000, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'wg1\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @multicast}, 0x14) process_madvise(0xffffffffffffffff, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x14, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2109c2, 0x0) r7 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) close(r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x2f, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xad4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000006a0004002cbd7000fddbdf250000000000001f0008000500", @ANYRES32=r8, @ANYRESDEC=r9], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) r10 = add_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="e960b2c89ff961a170c8432616ccf7e9e9dee144e7fbfdb04ba474b907bd0eb265ae6fb671c0ca7df1e68e1e7ad5f57f5f5a179d120fa6ce6e28209233", 0x3d, 0xfffffffffffffff9) keyctl$update(0x2, r10, &(0x7f0000000580)="5270ac2d88e82c5080e808082555a4a7d221e7bb49590186b32453600ade63722ce3c91353448a7dc21ac5908020", 0x2e) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) splice(r11, &(0x7f00000005c0)=0x10000, r6, &(0x7f0000000600)=0x424, 0x9, 0x7) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3d}, 0x1c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) 210.126644ms ago: executing program 4 (id=537): syz_emit_ethernet(0xc0, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@generic={0x8100, "9fbc7014f0c5a927c8364f68f7beedb0bf9b75316a9b993d0487019043b49206bdb97a927d74a4f10d9bebde521c565d926557db5b850008000000000000e9379f2f009b8df7c0aacf12dbd7fb19f773df9947edae52874b4526111b72992f5bf412b93693556025a020ff84b132c6f947d730c06a273548f3922659b477ffdb6235286bd4c756553e03c22ea9cb6a42719f7c32f0096668060000000000000050587e69c2dcd556b2a74d10a50f2abe94d6"}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30040000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$nl_generic(0x10, 0x3, 0x10) 122.604182ms ago: executing program 4 (id=538): syz_emit_ethernet(0x15f, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x151, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}, {"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"}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fff}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0xff, 0x80000001, 0x9, 0xfffffffd}, &(0x7f0000000240)=0x14) 122.145614ms ago: executing program 4 (id=539): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000e800"/28], 0x48) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xe375, 0x0, 0x5, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x9, @pix={0x0, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000480)={r4, 0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x7, 0x3, 0x4, 0x9], &(0x7f0000000440)=[0x1]}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@initdev, @loopback, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', r9, 0x8000, 0x8000, 0x3ff, 0xfffffffc, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x13, 0x72, [@broadcast, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}]}, @rr={0x7, 0x1f, 0x22, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast1, @multicast2]}, @cipso={0x86, 0x1a, 0x3, [{0x7, 0xb, "97a590f61197e7cb70"}, {0x0, 0x3, "1b"}, {0x5, 0x2}, {0x6, 0x4, "16ed"}, {0x7, 0x7, "d134086e78"}]}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 293.067µs ago: executing program 3 (id=540): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 0s ago: executing program 3 (id=541): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) (async) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) (async) kernel console output (not intermixed with test programs): [ 37.884571][ T42] audit: type=1400 audit(1787406787.824:114): avc: denied { write } for pid=5634 comm="sh" path="pipe:[1624]" dev="pipefs" ino=1624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.894800][ T42] audit: type=1400 audit(1787406787.824:115): avc: denied { rlimitinh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.901758][ T42] audit: type=1400 audit(1787406787.824:116): avc: denied { siginh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.908463][ T42] audit: type=1400 audit(1787406787.844:117): avc: denied { write } for pid=5635 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.125347][ T42] audit: type=1400 audit(1787406788.074:118): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.194963][ T42] audit: type=1400 audit(1787406788.144:119): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.298216][ T42] audit: type=1400 audit(1787406788.254:120): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:34927' (ED25519) to the list of known hosts. [ 41.132411][ T5663] cgroup: Unknown subsys name 'net' [ 41.311656][ T5663] cgroup: Unknown subsys name 'cpuset' [ 41.318315][ T5663] cgroup: Unknown subsys name 'rlimit' [ 41.528843][ T5715] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.224767][ T5663] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.571348][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 45.571365][ T42] audit: type=1400 audit(1787406795.524:156): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.714994][ T42] audit: type=1400 audit(1787406795.664:157): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.727646][ T42] audit: type=1400 audit(1787406795.664:158): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.736128][ T42] audit: type=1400 audit(1787406795.664:159): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.740718][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.743250][ T42] audit: type=1400 audit(1787406795.664:160): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.747300][ T5731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.752620][ T42] audit: type=1400 audit(1787406795.664:161): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.752646][ T42] audit: type=1400 audit(1787406795.674:162): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[1654]" dev="sockfs" ino=1654 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.755154][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.757405][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.758226][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.759930][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.760222][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.760411][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.761066][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.761176][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.761224][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.762775][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.762878][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.763381][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.768596][ T42] audit: type=1400 audit(1787406795.724:163): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.768625][ T42] audit: type=1400 audit(1787406795.724:164): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.768645][ T42] audit: type=1400 audit(1787406795.724:165): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.771716][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.774402][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.775662][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.777728][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.780915][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.786147][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.305865][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.309952][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.312735][ T5724] bridge_slave_0: entered allmulticast mode [ 46.315828][ T5724] bridge_slave_0: entered promiscuous mode [ 46.319900][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.322386][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.325065][ T5724] bridge_slave_1: entered allmulticast mode [ 46.328284][ T5724] bridge_slave_1: entered promiscuous mode [ 46.350741][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.353869][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.358156][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.360480][ T5733] bridge_slave_0: entered allmulticast mode [ 46.363088][ T5733] bridge_slave_0: entered promiscuous mode [ 46.377793][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.380786][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383264][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.385674][ T5733] bridge_slave_1: entered allmulticast mode [ 46.389094][ T5733] bridge_slave_1: entered promiscuous mode [ 46.421049][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.428683][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.440933][ T5724] team0: Port device team_slave_0 added [ 46.444061][ T5724] team0: Port device team_slave_1 added [ 46.467768][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.470504][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.472949][ T5723] bridge_slave_0: entered allmulticast mode [ 46.475760][ T5723] bridge_slave_0: entered promiscuous mode [ 46.503121][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.506377][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.509675][ T5723] bridge_slave_1: entered allmulticast mode [ 46.513067][ T5723] bridge_slave_1: entered promiscuous mode [ 46.517311][ T5733] team0: Port device team_slave_0 added [ 46.522128][ T5733] team0: Port device team_slave_1 added [ 46.525031][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.527979][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.536376][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.541875][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.544086][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.553726][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.602309][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.613824][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.616181][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.624712][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.630917][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.633219][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.641544][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.648183][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.652784][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.655832][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.660192][ T5725] bridge_slave_0: entered allmulticast mode [ 46.663932][ T5725] bridge_slave_0: entered promiscuous mode [ 46.701285][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.704068][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.707033][ T5725] bridge_slave_1: entered allmulticast mode [ 46.710718][ T5725] bridge_slave_1: entered promiscuous mode [ 46.741746][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.747037][ T5723] team0: Port device team_slave_0 added [ 46.752847][ T5724] hsr_slave_0: entered promiscuous mode [ 46.755741][ T5724] hsr_slave_1: entered promiscuous mode [ 46.759869][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.779930][ T5723] team0: Port device team_slave_1 added [ 46.799207][ T5725] team0: Port device team_slave_0 added [ 46.802346][ T5725] team0: Port device team_slave_1 added [ 46.818858][ T5733] hsr_slave_0: entered promiscuous mode [ 46.821320][ T5733] hsr_slave_1: entered promiscuous mode [ 46.823433][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 46.825235][ T5733] Cannot create hsr debugfs directory [ 46.837602][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.840182][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.849507][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.865082][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.868004][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.878497][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.883672][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.886583][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.897113][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.929488][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.932379][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.942534][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.011739][ T5723] hsr_slave_0: entered promiscuous mode [ 47.014778][ T5723] hsr_slave_1: entered promiscuous mode [ 47.018117][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 47.020604][ T5723] Cannot create hsr debugfs directory [ 47.057431][ T5725] hsr_slave_0: entered promiscuous mode [ 47.059775][ T5725] hsr_slave_1: entered promiscuous mode [ 47.062665][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 47.064767][ T5725] Cannot create hsr debugfs directory [ 47.273065][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.279474][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.287479][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.291378][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.304246][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.308390][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.310930][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.316208][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.373491][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.380996][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.390096][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.394471][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.397919][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.402233][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.404873][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.409768][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.469156][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.473099][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.477908][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.483954][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.487587][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.493177][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.501676][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.507013][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.536651][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.569967][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.576249][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.586558][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.592085][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.600723][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.607966][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.613697][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.618627][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.622263][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.635304][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.638267][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.653880][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.656313][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.667321][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.694671][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.714217][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.716605][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.738986][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.741367][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.806776][ T5740] Bluetooth: hci1: command tx timeout [ 47.806785][ T5728] Bluetooth: hci3: command tx timeout [ 47.807229][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.826497][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.840314][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.849240][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.861017][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.863527][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.867179][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.869557][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.872623][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.874804][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.875957][ T5740] Bluetooth: hci0: command tx timeout [ 47.877767][ T5728] Bluetooth: hci2: command tx timeout [ 47.892233][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.894685][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.069483][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.093197][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.097448][ T5724] veth0_vlan: entered promiscuous mode [ 48.104905][ T5724] veth1_vlan: entered promiscuous mode [ 48.141339][ T5724] veth0_macvtap: entered promiscuous mode [ 48.150128][ T5733] veth0_vlan: entered promiscuous mode [ 48.154511][ T5724] veth1_macvtap: entered promiscuous mode [ 48.166594][ T5733] veth1_vlan: entered promiscuous mode [ 48.172838][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.182467][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.193508][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.200992][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.226010][ T5733] veth0_macvtap: entered promiscuous mode [ 48.239210][ T5733] veth1_macvtap: entered promiscuous mode [ 48.257691][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.272319][ T5723] veth0_vlan: entered promiscuous mode [ 48.278316][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.284349][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.318607][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.321009][ T5723] veth1_vlan: entered promiscuous mode [ 48.321468][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.331649][ T5725] veth0_vlan: entered promiscuous mode [ 48.346749][ T5725] veth1_vlan: entered promiscuous mode [ 48.356002][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.358978][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.402670][ T5723] veth0_macvtap: entered promiscuous mode [ 48.402737][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.410110][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.416472][ T5723] veth1_macvtap: entered promiscuous mode [ 48.422536][ T5724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.438214][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.441739][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.444481][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.445155][ T5725] veth0_macvtap: entered promiscuous mode [ 48.457318][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.469425][ T5725] veth1_macvtap: entered promiscuous mode [ 48.475753][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.486086][ T5803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.505662][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.518104][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.531116][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.562306][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.567148][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.584055][ T5881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.586693][ T5881] IPv6: NLM_F_CREATE should be set when creating new route [ 48.598779][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.603699][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.618591][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.621118][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.638726][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.641892][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.676004][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.678821][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.706425][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.710639][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.713397][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.717056][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.723072][ T5803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.725989][ T5803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728777][ T5803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.731489][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.734163][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.738654][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.653480][ T5914] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9'. [ 49.720629][ T5916] bridge_slave_0: left allmulticast mode [ 49.723031][ T5916] bridge_slave_0: left promiscuous mode [ 49.726524][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.734417][ T5916] bridge_slave_1: left allmulticast mode [ 49.737666][ T5916] bridge_slave_1: left promiscuous mode [ 49.739842][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.748895][ T5916] bond0: (slave bond_slave_0): Releasing backup interface [ 49.754739][ T5916] bond0: (slave bond_slave_1): Releasing backup interface [ 49.763398][ T5916] team0: Port device team_slave_0 removed [ 49.770565][ T5916] team0: Port device team_slave_1 removed [ 49.773612][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.777320][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.781676][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.784762][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.789666][ T5916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.807246][ T5918] team0: Port device xfrm0 added [ 49.817613][ T5916] tipc: Started in network mode [ 49.820212][ T5916] tipc: Node identity 3a732e4e42bc, cluster identity 4711 [ 49.823286][ T5916] tipc: Enabled bearer , priority 0 [ 49.875836][ T5728] Bluetooth: hci1: command tx timeout [ 49.875902][ T5740] Bluetooth: hci3: command tx timeout [ 49.955748][ T5740] Bluetooth: hci0: command tx timeout [ 49.956777][ T5728] Bluetooth: hci2: command tx timeout [ 49.967937][ T5923] dlm: no locking on control device [ 50.109364][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.205638][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.356761][ T5874] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 50.361309][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 50.364836][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 50.368778][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 50.374894][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.378006][ T5874] usb 6-1: Product: syz [ 50.379514][ T5874] usb 6-1: Manufacturer: syz [ 50.381093][ T5874] usb 6-1: SerialNumber: syz [ 50.387994][ T5874] usb 6-1: config 0 descriptor?? [ 50.598613][ T5874] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 50.640132][ T5951] netlink: 'syz.3.22': attribute type 2 has an invalid length. [ 50.676068][ T5953] netlink: 'syz.3.22': attribute type 2 has an invalid length. [ 50.695695][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.795700][ T5832] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 50.801379][ T56] usb 6-1: USB disconnect, device number 2 [ 50.804107][ T5923] netlink: 'syz.1.12': attribute type 49 has an invalid length. [ 50.827065][ T24] tipc: Node number set to 2026843726 [ 50.847009][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 50.849763][ T5880] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 50.854439][ T5880] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 50.858915][ T5880] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 50.863376][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 50.867582][ T5880] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 50.871673][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 50.874732][ T5880] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.879208][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.882638][ T5957] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.23'. [ 50.948476][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.950829][ T5832] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 50.954403][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 50.958318][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 50.964343][ T5832] usb 5-1: string descriptor 0 read error: -22 [ 50.966412][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.972506][ T5949] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 50.974986][ T5949] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 50.980295][ T5832] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.029157][ T42] kauditd_printk_skb: 75 callbacks suppressed [ 51.029172][ T42] audit: type=1400 audit(1787406800.984:241): avc: denied { read write } for pid=5959 comm="syz.3.24" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 51.038777][ T42] audit: type=1400 audit(1787406800.994:242): avc: denied { open } for pid=5959 comm="syz.3.24" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 51.038800][ T42] audit: type=1400 audit(1787406800.994:243): avc: denied { ioctl } for pid=5959 comm="syz.3.24" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 51.087257][ T5880] usb 7-1: GET_CAPABILITIES returned 0 [ 51.087285][ T5880] usbtmc 7-1:16.0: can't read capabilities [ 51.104155][ T5880] usb 7-1: USB disconnect, device number 2 [ 51.120873][ T42] audit: type=1400 audit(1787406801.074:244): avc: denied { map } for pid=5963 comm="syz.2.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.120909][ T42] audit: type=1400 audit(1787406801.074:245): avc: denied { read write } for pid=5963 comm="syz.2.25" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.157830][ T42] audit: type=1400 audit(1787406801.114:246): avc: denied { ioctl } for pid=5966 comm="syz.2.26" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.168605][ T5967] Zero length message leads to an empty skb [ 51.195410][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196132][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196228][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196317][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196374][ T42] audit: type=1400 audit(1787406801.154:247): avc: denied { create } for pid=5968 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.196400][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196483][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196566][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.196651][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.204318][ T42] audit: type=1400 audit(1787406801.154:248): avc: denied { write } for pid=5968 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.261577][ T5978] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 51.264885][ T42] audit: type=1400 audit(1787406801.154:249): avc: denied { nlmsg_write } for pid=5968 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.298999][ T42] audit: type=1400 audit(1787406801.254:250): avc: denied { getattr } for pid=5979 comm="syz.2.30" path="pid:[4026532863]" dev="nsfs" ino=4026532863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.513449][ T6001] 9pnet_virtio: no channels available for device syz [ 51.545433][ T6001] netlink: 'syz.3.36': attribute type 13 has an invalid length. [ 51.697334][ T6005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6005 comm=syz.2.37 [ 51.701720][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6005 comm=syz.2.37 [ 51.710498][ T6005] fuse: Bad value for 'group_id' [ 51.712601][ T6005] fuse: Bad value for 'group_id' [ 51.726945][ T6005] binder: Unknown parameter 'measure' [ 51.782061][ T6007] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.955803][ T5728] Bluetooth: hci3: command tx timeout [ 51.957044][ T5740] Bluetooth: hci1: command tx timeout [ 52.036086][ T5740] Bluetooth: hci2: command tx timeout [ 52.045577][ T5740] Bluetooth: hci0: command tx timeout [ 52.435872][ T6034] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 52.569636][ T6050] process 'syz.1.54' launched './file0' with NULL argv: empty string added [ 52.683602][ T6064] warning: `syz.3.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.885670][ T5880] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 53.017851][ T5880] usb 6-1: device descriptor read/64, error -71 [ 53.255635][ T5880] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 53.387662][ T5880] usb 6-1: device descriptor read/64, error -71 [ 53.496211][ T5880] usb usb6-port1: attempt power cycle [ 53.525925][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.560038][ T10] cfg80211: failed to load regulatory.db [ 53.570881][ T56] usb 5-1: USB disconnect, device number 2 [ 53.586730][ T6124] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 53.686235][ T41] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 53.690708][ T41] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 53.694018][ T41] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 53.700341][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 53.710461][ T41] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 53.714723][ T41] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 53.722353][ T41] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 53.725828][ T41] usb 8-1: Product: syz [ 53.726690][ T6140] echo interval is out of bounds [ 53.726690][ T6140] [ 53.727350][ T41] usb 8-1: Manufacturer: syz [ 53.731662][ T6140] CIFS: VFS: echo interval is out of bounds [ 53.731728][ T41] cdc_wdm 8-1:1.0: skipping garbage [ 53.736419][ T41] cdc_wdm 8-1:1.0: skipping garbage [ 53.740954][ T41] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 53.743609][ T41] cdc_wdm 8-1:1.0: Unknown control protocol [ 53.835528][ T5880] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 53.856163][ T5880] usb 6-1: device descriptor read/8, error -71 [ 54.036149][ T5740] Bluetooth: hci1: command tx timeout [ 54.036170][ T5728] Bluetooth: hci3: command tx timeout [ 54.096765][ T5880] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 54.126021][ T5728] Bluetooth: hci0: command tx timeout [ 54.128433][ T5880] usb 6-1: device descriptor read/8, error -71 [ 54.131167][ T5740] Bluetooth: hci2: command tx timeout [ 54.141605][ T6104] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 54.198457][ C1] cdc_wdm 8-1:1.0: Unexpected error -71 [ 54.199082][ T56] usb 8-1: USB disconnect, device number 2 [ 54.201955][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 54.206466][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 54.208929][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 54.245872][ T5880] usb usb6-port1: unable to enumerate USB device [ 54.495528][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.657003][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 54.661600][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.665414][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 54.669028][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.676496][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 54.684445][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 55.012278][ T1172] IPVS: starting estimator thread 0... [ 55.038389][ T6169] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 55.046418][ T6169] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 55.051071][ T6169] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 55.106379][ T6197] IPVS: using max 44 ests per chain, 105600 per kthread [ 55.107120][ T6202] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 55.134525][ T6169] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 55.154668][ T6205] vivid-001: disconnect [ 55.171703][ T6205] team0: Port device team_slave_1 removed [ 55.219708][ T6204] vivid-001: reconnect [ 55.293653][ T6214] ptrace attach of "/syz-executor exec"[5733] was attempted by ""[6214] [ 55.424312][ T6228] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure [ 55.478275][ T6233] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 55.484324][ T6233] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 55.967598][ T10] hid-generic FF00:1A10109:15108E.0002: unknown main item tag 0x0 [ 55.971175][ T10] hid-generic FF00:1A10109:15108E.0002: collection stack underflow [ 55.974827][ T10] hid-generic FF00:1A10109:15108E.0002: item 0 0 0 12 parsing failed [ 55.979274][ T10] hid-generic FF00:1A10109:15108E.0002: probe with driver hid-generic failed with error -22 [ 56.025605][ T1040] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.155669][ T1040] usb 8-1: device descriptor read/64, error -71 [ 56.425640][ T1040] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.549416][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 56.549427][ T42] audit: type=1400 audit(1787406806.504:355): avc: denied { append } for pid=6255 comm="syz.2.112" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.558706][ T42] audit: type=1400 audit(1787406806.504:356): avc: denied { map } for pid=6255 comm="syz.2.112" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.558760][ T1040] usb 8-1: device descriptor read/64, error -71 [ 56.564259][ T6256] cramfs: checking physical address 0x000000002b860000 for linear cramfs image [ 56.564369][ T6256] cramfs: wrong magic [ 56.566745][ T6256] cramfs: wrong magic [ 56.567909][ T42] audit: type=1400 audit(1787406806.504:357): avc: denied { execute } for pid=6255 comm="syz.2.112" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.610235][ T6258] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 56.612749][ T6258] __nla_validate_parse: 39 callbacks suppressed [ 56.612758][ T6258] netlink: 224 bytes leftover after parsing attributes in process `syz.2.113'. [ 56.661489][ T42] audit: type=1400 audit(1787406806.614:358): avc: denied { setopt } for pid=6257 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.687122][ T1040] usb usb8-port1: attempt power cycle [ 56.811187][ T42] audit: type=1400 audit(1787406806.764:359): avc: denied { connect } for pid=6264 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.819711][ T42] audit: type=1400 audit(1787406806.764:360): avc: denied { name_connect } for pid=6264 comm="syz.2.115" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.824243][ T6265] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 56.827969][ T42] audit: type=1400 audit(1787406806.764:361): avc: denied { mount } for pid=6264 comm="syz.2.115" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.840184][ T6265] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 56.844389][ T6265] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 56.849461][ T6265] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 56.912922][ T42] audit: type=1400 audit(1787406806.864:362): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.943602][ T42] audit: type=1400 audit(1787406806.894:363): avc: denied { create } for pid=6270 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.951268][ T42] audit: type=1400 audit(1787406806.894:364): avc: denied { bind } for pid=6270 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.975139][ T6273] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 56.995669][ T6273] veth3: entered allmulticast mode [ 57.032906][ T6276] configfs: Unknown parameter 'echo_interval' [ 57.033307][ T6277] configfs: Unknown parameter 'echo_interval' [ 57.035497][ T1040] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.059900][ T1040] usb 8-1: device descriptor read/8, error -71 [ 57.167714][ T5880] usb 5-1: USB disconnect, device number 3 [ 57.181560][ T5880] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 57.185054][ T5880] spcp8x5 5-1:1.0: device disconnected [ 57.283475][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 57.289008][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 57.294645][ T6305] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 57.297571][ T1040] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 57.319074][ T6305] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 57.326058][ T1040] usb 8-1: device descriptor read/8, error -71 [ 57.445990][ T1040] usb usb8-port1: unable to enumerate USB device [ 57.527355][ T6319] nvme_fabrics: missing parameter 'transport=%s' [ 57.530445][ T6319] nvme_fabrics: missing parameter 'nqn=%s' [ 57.590466][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 57.661886][ T6332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6332 comm=syz.1.134 [ 58.015565][ T1040] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.075288][ T6342] ima: policy update failed [ 58.159007][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 58.163002][ T6345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6345 comm=syz.2.138 [ 58.175643][ T1040] usb 5-1: Using ep0 maxpacket: 32 [ 58.179948][ T1040] usb 5-1: New USB device found, idVendor=0403, idProduct=fc0e, bcdDevice=d1.7e [ 58.189258][ T1040] usb 5-1: config 7 has an invalid interface number: 103 but max is 0 [ 58.197221][ T1040] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 58.200853][ T1040] usb 5-1: config 7 has no interface number 0 [ 58.203457][ T1040] usb 5-1: config 7 interface 103 altsetting 3 endpoint 0xF has invalid maxpacket 1088, setting to 1024 [ 58.208268][ T1040] usb 5-1: config 7 interface 103 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 8 [ 58.212332][ T1040] usb 5-1: config 7 interface 103 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.216862][ T1040] usb 5-1: config 7 interface 103 altsetting 3 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 58.221626][ T1040] usb 5-1: config 7 interface 103 altsetting 3 has a duplicate endpoint with address 0x8A, skipping [ 58.221648][ T1040] usb 5-1: config 7 interface 103 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 58.221668][ T1040] usb 5-1: config 7 interface 103 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 58.221686][ T1040] usb 5-1: config 7 interface 103 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 58.221708][ T1040] usb 5-1: config 7 interface 103 has no altsetting 0 [ 58.225967][ T1040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.251576][ T1040] usb 5-1: Product: syz [ 58.253276][ T1040] usb 5-1: Manufacturer: syz [ 58.255264][ T1040] usb 5-1: SerialNumber: syz [ 58.260849][ T6338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.263458][ T6338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.473998][ T1040] ftdi_sio 5-1:7.103: FTDI USB Serial Device converter detected [ 58.477419][ T1040] ftdi_sio ttyUSB0: unknown device type: 0xd17e [ 58.482743][ T1040] usb 5-1: USB disconnect, device number 4 [ 58.489211][ T1040] ftdi_sio 5-1:7.103: device disconnected [ 58.687673][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 58.708226][ T1040] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 58.976583][ T34] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 59.107640][ T6372] bridge_slave_0: left allmulticast mode [ 59.109949][ T6372] bridge_slave_0: left promiscuous mode [ 59.112461][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.121043][ T6372] bridge_slave_1: left allmulticast mode [ 59.123086][ T6372] bridge_slave_1: left promiscuous mode [ 59.125608][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.143350][ T6372] bond0: (slave bond_slave_0): Releasing backup interface [ 59.150666][ T6372] bond0: (slave bond_slave_1): Releasing backup interface [ 59.158869][ T6372] team0: Port device team_slave_0 removed [ 59.161403][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.163791][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.174936][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.179560][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.182924][ T6372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.189907][ T6377] team0: Mode changed to "random" [ 59.204235][ T6372] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 59.206473][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.211260][ T6372] vhci_hcd vhci_hcd.0: Device attached [ 59.217178][ T6372] vhci_hcd vhci_hcd.0: port 0 already used [ 59.221361][ T6372] vlan0: entered promiscuous mode [ 59.230886][ T6372] team0: Port device vlan0 added [ 59.236429][ T6372] tipc: Started in network mode [ 59.238108][ T6372] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 59.241043][ T6372] tipc: Enabled bearer , priority 0 [ 59.246122][ T6379] vhci_hcd: connection closed [ 59.247383][ T5775] vhci_hcd vhci_hcd.3: stop threads [ 59.251913][ T5775] vhci_hcd vhci_hcd.3: release socket [ 59.254181][ T5775] vhci_hcd vhci_hcd.3: disconnect device [ 59.486227][ T34] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 59.516085][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.685600][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 59.688761][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 59.695806][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.699985][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.700249][ T6404] ======================================================= [ 59.700249][ T6404] WARNING: The mand mount option has been deprecated and [ 59.700249][ T6404] and is ignored by this kernel. Remove the mand [ 59.700249][ T6404] option from the mount to silence this warning. [ 59.700249][ T6404] ======================================================= [ 59.703911][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.714156][ T6404] overlayfs: failed to resolve './file1/file0': -2 [ 59.721716][ T6353] ceph: No mds server is up or the cluster is laggy [ 59.724964][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.732756][ T10] usb 5-1: config 0 descriptor?? [ 59.820382][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 60.148001][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 60.150311][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 60.152492][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 60.154801][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 60.157335][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 60.166686][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 60.168540][ T6436] lo: Caught tx_queue_len zero misconfig [ 60.236340][ T6440] syzkaller0: entered promiscuous mode [ 60.241503][ T6440] syzkaller0: entered allmulticast mode [ 60.263977][ T10] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 60.272265][ T10] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 60.292694][ T6451] nvmet: adding nsid 1 to subsystem subsys1 [ 60.342289][ T6384] netlink: 504 bytes leftover after parsing attributes in process `syz.0.148'. [ 60.352449][ T10] usb 5-1: USB disconnect, device number 5 [ 60.357136][ T41] tipc: Node number set to 11578026 [ 60.370563][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 60.384667][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.396534][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.405145][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 60.433302][ T6454] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.459941][ T6454] socket: no more sockets [ 60.465728][ T6454] socket: no more sockets [ 60.476117][ T6455] socket: no more sockets [ 60.485038][ T6454] socket: no more sockets [ 60.492257][ T6454] socket: no more sockets [ 60.519667][ T6468] ocfs2: Unknown parameter 'grpqukta' [ 60.534491][ T6466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.564895][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'. [ 60.604835][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 60.614739][ T6473] xfrm1: entered promiscuous mode [ 60.620753][ T6473] xfrm1: entered allmulticast mode [ 60.724145][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.736165][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.090387][ T6503] virtio-fs: tag not found [ 61.194981][ T6536] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 61.500088][ T6572] hfsplus: unable to find HFS+ superblock [ 61.566535][ T6576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6576 comm=syz.3.203 [ 61.575340][ T42] kauditd_printk_skb: 97 callbacks suppressed [ 61.575354][ T42] audit: type=1400 audit(1787406811.524:462): avc: denied { create } for pid=6581 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.586710][ T42] audit: type=1400 audit(1787406811.534:463): avc: denied { setopt } for pid=6581 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.595016][ T42] audit: type=1400 audit(1787406811.534:464): avc: denied { write } for pid=6581 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.881577][ T6589] __nla_validate_parse: 7 callbacks suppressed [ 61.881598][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 61.947957][ T6600] netlink: 352 bytes leftover after parsing attributes in process `syz.0.209'. [ 62.114817][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 62.118938][ T6610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.154764][ T42] audit: type=1400 audit(1787406812.104:465): avc: denied { create } for pid=6614 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.163144][ T42] audit: type=1400 audit(1787406812.104:466): avc: denied { write } for pid=6614 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.215614][ T6620] binder: 6619:6620 ioctl c0306201 200000000080 returned -14 [ 62.215936][ T42] audit: type=1400 audit(1787406812.164:467): avc: denied { write } for pid=6619 comm="syz.0.216" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.219084][ T6620] binder: 6619:6620 ioctl c0306201 2000000003c0 returned -14 [ 62.230655][ T42] audit: type=1400 audit(1787406812.164:468): avc: denied { set_context_mgr } for pid=6619 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.230683][ T6620] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.236702][ T42] audit: type=1400 audit(1787406812.174:469): avc: denied { map } for pid=6619 comm="syz.0.216" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.246460][ T42] audit: type=1400 audit(1787406812.184:470): avc: denied { call } for pid=6619 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.253261][ T42] audit: type=1400 audit(1787406812.184:471): avc: denied { transfer } for pid=6619 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.260443][ T6627] tmpfs: Unknown parameter 'grpquota' [ 62.301972][ T6640] nfs: Deprecated parameter 'nointr' [ 62.399581][ T6644] nfs: Deprecated parameter 'nointr' [ 62.483965][ T6651] kvm: kvm [6650]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000004) = 0x3 [ 62.495838][ T1040] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 62.511929][ T6662] support for cryptoloop has been removed. Use dm-crypt instead. [ 62.637567][ T6664] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 62.646967][ T1040] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.652220][ T1040] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 62.655554][ T1040] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.659010][ T1040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.663325][ T1040] usb 6-1: config 0 descriptor?? [ 62.734383][ T6669] cgroup: Unknown subsys name 'cpuset' [ 62.751932][ T6672] tipc: MTU too low for tipc bearer [ 62.755888][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.783167][ T6682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21038 sclass=netlink_route_socket pid=6682 comm=syz.3.231 [ 62.808428][ T6684] netlink: 620 bytes leftover after parsing attributes in process `syz.0.232'. [ 62.811335][ T6684] netlink: 124 bytes leftover after parsing attributes in process `syz.0.232'. [ 62.849339][ T6689] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 62.852126][ T6689] SELinux: failed to load policy [ 62.852566][ T6692] libceph: Failed to parse secret: -22 [ 62.889683][ T6694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1543 sclass=netlink_tcpdiag_socket pid=6694 comm=syz.0.235 [ 62.909394][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 62.911813][ T41] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 62.921051][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.929583][ T41] usb 7-1: config 0 descriptor?? [ 62.941933][ T41] as10x_usb: device has been detected [ 62.944491][ T41] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 62.966605][ T41] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 62.999863][ T41] as10x_usb: error during firmware upload part1 [ 63.002008][ T41] Registered device nBox DVB-T Dongle [ 63.135848][ T41] usb 7-1: USB disconnect, device number 3 [ 63.148486][ T6710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.241'. [ 63.359098][ T41] Unregistered device nBox DVB-T Dongle [ 63.362038][ T41] as10x_usb: device has been disconnected [ 63.410551][ T6726] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 63.572294][ T6735] ªªªªªª: renamed from vlan0 (while UP) [ 63.580345][ T6734] tipc: Started in network mode [ 63.581843][ T6734] tipc: Node identity 1000001, cluster identity 4369 [ 63.583864][ T6734] tipc: Node number set to 16777217 [ 63.587427][ T6734] tipc: Cannot configure node identity twice [ 63.591651][ T6734] tipc: New replicast peer: 127.0.0.1 [ 63.595266][ T6734] tipc: Enabled bearer , priority 10 [ 63.668564][ C2] ata1: illegal qc_active transition (00000000->00020000) [ 63.708205][ T6740] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 63.913057][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 64.000796][ T1126] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 64.010887][ T1126] ata1.00: configured for UDMA/100 [ 64.013066][ T6753] evm: overlay not supported [ 64.156617][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 64.247744][ T6753] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 64.319991][ T6768] x_tables: duplicate underflow at hook 1 [ 64.321921][ T6767] netlink: Conntrack attr has 8 unknown bytes [ 64.325097][ T6767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.386246][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 64.444164][ T6779] comedi comedi2: dac02: I/O base address or length out of range [ 64.447767][ T6779] netlink: 5 bytes leftover after parsing attributes in process `syz.3.262'. [ 64.486470][ T6779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.496201][ T41] e1000 0000:00:06.0 eth0: Reset adapter [ 64.533279][ T6783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 64.740584][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 65.270278][ T10] usb 6-1: USB disconnect, device number 7 [ 66.676798][ T2322] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 69.262661][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 69.262677][ T42] audit: type=1400 audit(1787406819.214:523): avc: denied { write } for pid=6814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.315659][ T42] audit: type=1400 audit(1787406819.274:524): avc: denied { write } for pid=6817 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.240911][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.110788][ T42] audit: type=1400 audit(1787406822.064:525): avc: denied { write } for pid=6821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.153283][ T42] audit: type=1400 audit(1787406822.104:526): avc: denied { write } for pid=6824 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.701221][ T42] audit: type=1400 audit(1787406826.654:527): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.752103][ T42] audit: type=1400 audit(1787406826.704:528): avc: denied { write } for pid=6832 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.698577][ T6845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.702310][ T6845] overlayfs: missing 'lowerdir' [ 77.745897][ T6849] openvswitch: netlink: Multiple metadata blocks provided [ 77.794141][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 77.798745][ T42] audit: type=1400 audit(1787406827.754:529): avc: denied { read } for pid=6850 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.927665][ T6861] xt_CT: No such helper "netbios-ns" [ 78.549144][ T6874] batadv0: Caught tx_queue_len zero misconfig [ 78.552690][ T6875] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 78.583002][ T42] audit: type=1400 audit(1787406828.534:530): avc: denied { mount } for pid=6878 comm="syz.2.279" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.621668][ T42] audit: type=1400 audit(1787406828.574:531): avc: denied { bind } for pid=6880 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.624495][ T6881] program syz.3.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.699418][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 78.855325][ T42] audit: type=1400 audit(1787406828.804:532): avc: denied { execute } for pid=6892 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.866904][ T42] audit: type=1400 audit(1787406828.814:533): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.873604][ T42] audit: type=1400 audit(1787406828.814:534): avc: denied { execute_no_trans } for pid=6892 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.898462][ T42] audit: type=1400 audit(1787406828.854:535): avc: denied { watch watch_reads } for pid=6893 comm="syz.2.282" path="/94" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.952970][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.959271][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.960068][ T42] audit: type=1400 audit(1787406828.914:536): avc: denied { ioctl } for pid=6897 comm="syz.2.283" path="socket:[14985]" dev="sockfs" ino=14985 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.962625][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.973383][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.977290][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.028418][ T6906] netlink: 168 bytes leftover after parsing attributes in process `syz.1.285'. [ 79.212223][ T5803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.226901][ T6937] jffs2: notice: (6937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.343916][ T5803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.406527][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.409390][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.412205][ T6895] bridge_slave_0: entered allmulticast mode [ 79.415324][ T6895] bridge_slave_0: entered promiscuous mode [ 79.419848][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.422791][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.425654][ T6895] bridge_slave_1: entered allmulticast mode [ 79.428558][ T6895] bridge_slave_1: entered promiscuous mode [ 79.457985][ T5803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.490899][ T6895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.494338][ T6953] bridge_slave_0: entered promiscuous mode [ 79.496900][ T6953] netlink: 164 bytes leftover after parsing attributes in process `syz.1.295'. [ 79.498145][ T6895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.514176][ T6953] netlink: 64 bytes leftover after parsing attributes in process `syz.1.295'. [ 79.522849][ T6953] xt_hashlimit: size too large, truncated to 1048576 [ 79.529346][ T6895] team0: Port device team_slave_0 added [ 79.532308][ T6895] team0: Port device team_slave_1 added [ 79.550648][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.555095][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.564007][ T6895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.570647][ T6895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.573299][ T6895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.581561][ T6895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.604223][ T6895] hsr_slave_0: entered promiscuous mode [ 79.606454][ T6895] hsr_slave_1: entered promiscuous mode [ 79.608504][ T6895] debugfs: 'hsr0' already exists in 'hsr' [ 79.610258][ T6895] Cannot create hsr debugfs directory [ 79.644266][ T5803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.676331][ T6965] netlink: 'syz.2.299': attribute type 2 has an invalid length. [ 79.679497][ T6965] netlink: 'syz.2.299': attribute type 2 has an invalid length. [ 79.736928][ T6969] syzkaller1: entered allmulticast mode [ 79.742918][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 79.856840][ T5803] bridge_slave_1: left allmulticast mode [ 79.859911][ T5803] bridge_slave_1: left promiscuous mode [ 79.863251][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.873762][ T5803] bridge_slave_0: left allmulticast mode [ 79.877252][ T5803] bridge_slave_0: left promiscuous mode [ 79.881541][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.935657][ T5880] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.977795][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.005391][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.013677][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.019732][ T5803] bond0 (unregistering): Released all slaves [ 80.045558][ T6895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.049329][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.052186][ T6895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.055870][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.061982][ T6895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.066584][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.069259][ T6895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.072917][ T6895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.095735][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 80.099798][ T5880] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.111911][ T6895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.113118][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.117395][ T5880] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.120487][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.126582][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.127396][ T6895] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.130920][ T10] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.137877][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.140080][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.144398][ T10] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.147131][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.148071][ T5880] usb 6-1: config 0 descriptor?? [ 80.153164][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.153807][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.175101][ T10] usb 7-1: Product: syz [ 80.176778][ T10] usb 7-1: Manufacturer: syz [ 80.178221][ T10] usb 7-1: SerialNumber: syz [ 80.204256][ T10] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.213191][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.234880][ T10] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 80.266275][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 80.301310][ T6995] kvm: kvm [6994]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 80.304919][ T6995] kvm: kvm [6994]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 80.442623][ T5803] hsr_slave_0: left promiscuous mode [ 80.445626][ T5803] hsr_slave_1: left promiscuous mode [ 80.449902][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.452931][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.458078][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.461110][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.471171][ T5803] veth1_macvtap: left promiscuous mode [ 80.473000][ T5803] veth0_macvtap: left promiscuous mode [ 80.474685][ T5803] veth1_vlan: left promiscuous mode [ 80.478481][ T5803] veth0_vlan: left promiscuous mode [ 80.522664][ T7017] sctp: [Deprecated]: syz.3.305 (pid 7017) Use of int in max_burst socket option. [ 80.522664][ T7017] Use struct sctp_assoc_value instead [ 80.606788][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 80.614966][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 80.683519][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 80.727133][ T6895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.870064][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 80.896722][ T6895] veth0_vlan: entered promiscuous mode [ 80.902325][ T6895] veth1_vlan: entered promiscuous mode [ 80.919106][ T6895] veth0_macvtap: entered promiscuous mode [ 80.925233][ T6895] veth1_macvtap: entered promiscuous mode [ 80.942023][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.952573][ T6895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.017391][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.022597][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.028497][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 81.048894][ T6560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.052267][ T6560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.075137][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.078001][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.078777][ T5728] Bluetooth: hci4: command tx timeout [ 81.085975][ T6998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089463][ T6998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.145673][ T7047] syz.3.308 (7047) used greatest stack depth: 19304 bytes left [ 81.242074][ T7066] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 81.378055][ T7071] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 81.381627][ T7071] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.390168][ T7071] CIFS mount error: No usable UNC path provided in device string! [ 81.390168][ T7071] [ 81.393383][ T7071] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.399340][ T7070] binder: 7069:7070 ioctl c018620c 200000000040 returned -1 [ 81.580893][ T7079] tmpfs: Bad value for 'mpol' [ 81.901969][ T7097] xt_SECMARK: invalid mode: 2 [ 82.116360][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 82.116375][ T42] audit: type=1400 audit(1787406832.074:562): avc: denied { write } for pid=7102 comm="syz.3.323" name="usb_gadget" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.127240][ T42] audit: type=1400 audit(1787406832.074:563): avc: denied { create } for pid=7102 comm="syz.3.323" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 82.130582][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 82.141338][ T7105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7105 comm=syz.4.322 [ 82.148095][ T7105] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 82.152668][ T42] audit: type=1400 audit(1787406832.104:564): avc: denied { relabelto } for pid=7104 comm="syz.4.322" name="mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 82.160343][ T7105] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 82.160343][ T7105] [ 82.164509][ T42] audit: type=1400 audit(1787406832.104:565): avc: denied { associate } for pid=7104 comm="syz.4.322" name="mtdblock0" dev="devtmpfs" ino=716 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_state_t:s0" [ 82.179252][ T42] audit: type=1400 audit(1787406832.104:566): avc: denied { mounton } for pid=7104 comm="syz.4.322" path="/3/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.204803][ T42] audit: type=1400 audit(1787406832.154:567): avc: denied { unmount } for pid=6895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.234464][ T7111] ªªªªªª: renamed from vlan0 (while UP) [ 82.405548][ T57] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 82.533835][ T42] audit: type=1400 audit(1787406832.484:568): avc: denied { create } for pid=6975 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.535629][ T57] usb 8-1: device descriptor read/64, error -71 [ 82.542685][ T42] audit: type=1400 audit(1787406832.494:569): avc: denied { connect } for pid=6975 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.705940][ T9] usb 6-1: USB disconnect, device number 8 [ 82.775632][ T57] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 82.905739][ T57] usb 8-1: device descriptor read/64, error -71 [ 82.922709][ T7128] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7128 comm=syz.1.327 [ 83.004029][ T7132] xfs: Unknown parameter 'discard.list' [ 83.004163][ T42] audit: type=1400 audit(1787406832.954:570): avc: denied { mounton } for pid=7131 comm="syz.1.328" path="/48/bus" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 83.017059][ T57] usb usb8-port1: attempt power cycle [ 83.119218][ T7135] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 83.156531][ T5728] Bluetooth: hci4: command tx timeout [ 83.278884][ T42] audit: type=1400 audit(1787406833.234:571): avc: denied { ioctl } for pid=7140 comm="syz.4.331" path="socket:[19628]" dev="sockfs" ino=19628 ioctlcmd=0x894a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.355564][ T57] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 83.376024][ T57] usb 8-1: device descriptor read/8, error -71 [ 83.408577][ T7142] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 83.557112][ T7146] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 83.588882][ T7159] loop5: detected capacity change from 0 to 7 [ 83.601568][ T7159] Dev loop5: unable to read RDB block 7 [ 83.604477][ T7159] loop5: unable to read partition table [ 83.610871][ T7159] loop5: partition table beyond EOD, truncated [ 83.615557][ T57] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 83.615597][ T7159] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.636373][ T57] usb 8-1: device descriptor read/8, error -71 [ 83.644196][ T24] usb 7-1: USB disconnect, device number 4 [ 83.657284][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 83.662660][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 83.666768][ T24] ti_usb_3410_5052 7-1:2.0: device disconnected [ 83.673193][ T7159] Dev loop5: unable to read RDB block 7 [ 83.675986][ T7159] loop5: unable to read partition table [ 83.680365][ T7159] loop5: partition table beyond EOD, truncated [ 83.683246][ T7159] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.747330][ T57] usb usb8-port1: unable to enumerate USB device [ 83.747393][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 83.759083][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 83.873971][ T7170] netlink: 128 bytes leftover after parsing attributes in process `syz.2.341'. [ 83.888731][ T7174] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 83.893049][ T7174] overlayfs: missing 'lowerdir' [ 83.950571][ T7181] bridge_slave_0: invalid flags given to default FDB implementation [ 84.146419][ T7189] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 84.252485][ T7196] sctp: [Deprecated]: syz.2.351 (pid 7196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.252485][ T7196] Use struct sctp_sack_info instead [ 84.296563][ T7195] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 84.676603][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.835507][ T7168] comedi comedi1: reset error (fatal) [ 84.835554][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 84.839603][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 84.844243][ T29] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 84.846812][ T29] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 84.849416][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 84.852120][ T29] usb 7-1: config 1 has no interface number 0 [ 84.854042][ T29] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.857583][ T29] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 84.861521][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.870086][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 85.137990][ T7210] gfs2: error -5 reading superblock [ 85.181940][ T7213] tmpfs: Bad value for 'mpol' [ 85.184057][ T7213] netlink: 'syz.3.357': attribute type 5 has an invalid length. [ 85.190199][ T7213] ip6erspan0: entered promiscuous mode [ 85.235701][ T5728] Bluetooth: hci4: command tx timeout [ 85.379329][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.362'. [ 85.419042][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 85.423313][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 85.502464][ T7236] netlink: 276 bytes leftover after parsing attributes in process `syz.1.364'. [ 85.682305][ T7258] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 85.691713][ T7258] cramfs: wrong magic [ 85.746530][ T7258] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 85.789980][ T7262] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 85.794731][ T29] usb 7-1: USB disconnect, device number 5 [ 85.798868][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 86.049554][ T7279] afs: Unknown parameter 'dyn4' [ 86.563732][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 86.724947][ T7306] pim6reg1: entered promiscuous mode [ 86.729156][ T7306] pim6reg1: entered allmulticast mode [ 86.814613][ T7318] binder: BINDER_SET_CONTEXT_MGR already set [ 86.817493][ T7318] binder: 7315:7318 ioctl 4018620d 0 returned -16 [ 86.873280][ T7319] binder: 7315:7319 ioctl c0306201 200000000640 returned -22 [ 86.874973][ T7318] binder: 7315:7318 ioctl c0306201 200000000640 returned -22 [ 86.902946][ T7323] ptrace attach of "/syz-executor exec"[7324] was attempted by "/syz-executor exec"[7323] [ 86.974024][ T7330] netlink: 'syz.1.394': attribute type 11 has an invalid length. [ 87.022363][ T7330] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 87.024634][ T7330] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 87.105168][ T7343] binder: 7341:7343 ioctl c0306201 200000000080 returned -14 [ 87.110950][ T7343] binder: 7341:7343 ioctl 890b 200000000100 returned -22 [ 87.114601][ T7343] binder: 7341:7343 ioctl 5001 0 returned -22 [ 87.117369][ T7343] binder: 7341:7343 ioctl 80306e85 2000000004c0 returned -22 [ 87.120266][ T7343] binder: 7341:7343 ioctl c0306201 2000000003c0 returned -14 [ 87.127924][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 87.127936][ T42] audit: type=1400 audit(1787406837.084:599): avc: denied { bind } for pid=7344 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.128992][ T5728] Bluetooth: min 9 > max 1 [ 87.132081][ T42] audit: type=1400 audit(1787406837.084:600): avc: denied { connect } for pid=7344 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.210522][ T7354] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 87.213377][ T7354] ALSA: mixer_oss: invalid index 137438 [ 87.302475][ T42] audit: type=1400 audit(1787406837.254:601): avc: denied { mount } for pid=7360 comm="syz.1.404" name="/" dev="rpc_pipefs" ino=22966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 87.325707][ T5728] Bluetooth: hci4: command tx timeout [ 87.377984][ T42] audit: type=1400 audit(1787406837.334:602): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 87.405584][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 87.556108][ T10] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 87.557218][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 87.559723][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.565839][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.670214][ T42] audit: type=1400 audit(1787406837.624:603): avc: denied { create } for pid=7378 comm="syz.3.408" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.676892][ T42] audit: type=1400 audit(1787406837.624:604): avc: denied { mounton } for pid=7378 comm="syz.3.408" path="/125/file0" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.687911][ T42] audit: type=1400 audit(1787406837.634:605): avc: denied { ioctl } for pid=7378 comm="syz.3.408" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.045565][ T5880] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 88.205940][ T5880] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.210244][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 88.213432][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.216784][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.220393][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.223817][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.227985][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 88.230330][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.235588][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.239238][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.242654][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.246855][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 88.249188][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.252426][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.256678][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.260019][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.265743][ T5880] usb 8-1: string descriptor 0 read error: -22 [ 88.267703][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.155677][ T5728] Bluetooth: hci1: command tx timeout [ 89.281483][ T7410] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.313687][ T7413] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.517686][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 90.178071][ T41] usb 7-1: USB disconnect, device number 6 [ 90.444528][ T7433] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 90.452939][ T7435] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 90.481492][ T7440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.535664][ T41] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.597160][ T7447] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 90.695519][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 90.698679][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.701181][ T41] usb 7-1: New USB device found, idVendor=17ef, idProduct=3062, bcdDevice=7d.7d [ 90.704834][ T41] usb 7-1: config 8 has an invalid interface number: 142 but max is 0 [ 90.707436][ T41] usb 7-1: config 8 has no interface number 0 [ 90.709324][ T41] usb 7-1: config 8 interface 142 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 90.712732][ T41] usb 7-1: config 8 interface 142 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.717006][ T41] usb 7-1: config 8 interface 142 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.720606][ T41] usb 7-1: config 8 interface 142 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 90.725321][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.727846][ T41] usb 7-1: Product: syz [ 90.729147][ T41] usb 7-1: Manufacturer: syz [ 90.730725][ T41] usb 7-1: SerialNumber: syz [ 90.757322][ T34] usb 8-1: USB disconnect, device number 11 [ 90.801985][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.812876][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.3.427'. [ 90.902310][ T42] audit: type=1400 audit(1787406840.854:606): avc: denied { search } for pid=7455 comm="syz.3.428" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.910119][ T42] audit: type=1400 audit(1787406840.854:607): avc: denied { search } for pid=7455 comm="syz.3.428" name="events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.917186][ T42] audit: type=1400 audit(1787406840.854:608): avc: denied { search } for pid=7455 comm="syz.3.428" name="sched" dev="tracefs" ino=23237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.261416][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.4.431'. [ 91.279320][ T5728] Bluetooth: hci4: Malformed Event: 0x13 [ 91.609279][ T7493] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 91.695592][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 91.778978][ T7523] loop5: detected capacity change from 0 to 7 [ 91.781864][ T7523] Dev loop5: unable to read RDB block 7 [ 91.783678][ T7523] loop5: AHDI p1 p3 p4 [ 91.785045][ T7523] loop5: partition table partially beyond EOD, truncated [ 91.787751][ T7523] loop5: p1 size 100663296 extends beyond EOD, truncated [ 91.793235][ T7523] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 91.828480][ T7426] udevd[7426]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 91.828529][ T6902] udevd[6902]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 91.833444][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 91.845927][ T29] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 91.852057][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 91.855189][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.860425][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.864972][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.940674][ T7532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.943722][ T7533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.160438][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 92.160450][ T42] audit: type=1400 audit(1787406842.114:620): avc: denied { getopt } for pid=7548 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.169898][ T42] audit: type=1400 audit(1787406842.114:621): avc: denied { write } for pid=7548 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.176258][ T42] audit: type=1400 audit(1787406842.114:622): avc: denied { ioctl } for pid=7548 comm="syz.1.450" path="socket:[23735]" dev="sockfs" ino=23735 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.203059][ T42] audit: type=1400 audit(1787406842.154:623): avc: denied { write } for pid=7550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.250777][ T42] audit: type=1400 audit(1787406842.204:624): avc: denied { write } for pid=7553 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.441719][ T7571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.454'. [ 92.448833][ T7571] vlan0: entered promiscuous mode [ 92.450862][ T7571] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 92.529027][ T7575] syz_tun: entered allmulticast mode [ 92.534029][ T7575] pim6reg: entered allmulticast mode [ 92.545529][ T7575] syz_tun (unregistering): left allmulticast mode [ 92.590053][ T42] audit: type=1400 audit(1787406842.544:625): avc: denied { map } for pid=7574 comm="syz.1.456" path="/107" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.624491][ T42] audit: type=1400 audit(1787406842.574:626): avc: denied { write } for pid=7577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.671417][ T42] audit: type=1400 audit(1787406842.624:627): avc: denied { write } for pid=7580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.882611][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 93.117636][ T42] audit: type=1400 audit(1787406843.074:628): avc: denied { append } for pid=7617 comm="syz.3.466" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.203377][ T10] usb 7-1: USB disconnect, device number 7 [ 93.221794][ T42] audit: type=1400 audit(1787406843.174:629): avc: denied { bind } for pid=7629 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.302494][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 93.314781][ T7642] bridge1: entered promiscuous mode [ 93.319495][ T7642] bridge1: entered allmulticast mode [ 93.325663][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 93.446223][ T7653] ipvlan0: entered promiscuous mode [ 93.448371][ T7653] ipvlan0: entered allmulticast mode [ 93.450356][ T7653] veth0_vlan: entered allmulticast mode [ 93.476207][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 93.481083][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.488160][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.495769][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.498499][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.499747][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 93.505075][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.509044][ T7658] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.515220][ T7658] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.515524][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 93.520796][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.525335][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.529061][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.532416][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.535822][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.538997][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.542154][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.545510][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.548726][ T7658] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.585065][ T6552] IPVS: starting estimator thread 0... [ 93.618746][ T7669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7669 comm=syz.2.477 [ 93.655022][ T7671] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 93.658487][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 93.658505][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.658512][ T7671] Call Trace: [ 93.658516][ T7671] [ 93.658521][ T7671] dump_stack_lvl+0x100/0x190 [ 93.658552][ T7671] sysfs_warn_dup.cold+0x1c/0x28 [ 93.658570][ T7671] sysfs_do_create_link_sd+0x113/0x140 [ 93.658592][ T7671] sysfs_create_link+0x61/0xc0 [ 93.658603][ T7671] device_add+0x675/0x1970 [ 93.658620][ T7671] ? __pfx_device_add+0x10/0x10 [ 93.658633][ T7671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.658650][ T7671] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 93.658671][ T7671] wiphy_register+0x2151/0x3110 [ 93.658691][ T7671] ? __pfx_wiphy_register+0x10/0x10 [ 93.658707][ T7671] ? __asan_memset+0x23/0x50 [ 93.658721][ T7671] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 93.658741][ T7671] ieee80211_register_hw+0x3053/0x4580 [ 93.658762][ T7671] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 93.658776][ T7671] ? __pfx___debug_object_init+0x10/0x10 [ 93.658790][ T7671] ? find_held_lock+0x2b/0x80 [ 93.658803][ T7671] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.658820][ T7671] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 93.658831][ T7671] ? __hrtimer_setup+0x208/0x330 [ 93.658843][ T7671] mac80211_hwsim_new_radio+0x2b08/0x6510 [ 93.658866][ T7671] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 93.658883][ T7671] ? __asan_memcpy+0x3c/0x60 [ 93.658905][ T7671] hwsim_new_radio_nl+0xc6b/0x13f0 [ 93.658927][ T7671] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 93.658957][ T7671] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 93.658977][ T7671] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 93.659008][ T7671] genl_family_rcv_msg_doit+0x214/0x300 [ 93.659023][ T7671] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.659039][ T7671] ? bpf_lsm_capable+0x9/0x10 [ 93.659052][ T7671] ? security_capable+0x80/0x260 [ 93.659067][ T7671] ? ns_capable+0xd2/0xf0 [ 93.659084][ T7671] genl_rcv_msg+0x560/0x800 [ 93.659097][ T7671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.659108][ T7671] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 93.659126][ T7671] netlink_rcv_skb+0x159/0x420 [ 93.659143][ T7671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.659154][ T7671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.659175][ T7671] ? netlink_deliver_tap+0x1ae/0xcc0 [ 93.659196][ T7671] genl_rcv+0x28/0x40 [ 93.659219][ T7671] netlink_unicast+0x585/0x850 [ 93.659276][ T7671] ? __pfx_netlink_unicast+0x10/0x10 [ 93.659309][ T7671] netlink_sendmsg+0x8b0/0xda0 [ 93.659336][ T7671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.659365][ T7671] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.659396][ T7671] ____sys_sendmsg+0xa4d/0xbe0 [ 93.659418][ T7671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.659448][ T7671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.659483][ T7671] ___sys_sendmsg+0x190/0x1e0 [ 93.659510][ T7671] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.659534][ T7671] ? futex_wait+0x11e/0x370 [ 93.659568][ T7671] ? find_held_lock+0x2b/0x80 [ 93.659607][ T7671] __sys_sendmsg+0x160/0x210 [ 93.659626][ T7671] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.659660][ T7671] do_syscall_64+0x123/0x790 [ 93.659692][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.659710][ T7671] RIP: 0033:0x7f8bfa59e0d9 [ 93.659728][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.659743][ T7671] RSP: 002b:00007f8bfb386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.659761][ T7671] RAX: ffffffffffffffda RBX: 00007f8bfa825fa0 RCX: 00007f8bfa59e0d9 [ 93.659773][ T7671] RDX: 00000000040400c4 RSI: 0000200000000100 RDI: 0000000000000003 [ 93.659785][ T7671] RBP: 00007f8bfa635024 R08: 0000000000000000 R09: 0000000000000000 [ 93.659798][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.659808][ T7671] R13: 00007f8bfa826038 R14: 00007f8bfa825fa0 R15: 00007ffdd56cba28 [ 93.659834][ T7671] [ 93.685578][ T7667] IPVS: using max 45 ests per chain, 108000 per kthread [ 93.687016][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 93.800148][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.804303][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 93.807036][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.810048][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.813122][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.816391][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.820497][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.410825][ T5880] usb 9-1: USB disconnect, device number 2 [ 94.755612][ T5880] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.895566][ T5880] usb 9-1: device descriptor read/64, error -71 [ 94.970230][ T7685] netlink: 4340 bytes leftover after parsing attributes in process `syz.2.483'. [ 94.973725][ T7684] netlink: NAT attribute has 4 unknown bytes [ 94.975877][ T7684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.030917][ T7688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7688 comm=syz.2.484 [ 95.135556][ T5880] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 95.149334][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 95.275955][ T5880] usb 9-1: device descriptor read/64, error -71 [ 95.344093][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'. [ 95.397195][ T5880] usb usb9-port1: attempt power cycle [ 95.460729][ T7717] syzkaller0: entered promiscuous mode [ 95.463066][ T7717] syzkaller0: entered allmulticast mode [ 95.755574][ T5880] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 95.778927][ T5880] usb 9-1: device descriptor read/8, error -71 [ 96.025618][ T5880] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 96.056406][ T5880] usb 9-1: device descriptor read/8, error -71 [ 96.104412][ T57] usb 6-1: USB disconnect, device number 9 [ 96.165846][ T5880] usb usb9-port1: unable to enumerate USB device [ 96.275285][ T5880] usb 8-1: USB disconnect, device number 12 [ 96.426189][ T7727] fuse: Bad value for 'group_id' [ 96.427954][ T7727] fuse: Bad value for 'group_id' [ 96.529984][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 96.532792][ T7727] bridge_slave_0: default FDB implementation only supports local addresses [ 96.639532][ T7739] geneve2: entered promiscuous mode [ 96.641186][ T7739] geneve2: entered allmulticast mode [ 96.656286][ T6998] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.662824][ T6998] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.667606][ T6998] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.671834][ T6998] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.704815][ T7747] pim6reg1: entered promiscuous mode [ 96.706845][ T7747] pim6reg1: entered allmulticast mode [ 96.759658][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'. [ 96.838736][ T7754] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 96.915566][ T5880] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 97.066145][ T5880] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.071586][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.073999][ T5880] usb 7-1: Product: syz [ 97.075741][ T5880] usb 7-1: Manufacturer: syz [ 97.077678][ T5880] usb 7-1: SerialNumber: syz [ 97.210795][ T42] kauditd_printk_skb: 447 callbacks suppressed [ 97.210813][ T42] audit: type=1400 audit(1787406847.164:1077): avc: denied { read } for pid=7777 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.482498][ T7781] netlink: 48 bytes leftover after parsing attributes in process `syz.4.507'. [ 97.799873][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 97.803548][ T7793] bridge_slave_1: left allmulticast mode [ 97.806259][ T7793] bridge_slave_1: left promiscuous mode [ 97.808739][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.813338][ T7793] bridge_slave_0: left allmulticast mode [ 97.816199][ T7793] bridge_slave_0: left promiscuous mode [ 97.818631][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.034668][ T42] audit: type=1400 audit(1787406847.984:1078): avc: denied { setopt } for pid=7799 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.106714][ T7807] Bluetooth: MGMT ver 1.23 [ 98.124336][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 98.225044][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 98.229983][ T42] audit: type=1400 audit(1787406848.184:1079): avc: denied { setopt } for pid=7812 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.232035][ T7813] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12 sclass=netlink_xfrm_socket pid=7813 comm=syz.1.517 [ 98.277088][ T7815] xt_hashlimit: size too large, truncated to 1048576 [ 98.289338][ T42] audit: type=1400 audit(1787406848.244:1080): avc: denied { setattr } for pid=7819 comm="syz.4.519" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.301193][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.308126][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.312700][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.319322][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.323889][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.329764][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.334167][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.339486][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.344123][ T7821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.388298][ T42] audit: type=1400 audit(1787406848.344:1081): avc: denied { read } for pid=7827 comm="syz.1.521" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.395116][ T42] audit: type=1400 audit(1787406848.344:1082): avc: denied { open } for pid=7827 comm="syz.1.521" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.403124][ T42] audit: type=1400 audit(1787406848.344:1083): avc: denied { ioctl } for pid=7827 comm="syz.1.521" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3b64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 98.505791][ T42] audit: type=1400 audit(1787406848.464:1084): avc: denied { map } for pid=7825 comm="syz.4.520" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.639422][ T42] audit: type=1400 audit(1787406849.594:1085): avc: denied { set_context_mgr } for pid=7846 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.643288][ T7847] binder_alloc: 7846: binder_alloc_buf, no vma [ 99.647002][ T42] audit: type=1400 audit(1787406849.594:1086): avc: denied { map } for pid=7846 comm="syz.4.528" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.682280][ T848] usb 7-1: USB disconnect, device number 8 [ 99.996184][ T7853] hid-generic 0003:0627:0001.0001: pid 7853 passed too short report [ 100.046064][ T848] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 100.060270][ T7856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.089964][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 100.093815][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 100.195865][ T5880] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 100.216943][ T848] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.221591][ T848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.222449][ T7861] IPVS: length: 120 != 24 [ 100.225787][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.355630][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 100.358535][ T5880] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.363636][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.367663][ T5880] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.371225][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.398248][ T7867] validate_nla: 28 callbacks suppressed [ 100.398263][ T7867] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 100.408792][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.411954][ T7867] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.434294][ T7870] wg1: entered promiscuous mode [ 100.436853][ T7870] wg1: entered allmulticast mode [ 100.465970][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 100.468985][ T7872] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 100.472375][ T7872] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.476773][ T7872] Cannot find add_set index 0 as target [ 100.664733][ T7879] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.733768][ T7882] ------------[ cut here ]------------ [ 100.736629][ T7882] err == -EMSGSIZE [ 100.736641][ T7882] WARNING: net/core/rtnetlink.c:4594 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#3: syz.3.541/7882 [ 100.742928][ T7882] Modules linked in: [ 100.744947][ T7882] CPU: 3 UID: 0 PID: 7882 Comm: syz.3.541 Not tainted syzkaller #0 PREEMPT(full) [ 100.748840][ T7882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.753182][ T7882] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 100.756024][ T7882] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 e0 f4 6c f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 38 7d f0 [ 100.764192][ T7882] RSP: 0018:ffffc90000fe6da8 EFLAGS: 00010293 [ 100.767034][ T7882] RAX: 0000000000000000 RBX: 00000000ffffffa6 RCX: 0000000000000000 [ 100.770357][ T7882] RDX: ffff88805a552580 RSI: ffffffff899e0cf0 RDI: ffff88805a552580 [ 100.773691][ T7882] RBP: ffff8880275c3040 R08: 0000000000000005 R09: 0000000000000000 [ 100.777151][ T7882] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 100.780614][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802c5e8108 [ 100.783922][ T7882] FS: 00007fe49919c6c0(0000) GS:ffff8880d5ea2000(0000) knlGS:0000000000000000 [ 100.787805][ T7882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.790588][ T7882] CR2: 0000000000000000 CR3: 000000004b90d000 CR4: 0000000000352ef0 [ 100.793735][ T7882] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 100.797261][ T7882] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 100.800653][ T7882] Call Trace: [ 100.802115][ T7882] [ 100.803430][ T7882] rtnetlink_event+0x137/0x1f0 [ 100.805605][ T7882] notifier_call_chain+0x99/0x3f0 [ 100.807782][ T7882] call_netdevice_notifiers_info+0xbe/0x110 [ 100.810354][ T7882] netif_disable_lro+0x3e9/0x660 [ 100.812518][ T7882] ? __pfx_netif_disable_lro+0x10/0x10 [ 100.814895][ T7882] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.817298][ T7882] ? __local_bh_enable_ip+0xa5/0x120 [ 100.819605][ T7882] ? neigh_parms_alloc+0x45f/0x5e0 [ 100.821841][ T7882] ipv6_add_dev+0xde0/0x1520 [ 100.823921][ T7882] addrconf_notify+0x5db/0x1ba0 [ 100.826205][ T7882] ? __pfx_tls_dev_event+0x10/0x10 [ 100.828472][ T7882] ? __pfx_addrconf_notify+0x10/0x10 [ 100.830774][ T7882] ? ip6mr_device_event+0x1c4/0x230 [ 100.833085][ T7882] notifier_call_chain+0x99/0x3f0 [ 100.835181][ T7882] call_netdevice_notifiers_info+0xbe/0x110 [ 100.837785][ T7882] register_netdevice+0x1998/0x25a0 [ 100.839977][ T7882] ? __pfx_register_netdevice+0x10/0x10 [ 100.842366][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 100.844644][ T7882] macsec_newlink+0x4fb/0x1c50 [ 100.846850][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 100.849122][ T7882] ? __kasan_kmalloc+0xaa/0xb0 [ 100.851249][ T7882] ? __kvmalloc_node_noprof+0x36f/0x970 [ 100.853663][ T7882] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 100.855984][ T7882] ? validate_linkmsg+0x57c/0xba0 [ 100.857700][ T7882] ? __pfx_validate_linkmsg+0x10/0x10 [ 100.859313][ T7882] ? alloc_netdev_mqs+0x120a/0x15c0 [ 100.860929][ T7882] ? rtnl_create_link+0xa4b/0xf80 [ 100.862501][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 100.864194][ T7882] rtnl_newlink+0x1697/0x2620 [ 100.865985][ T7882] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.868154][ T7882] ? find_held_lock+0x2b/0x80 [ 100.870101][ T7882] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 100.872309][ T7882] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 100.874495][ T7882] ? find_held_lock+0x2b/0x80 [ 100.876661][ T7882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.878883][ T7882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 100.881115][ T7882] ? __pfx_rtnl_newlink+0x10/0x10 [ 100.883286][ T7882] rtnetlink_rcv_msg+0x95e/0xe90 [ 100.885354][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.887798][ T7882] ? ref_tracker_free+0x37e/0x6c0 [ 100.889932][ T7882] netlink_rcv_skb+0x159/0x420 [ 100.891981][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 100.894249][ T7882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.896563][ T7882] ? netlink_deliver_tap+0x1ae/0xcc0 [ 100.898750][ T7882] netlink_unicast+0x585/0x850 [ 100.900757][ T7882] ? __pfx_netlink_unicast+0x10/0x10 [ 100.902972][ T7882] netlink_sendmsg+0x8b0/0xda0 [ 100.904971][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.907294][ T7882] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.909575][ T7882] ____sys_sendmsg+0xa4d/0xbe0 [ 100.911604][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.913800][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.916416][ T7882] ___sys_sendmsg+0x190/0x1e0 [ 100.918475][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.920708][ T7882] ? futex_wait+0x11e/0x370 [ 100.922644][ T7882] ? find_held_lock+0x2b/0x80 [ 100.924680][ T7882] __sys_sendmsg+0x160/0x210 [ 100.926961][ T7882] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.929219][ T7882] do_syscall_64+0x123/0x790 [ 100.931321][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.933795][ T7882] RIP: 0033:0x7fe49839e0d9 [ 100.935841][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.943745][ T7882] RSP: 002b:00007fe49919c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.947387][ T7882] RAX: ffffffffffffffda RBX: 00007fe498626090 RCX: 00007fe49839e0d9 [ 100.949831][ T7882] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 100.952312][ T7882] RBP: 00007fe498435024 R08: 0000000000000000 R09: 0000000000000000 [ 100.954715][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.957231][ T7882] R13: 00007fe498626128 R14: 00007fe498626090 R15: 00007ffd1515cd68 [ 100.959665][ T7882] [ 100.960634][ T7882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.962866][ T7882] CPU: 3 UID: 0 PID: 7882 Comm: syz.3.541 Not tainted syzkaller #0 PREEMPT(full) [ 100.965598][ T7882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.968615][ T7882] Call Trace: [ 100.969659][ T7882] [ 100.970578][ T7882] dump_stack_lvl+0x100/0x190 [ 100.972059][ T7882] vpanic+0x553/0x970 [ 100.973316][ T7882] ? __pfx_vpanic+0x10/0x10 [ 100.974734][ T7882] panic+0xd1/0xe0 [ 100.975874][ T7882] ? __pfx_panic+0x10/0x10 [ 100.977197][ T7882] check_panic_on_warn.cold+0x19/0x34 [ 100.978775][ T7882] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 100.980465][ T7882] __warn.cold+0x191/0x318 [ 100.981842][ T7882] __report_bug+0x30f/0x440 [ 100.983298][ T7882] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 100.984993][ T7882] ? __pfx___report_bug+0x10/0x10 [ 100.986550][ T7882] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 100.988407][ T7882] ? trace_kmalloc+0xeb/0x110 [ 100.989864][ T7882] ? __kasan_kmalloc+0xaa/0xb0 [ 100.991369][ T7882] ? __kmalloc_node_track_caller_noprof+0x351/0x830 [ 100.993399][ T7882] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 100.995103][ T7882] report_bug+0xb3/0x220 [ 100.996439][ T7882] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 100.998131][ T7882] handle_bug+0x16a/0x2a0 [ 100.999488][ T7882] exc_invalid_op+0x17/0x50 [ 101.000895][ T7882] asm_exc_invalid_op+0x1a/0x20 [ 101.002430][ T7882] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 101.004333][ T7882] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 e0 f4 6c f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 38 7d f0 [ 101.010073][ T7882] RSP: 0018:ffffc90000fe6da8 EFLAGS: 00010293 [ 101.011927][ T7882] RAX: 0000000000000000 RBX: 00000000ffffffa6 RCX: 0000000000000000 [ 101.014349][ T7882] RDX: ffff88805a552580 RSI: ffffffff899e0cf0 RDI: ffff88805a552580 [ 101.016803][ T7882] RBP: ffff8880275c3040 R08: 0000000000000005 R09: 0000000000000000 [ 101.019225][ T7882] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 101.021658][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802c5e8108 [ 101.024124][ T7882] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 101.025827][ T7882] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 101.027554][ T7882] rtnetlink_event+0x137/0x1f0 [ 101.029030][ T7882] notifier_call_chain+0x99/0x3f0 [ 101.030578][ T7882] call_netdevice_notifiers_info+0xbe/0x110 [ 101.032406][ T7882] netif_disable_lro+0x3e9/0x660 [ 101.033932][ T7882] ? __pfx_netif_disable_lro+0x10/0x10 [ 101.035638][ T7882] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.037241][ T7882] ? __local_bh_enable_ip+0xa5/0x120 [ 101.038867][ T7882] ? neigh_parms_alloc+0x45f/0x5e0 [ 101.040458][ T7882] ipv6_add_dev+0xde0/0x1520 [ 101.041893][ T7882] addrconf_notify+0x5db/0x1ba0 [ 101.043432][ T7882] ? __pfx_tls_dev_event+0x10/0x10 [ 101.045019][ T7882] ? __pfx_addrconf_notify+0x10/0x10 [ 101.046638][ T7882] ? ip6mr_device_event+0x1c4/0x230 [ 101.048267][ T7882] notifier_call_chain+0x99/0x3f0 [ 101.049820][ T7882] call_netdevice_notifiers_info+0xbe/0x110 [ 101.051652][ T7882] register_netdevice+0x1998/0x25a0 [ 101.053282][ T7882] ? __pfx_register_netdevice+0x10/0x10 [ 101.054988][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 101.056608][ T7882] macsec_newlink+0x4fb/0x1c50 [ 101.058090][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 101.059711][ T7882] ? __kasan_kmalloc+0xaa/0xb0 [ 101.061201][ T7882] ? __kvmalloc_node_noprof+0x36f/0x970 [ 101.062934][ T7882] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 101.064531][ T7882] ? validate_linkmsg+0x57c/0xba0 [ 101.066083][ T7882] ? __pfx_validate_linkmsg+0x10/0x10 [ 101.067750][ T7882] ? alloc_netdev_mqs+0x120a/0x15c0 [ 101.069353][ T7882] ? rtnl_create_link+0xa4b/0xf80 [ 101.070898][ T7882] ? __pfx_macsec_newlink+0x10/0x10 [ 101.072537][ T7882] rtnl_newlink+0x1697/0x2620 [ 101.073992][ T7882] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.075582][ T7882] ? find_held_lock+0x2b/0x80 [ 101.077038][ T7882] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 101.078673][ T7882] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 101.080338][ T7882] ? find_held_lock+0x2b/0x80 [ 101.081787][ T7882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 101.083387][ T7882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 101.084959][ T7882] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.086507][ T7882] rtnetlink_rcv_msg+0x95e/0xe90 [ 101.088061][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.089735][ T7882] ? ref_tracker_free+0x37e/0x6c0 [ 101.091290][ T7882] netlink_rcv_skb+0x159/0x420 [ 101.092895][ T7882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.094970][ T7882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.097075][ T7882] ? netlink_deliver_tap+0x1ae/0xcc0 [ 101.098912][ T7882] netlink_unicast+0x585/0x850 [ 101.100819][ T7882] ? __pfx_netlink_unicast+0x10/0x10 [ 101.102852][ T7882] netlink_sendmsg+0x8b0/0xda0 [ 101.104659][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.106743][ T7882] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.108770][ T7882] ____sys_sendmsg+0xa4d/0xbe0 [ 101.110668][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.112630][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.114679][ T7882] ___sys_sendmsg+0x190/0x1e0 [ 101.116310][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.118356][ T7882] ? futex_wait+0x11e/0x370 [ 101.120096][ T7882] ? find_held_lock+0x2b/0x80 [ 101.121901][ T7882] __sys_sendmsg+0x160/0x210 [ 101.123772][ T7882] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.125369][ T7882] do_syscall_64+0x123/0x790 [ 101.126784][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.128620][ T7882] RIP: 0033:0x7fe49839e0d9 [ 101.129986][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.137051][ T7882] RSP: 002b:00007fe49919c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.140245][ T7882] RAX: ffffffffffffffda RBX: 00007fe498626090 RCX: 00007fe49839e0d9 [ 101.142683][ T7882] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 101.145102][ T7882] RBP: 00007fe498435024 R08: 0000000000000000 R09: 0000000000000000 [ 101.147490][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.149880][ T7882] R13: 00007fe498626128 R14: 00007fe498626090 R15: 00007ffd1515cd68 [ 101.152305][ T7882] [ 101.153968][ T7882] Kernel Offset: disabled [ 101.155356][ T7882] Rebooting in 86400 seconds..