last executing test programs: 1m46.97059306s ago: executing program 0 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='3', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x8f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xd, 0x4, 0xff, 0x7fffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x1, 0x101, 0x0, 0x0, 0x7}) mlock2(&(0x7f0000721000/0x2000)=nil, 0x2000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000040)={0xa, 0x8, "a867dc159d50dfabd78a3e1af7591b97f0758b9a8583fb00", {0x4, 0x7}, 0xffffffff}) mlock(&(0x7f0000065000/0x3000)=nil, 0x3000) creat(0x0, 0xc9028ba210c11f8b) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8000000) r7 = accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x60, 0xfe, 0x4, 0xc, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x1, 0xb, 0x1000}}) sendto$packet(r7, &(0x7f0000000240)="85cf02298c79960e534a837c036ddd52d3c5536efd16d11465af0fdb4e43d8822048ccdd0e64cc1090c41cea14553ec89e0bdc7a8a6ea0c7e07317c5dbcf7a121beab4e19151dbe1ca2c180d0fb0368cd06e6992b9544ad9c88c482c8aabe5c313e3ff7d81adcbb5dfe2e0b9704c225b652868e4f8f6d1b5944bd63b673e4925b5e4b199207dfe56d41576055883c878ff25a591eb28043dada2cbeb0c5a952596a0c2aff2ea80206f02bdda4d4836823771a72e2f126bc77a205eaecbb41c723b095f0d89fb76f2b5babe", 0xcb, 0x0, &(0x7f0000000140)={0x11, 0x1a, r8, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) accept4$alg(r4, 0x0, 0x0, 0x180000) r9 = accept4$nfc_llcp(r7, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r9) 1m46.721779274s ago: executing program 0 (id=165): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4040) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 1m46.721007817s ago: executing program 0 (id=166): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m43.568828348s ago: executing program 0 (id=191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x22180) add_key$keyring(&(0x7f0000005180), 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x4, 0x50565559, 0x5, 0x5, 0x3, @discrete={0x2, 0x3}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x292082, 0x0) preadv2(r4, &(0x7f0000002a00)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/239, 0xef}, {&(0x7f00000027c0)=""/239, 0xef}, {&(0x7f00000028c0)=""/178, 0xb2}, {&(0x7f0000002980)=""/22, 0x16}, {&(0x7f00000029c0)=""/29, 0x1d}], 0x8, 0x8, 0x1, 0xe) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="922c", 0x2}], 0x1}}], 0x1, 0x200880d8) socket(0x10, 0x2, 0x0) 1m42.830706663s ago: executing program 0 (id=196): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x9, 0x408002) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1m42.830397544s ago: executing program 0 (id=197): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r1, 0xc008644e, &(0x7f0000000100)={0x8}) 1m26.824902724s ago: executing program 32 (id=197): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r1, 0xc008644e, &(0x7f0000000100)={0x8}) 1m7.61850039s ago: executing program 4 (id=460): r0 = epoll_create(0xa) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e05085a0c"], 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) mmap(&(0x7f0000294000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x59b20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) 1m7.459860363s ago: executing program 4 (id=461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1}, 0x10) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x140, 0x2, 0x3a79, 0x2, 0xff, 0x10000, 0x7ffd, 0x6, 0x3, 0xc72d, 0x4, 0x10, 0xf8, 0xb, 0x4ce, 0x7, 0x104, 0x401, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xff9, 0x200000, 0xaf, 0x0, 0x7, 0x0, 0x4]}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0x0, 0x0, 0x0, 0x8fbe5fc453cc046a], [0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x46cb, 0x6, 0x40, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) 1m7.14748163s ago: executing program 4 (id=463): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000240)={0x5, [[0x1, 0x4, 0x5, 0x7f, 0x9, 0xa9, 0x6], [0x710f9e63, 0x5, 0x10001, 0x5, 0x3, 0x3, 0xee, 0xf], [0xfffffffe, 0x9, 0xffff, 0x0, 0x488, 0x5, 0x1000, 0x72]], '\x00', [{0x8, 0x2000006, 0x1, 0x0, 0x1, 0x1}, {0x3395, 0xfd, 0x0, 0x1, 0x1, 0x1}, {0x719fd441, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x80000001, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x20, 0x1, 0x0, 0x1}, {0x6, 0x5, 0x0, 0x1, 0x1}, {0xc, 0x4, 0x0, 0x1}, {0x8, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0xfffffff4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xfffffffa, 0x1, 0x1}, {0x7fff, 0x4}, {0xa9, 0x1000}], '\x00', 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r4, 0x5328) setns(0xc9, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) close(0x4) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x8, 0x81}]}, 0x10) (async) sendto$inet(r7, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r10 = fsmount(0xffffffffffffffff, 0x1, 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000f200080082000e0003002b0cc40a83c290d11fa6d84f6e529c9f02964fe3ca61da05c2e91892756d1485ca114b0064a129e4f8cd6a8ccb3f10d9fbea31ae880d0eb26f906814933c45fc8693d5dfe92a78f0a56a6e7856d9d562e26e2bf82df21343b80fd3103bc99196d3df7427796ce20f39257cc56622e2322591e2d9cdd43e16489475f6ec8a804a25a911a47e70079742f3c8a472331b8b3d96559566b1707d7046f5b24d45d1e502aa57fac1441eaba5bb837bb5dfc1509789cab1773d8eb7ecef49fa5a2f3f5e1b83b62c3113cdc198aebe33245ed5c2ce20e5cd34e7502b7d39ae9347c0a49935b6ff9c3372e8a4"], 0x12) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) dup(r11) 1m7.062184405s ago: executing program 4 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) acct(&(0x7f0000002240)='./file0/file0/file0\x00') read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002200)={0x10, 0x0, r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m6.613356413s ago: executing program 4 (id=466): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r1, &(0x7f0000000000)='\"', 0xfdef) 1m5.651666826s ago: executing program 4 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000280)={0x2, 0x7, 0x7, 0xff, 0x7f, "7bb0fe4663e4b0924c61aab93e1132a9914bf2", 0x101, 0x7fffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2be}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1c20}}]}, 0xc8}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}}, 0x24044884) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x49, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x7ff, 0x40, 0x33, 0xfff7, 0x100, 0x4c7, 0x8, 0x6, 0x4, 0x100]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac=@broadcast, {0x4}}, 0x3c, @val={0x8c, 0x10, {0x919, "5e0637b3ca25", @short="ed8f6add3173ca96"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0xa8}}, 0x40000) ioctl$AUTOFS_IOC_PROTOVER(r13, 0x80049363, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 44.972256828s ago: executing program 33 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000280)={0x2, 0x7, 0x7, 0xff, 0x7f, "7bb0fe4663e4b0924c61aab93e1132a9914bf2", 0x101, 0x7fffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2be}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1c20}}]}, 0xc8}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}}, 0x24044884) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x49, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x7ff, 0x40, 0x33, 0xfff7, 0x100, 0x4c7, 0x8, 0x6, 0x4, 0x100]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac=@broadcast, {0x4}}, 0x3c, @val={0x8c, 0x10, {0x919, "5e0637b3ca25", @short="ed8f6add3173ca96"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0xa8}}, 0x40000) ioctl$AUTOFS_IOC_PROTOVER(r13, 0x80049363, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 36.122733822s ago: executing program 3 (id=748): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x100, 0x5, 0x4, 0xffff}, {0x6, 0x3, 0xf8, 0x7fff}, {0xfffd, 0x8, 0x3, 0x9}, {0x3, 0x81, 0x7, 0x7f}, {0xfff, 0x9, 0x4, 0xfff}, {0x1, 0x27, 0x9, 0x1}, {0x40, 0x7, 0x6c, 0x3cc}, {0x101, 0x69, 0xa8}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200291b"], 0x14}}, 0x0) 35.968796849s ago: executing program 3 (id=750): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f00000002c0)=""/227, 0xe3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x1b, 0x0, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setuid(0xee01) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.961573709s ago: executing program 3 (id=763): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 34.754478942s ago: executing program 3 (id=764): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES32], 0x40}, 0x20000000) 34.687953926s ago: executing program 3 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 34.687522854s ago: executing program 3 (id=766): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x24000004) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r5, 0xc00c5512) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0xce, 0x9, 0x200, 0x2, @mcast2, @dev, 0x10, 0x20, 0x599f, 0x8}}) sendmsg$xdp(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x3, r6, 0x39}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xfb}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x600, 0x1000000}) 33.618841292s ago: executing program 1 (id=772): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x2, {{0xa, 0x4e20, 0xfffffbff, @ipv4={'\x00', '\xff\xff', @remote}, 0x8001}}, {{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x997d}}}, 0x108) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x5}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) 33.616803217s ago: executing program 1 (id=774): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 33.554276889s ago: executing program 1 (id=776): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x4c}}, 0x20000011) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r3, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=r0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRESHEX=0x0, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 33.554095009s ago: executing program 1 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000004080102000000000000000007000004059903002900000005000300880000002c000480080001400000007f08000140000003ff0800014000000006080001400000ffffffff01400000f615"], 0x50}, 0x1, 0x0, 0x0, 0x4004051}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x6, r1, &(0x7f00000002c0)=0x4, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'interleave', '=static'}}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000000080)='./cgroup\x00', 0xa) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}}, 0x4000000) 33.48081241s ago: executing program 1 (id=779): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x80000000, 0x100, "5c9b00cfa3d20eab25cc47bc4bf77e30f74cab33de30ed9f910a8e4fcbee7b8b", 0x7fffffff, 0x9, 0x4, 0xedb, 0x1, 0x9, 0x4, 0x5, [0xfffffeff, 0x8, 0x0, 0xfffffff2]}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc0280, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40086806, 0x21) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$BLKTRACESETUP(r1, 0x6801, 0x0) close(0x3) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000000440)=""/148, &(0x7f0000000500)=0x94) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000071, 0x0, 0x3ff}]}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) 33.395012035s ago: executing program 1 (id=781): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9c03, 0x20001) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x1, @random="ed610025ae76"}, 0x4, {0x2, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv_slave_1\x00'}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0xc7}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 22.668731919s ago: executing program 2 (id=865): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8000000b, 0x0, 0x0, 0x1d, 0xd, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809eadbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x40]}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x200002) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0x8000}) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) 22.536885037s ago: executing program 2 (id=866): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x36, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 21.597252779s ago: executing program 2 (id=867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') splice(r2, &(0x7f0000000180)=0x9, r1, &(0x7f0000000280)=0x7ff, 0x2, 0xe) (async) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff9f}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r3 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x10, 0x40000}, 0x94) (async) r4 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000000)="93", 0xf5) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21.596242071s ago: executing program 2 (id=868): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400fc0d"], 0x7) 21.554401937s ago: executing program 2 (id=869): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000"], 0x40}, 0x20000000) 21.550834994s ago: executing program 2 (id=870): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000012c0)=0x2) close(r1) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r3], 0xb8}}, 0x2) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r3], 0xb8}}, 0x2) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0xafa, 0x189781) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000", @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) close_range(r10, 0xffffffffffffffff, 0x0) 17.971680726s ago: executing program 34 (id=766): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x24000004) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RESET(r5, 0xc00c5512) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0xce, 0x9, 0x200, 0x2, @mcast2, @dev, 0x10, 0x20, 0x599f, 0x8}}) sendmsg$xdp(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, 0x3, r6, 0x39}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xfb}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x600, 0x1000000}) 17.322851164s ago: executing program 35 (id=781): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9c03, 0x20001) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x1, @random="ed610025ae76"}, 0x4, {0x2, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv_slave_1\x00'}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0xc7}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.438827277s ago: executing program 36 (id=870): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000012c0)=0x2) close(r1) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r3], 0xb8}}, 0x2) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r3], 0xb8}}, 0x2) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0xafa, 0x189781) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {0x0, r8, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) close_range(r10, 0xffffffffffffffff, 0x0) 2.244026119s ago: executing program 8 (id=1016): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0001008158", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008", @ANYRES32], 0x40}, 0x20000000) 2.239443423s ago: executing program 8 (id=1017): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000440)=0xb, 0x4) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xab\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000440)=0xb, 0x4) (async) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xab\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) 2.187745155s ago: executing program 6 (id=1020): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.158320449s ago: executing program 6 (id=1021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400004, 0x10, "3eccd8000000000000000010000000040100"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd0, 0x10, 0x62, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0xfffffffffffffffa], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.031115736s ago: executing program 8 (id=1023): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x6bb, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "dab5be5180bad3df619d9cc4a0ba7e89f7b92f60cf04eee6bef055"}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r5, 0xe72b6000) 2.030811118s ago: executing program 7 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, r3, r4, 0x0, 0x2}}}, 0x78) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r7, 0x1, 0x31, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, 0x8013, 0x8b00f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008806}, 0xc094) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400fc0d2017"], 0x7) 1.953651707s ago: executing program 7 (id=1025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x47, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.686011162s ago: executing program 6 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x60440, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x800, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) (async) ioctl(r1, 0x5, &(0x7f0000000080)="d6869763f4b4656847a9c49640cbc629bab6d89201f70899cf38065f9ab4ee4e81eb438c8eb19f99c75f00137c8fd22a1f5b36aa767418b3639eb1b7bb85857a46458eba9d5f00962b56dfb9553ab821ef6f24b03015198abd1645f92e4a5b455bf6a425a5") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) (async, rerun: 64) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') (rerun: 64) fchdir(r0) (async) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) (rerun: 32) write(r4, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 1.685517545s ago: executing program 6 (id=1027): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="2071a5777e0c3e96ae80c2000000000008000f0001000000"], 0x30}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x5, 0x10d2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) getpid() getrlimit(0xa, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24008844, &(0x7f0000000200)={0xa, 0x4e24, 0x80395, @mcast2, 0xfffffffe}, 0x29) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r8 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0xfffffffffffffff5, 0x4, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0x5, 0x4000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x105, 0xfffffffffffffffd, {0x8, 0x2}, {0x10}, {}, {0xd}, 0x0, 0x1, 0x10001}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./cgroup\x00', 0xfffffe7b) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r6, 0x1) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r9, 0x0, &(0x7f0000000180)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) 1.561034005s ago: executing program 6 (id=1028): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007"], 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r3 = dup(r0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x29, @loopback, 0x4e24, 0x4, 'wlc\x00', 0x0, 0x6, 0x27}, {@loopback, 0x4e20, 0x0, 0xfffffffb, 0x7, 0xfffffffd}}, 0x44) 1.346827715s ago: executing program 8 (id=1031): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x20, 0x0, "bb02dfc344ca41d4357e544508474004a18b56c53a306d8bcf11007bbe00040000000000000000000000000000000000000000000000000000000000000000fee58bb2e86600"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38192714", 0x17}], 0x1}], 0x1, 0x40800) listen(r0, 0x800) r2 = accept4(r0, 0x0, 0x0, 0x80000) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdaa) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r7, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffe, 0x0, 0xd, {0x0, 0x4, 0x0, 0x200, 0xfffffffffffffffe, 0x0, 0x1000, 0x4, 0xc, 0x2000, 0x101, r7, r8, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./cgroup\x00', &(0x7f0000000680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="ff24a5f621102c89e4c008198b1a121b693d36795aca4ab0c61ada11843658222e322474be57ca7cea477e1a515489aed1cb1e67ff2bfa3e19a8ddf5780fe8e80a8f060ffcd6427dcb8ea980e48bb448124d2649635059bfb620ae7234263aefeeffbdd1e1573640acb824f5192eadd9ee22dbc19f5c221ee848996f2c6b86eccf42071a5bccec2c66277149a29c209b2f904eb25c09cdafe55dd16c7630e27290b4e5d954149ff134eb8b9bdf8b48e7d86408aa81761cd4768b1b66e6723f2a0de0012c7b74e48472459b36e9e68b2c5bb43859", 0xd4}], 0x1, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r2, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r5, r2, r2, r1]}}], 0xb0, 0x4008000}, 0x24000001) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.186711844s ago: executing program 7 (id=1033): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400fc0d2017"], 0x7) 1.184985179s ago: executing program 7 (id=1036): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r5, 0x14f65000) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000740)={"7b787b4f21674ab575621f56c15c5a4fe3cef1b58bdd9738f1273fffbd0f7f1ba1c1933f1d79644d5f2f04bb0101c214f13a89fa79eba5164c9bd18fcefffb0fd2034533bc8359808d0d400091f3929b33449b5ebbd85cfdcaa177ede1d403e059d2d45864391f3c4fe34e5a5811c9f26f0fd673439e163d4919bdba00c55fb7e566aaac0da5afb701200bdae39c61fdc25973f75c5792f83955b421e90c3344dcc6094b69143e60810858dd3d14272d84cc0d89f0f2a108e3c03ac9c1c92ca6abc26ba51717dd0700fa8950417769ecc9359c58b9a6ee7124217bb4e8c9d12029d57fa68f00d73f4f5d8f85cc5ecdad78f5d7cec7b0730dad3b297de5c34613bee27c7d546d707e00e4de0d0f5162cda708935a6230861da572cbc7d107f74276073c54953ad2f9c7b168ce6d6fb666b5c332804368d6f43093f3f35f4f538efa64c835126ccb8bd35d28cdc70ec74098ebd0f6f19cd075aa86d2198f7e23f3f07193bb58eb6193e7146b4d29c3cc4e567984457f95850dc3301f821e0de9e00adab0220afe2ccecee04555513d1081402571b579c4ffc2e807b3e70724c7e05ef6a625792723814fa1505a3fc820644cd401ebddc4afe60fdba0f32c0cd8e4305dd8a42f2bc235b0bdb8e64804678bcd952ec6be815fd4ade63e7d368a4ade474b0a9da3b0b26ff855c9fbaf864e2a8e05efdc8e581bc291fd7947c65d7f1128fc38dd41da10e5c2619d71bad31290447996bcfc19fe5990867fef508539f0631bee24ef0657a021859e05f5f7ee1724053fec40ec57747977c0b413d4fb9c85c830d90b1784e287dac6e0150371d4c057c5dcd5877828271c206206b5b342b9133bf15d3b5246d7c9dd9475eacd07c1e2271e99f02352bb2614295da9df6d0fe9b9a1bee3e3e43cc8eb2184e121da1a93d5290db0147869a06f14554d4de38585582d39d3448dd0280745da9ac0fb25f95461fed524ee23c68e312e42a97a37202d6625fc00ffca5e36f904f5fe47f306d01c4345680c4e6d78b9aba7bb4cf278413b6b6d3961f4b9c1221a98870d37bb4266f436a9ebc5ac77b208e3cb2bf1975158f0cdb99ccaeadbb65cee8b03dd368529cfe3e2f4a5fd2a5f3be67abe53b01eaed4da20ff541ad6c067b97202250074a7cbde787cc29c3a86cfc71818eca3acceed172ca6d209fd8d12e08173925d96f78a7e25321db158aca35b1630b73cd41a494605790d05292fb469825b4a4c6e9e21e359f7b8a391af9b6d2d440efd37bc586be9ea0423f58199130f95304269fc0995d8137830bb4a71d76f1c3fe3c9e796d93be8d6926e36221d8de5cf557c49c90a49ee14a24197c3fe8db16cb8b5ad4d5f690b038f14b7f5fa91fff4bb65adfcaa0ac42feae15406edd60822a429db1a6f1436ec94c3caf7bc29fc71632dbb006b302168a7a0c947e278e5"}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0x9, 0x101, 0x4, {0xffffffff, 0x10000003, 0x1, 0x5}}) 1.016218231s ago: executing program 5 (id=1039): ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000000)={0xffff, 0x1, 0x0, 0xc, 0x2, 0x3, 0xf9, 0x101}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000080)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x208280, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x108}, 0x4001) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x4d, 0x101, 0x96c, "af15df3461dd7ae84f0aa9bcf22289b09cc5107075d0050bc59c208d62d25a4a26872e3cf14678a6cd5b0a257df8404565d7146c3cf947ae2d0b75465fb86b38afe12580f38e49ab4eff70c20e"}) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000380)) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @loopback, r2}, 0xc) ioctl$FICLONE(r0, 0x40049409, r0) (async, rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async, rerun: 32) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000480)={0x5, 0xc}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000680)={@empty, 0x0, 0x1, 0x3, 0x2, 0x4, 0x7}, &(0x7f00000006c0)=0x20) connect$packet(r0, &(0x7f0000000700)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000002780)={0x18, 0xfffffffffffffffe, r6, {0x8}}, 0x18) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000027c0)={0x1, 0x0, 0x6, r2, 0x8}, 0xc) sendfile(r5, r3, &(0x7f0000002800)=0xa, 0x8) (async, rerun: 32) r7 = fcntl$dupfd(r5, 0x0, r3) (rerun: 32) setsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f0000002840)="482fae68e6532e2b08db1e4d4e4b28d1974620e12f1d076c5c89f6f242aa801a16d330a471f478bd0b4c819e2b1ba8707bdda6d318aec7f5d0e7d1d7b73bdc0161b0014be58469b6849e496a6b1fecf20cabb511c2f258b0fad6a0f628d7f6f2ec52325f1b9c6511c9abf7173499b3296b66d92f4c9d2b", 0x77) (async) r8 = openat(r0, &(0x7f00000028c0)='./file0\x00', 0x10d000, 0x28) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000002900)={0x3b6c0873, 0xc5, 0xc, 0x1, 0x6, 0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000002940)=0x1) 989.347718ms ago: executing program 5 (id=1040): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x2000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r6, 0x2219, 0x771e, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x7f}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000340)={r7, 0xffffffff, 0x3dc, 0x3}, 0x10) 51.825667ms ago: executing program 7 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) mmap$binder(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x1, 0x11, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xec}}, 0x0) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x40000}}], 0x18}, 0x4000004) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r12, 0x80045017, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r14, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 50.258608ms ago: executing program 5 (id=1042): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040)=0x1, 0x4) r1 = socket(0x10, 0x3, 0xb6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue1\x00', 0x4000007}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x20004000) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @time={0x8, 0x9}, {0x8}, {0x9}, @note={0x5, 0x5, 0x3, 0x2, 0xb}}], 0x5c) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x7}, 0x8) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xc084) 49.778421ms ago: executing program 5 (id=1043): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8}) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000040)=0x7) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) 49.356276ms ago: executing program 5 (id=1044): mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400000021020000c1"], 0x50) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r0}, 0x38) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='gfs2\x00', 0x8080, &(0x7f00000001c0)='discard') 42.611976ms ago: executing program 5 (id=1045): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x42a03) r2 = socket(0x3, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a2}}, {{0xa, 0x4e20, 0x2fe, @loopback}}}, 0x108) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000280)={0x1, 0x4, 0x1}) r4 = dup(r3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x0, 0x1}, {0x48, 0xfbff}, @rumble={0xf, 0xff}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) write$UHID_INPUT(r4, 0x0, 0x0) write(r0, &(0x7f0000000700)='bind', 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1be6b00828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xda9}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e", 0x17}], 0x5}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004940)=""/4091, 0xfffffffffffffdcc, 0x1, 0x0, 0xffffffffffffffbd}, &(0x7f0000000440)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, &(0x7f0000000b40)=0x24) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) 40.708238ms ago: executing program 7 (id=1046): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x4f) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x4}]}) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) creat(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x100) write(r2, &(0x7f0000000a00)='rd_pages=8', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000040000000a"], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000700)="d3", 0x1}], 0x1}}], 0x2, 0x20044040) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) sendto$unix(r3, &(0x7f0000000340)="4c72809b45cf16c956198bcf4539feb74342748d3283a71d663566a3296a5651dbd015379aa385cec9924fe61b38e8d6f2aa5e1d462448a1f831203d35cc844cef0412dae6209fc91cd3e44da773bee2838da5d25a1d3ae67b9c39ab3118b318923ab69a3fd883e2cb64aa7e31e8963bb568944ccd201f43a5a7f929c968881fa58d7ae9d4d3d5889d82a7ebee2d6a45fd237b9ca0a4cca69d0c649cff4663e1", 0xa0, 0x24042001, &(0x7f0000000440)=@file={0x0, './my_configfs/target/usb_gadget/naa.1234567890abcdef\x00'}, 0x6e) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/135, 0x87}], 0x1, 0x0, 0x1) write(r3, &(0x7f0000000c00)='1', 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400fc0d2017"], 0x7) 36.390953ms ago: executing program 8 (id=1047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 36.140075ms ago: executing program 6 (id=1048): r0 = syz_open_dev$ndb(&(0x7f0000000680), 0x0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0a0105"], 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) open_tree(r1, &(0x7f0000000080)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1) setsockopt$packet_int(r1, 0x107, 0x7e2a9c2a396a82c7, &(0x7f0000000180)=0x2, 0x4) 0s ago: executing program 8 (id=1049): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f0000000400)=0xb8e7) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x8}, {0x8, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x6}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): [ 107.327464][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.330275][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.348741][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.352655][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.374361][ T7459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.376671][ T7459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.416462][ T7808] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.419257][ T7808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.425536][ T7808] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.843003][ T7836] virtio-fs: tag not found [ 108.099564][ T7853] cgroup: none used incorrectly [ 108.113821][ T7851] gtp0: entered promiscuous mode [ 108.116144][ T7851] gtp0: entered allmulticast mode [ 108.120690][ T7851] team0: Device gtp0 is of different type [ 108.269527][ T7860] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 108.300162][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.304132][ T7860] bond1: (slave bond2): making interface the new active one [ 108.307149][ T7860] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.319470][ T7860] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 108.323942][ T7860] __nla_validate_parse: 2 callbacks suppressed [ 108.323953][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.498'. [ 108.330486][ T7860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.378997][ T7864] ALSA: seq fatal error: cannot create timer (-19) [ 108.411860][ T7867] TCP: TCP_TX_DELAY enabled [ 108.732233][ T7881] netlink: 156 bytes leftover after parsing attributes in process `syz.1.505'. [ 108.735580][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 109.009596][ T7885] netlink: 'syz.1.507': attribute type 11 has an invalid length. [ 109.027078][ T7887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 109.066823][ T7897] netlink: 200 bytes leftover after parsing attributes in process `syz.2.510'. [ 109.162955][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.183138][ T7908] binder: 7907:7908 ioctl 40305829 200000000600 returned -22 [ 109.248198][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 109.267801][ T7911] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 109.267801][ T7911] The task syz.1.516 (7911) triggered the difference, watch for misbehavior. [ 109.611508][ T5746] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 109.774135][ T5746] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.778072][ T5746] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.781545][ T5746] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.785190][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.791166][ T7919] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.798896][ T5746] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.150344][ T7923] vcan0 speed is unknown, defaulting to 1000 [ 110.179162][ T50] usb 6-1: USB disconnect, device number 10 [ 110.425689][ T7928] netlink: 'syz.3.522': attribute type 3 has an invalid length. [ 110.428071][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 110.465789][ T7930] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.495132][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 110.561022][ T7937] bridge1: entered promiscuous mode [ 110.608909][ T7942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.629068][ T7944] netlink: 'syz.2.529': attribute type 63 has an invalid length. [ 110.631610][ T7944] netlink: 5 bytes leftover after parsing attributes in process `syz.2.529'. [ 110.634411][ T7944] gretap0: entered allmulticast mode [ 110.636631][ T7944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.707973][ T7948] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 110.836617][ T7960] evm: overlay not supported [ 110.868968][ T7963] binder: BINDER_SET_CONTEXT_MGR already set [ 110.870908][ T7963] binder: 7961:7963 ioctl 4018620d 200000000100 returned -16 [ 111.054064][ T5746] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.100879][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 111.100903][ T42] audit: type=1400 audit(1785530994.170:713): avc: denied { associate } for pid=7967 comm="syz.2.537" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 111.109029][ T7968] nfs4: Unknown parameter 'ecurity.capability' [ 111.119183][ T42] audit: type=1400 audit(1785530994.189:714): avc: denied { append } for pid=7972 comm="syz.3.538" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.149723][ T42] audit: type=1400 audit(1785530994.217:715): avc: denied { mount } for pid=7972 comm="syz.3.538" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.156836][ T42] audit: type=1400 audit(1785530994.217:716): avc: denied { unmount } for pid=7972 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 111.206690][ T42] audit: type=1400 audit(1785530994.273:717): avc: denied { append } for pid=7974 comm="syz.2.539" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.233193][ T5746] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 111.238294][ T5746] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.241775][ T5746] usb 6-1: config 0 interface 0 has no altsetting 0 [ 111.248583][ T5746] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.251339][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.253906][ T5746] usb 6-1: Product: syz [ 111.255260][ T5746] usb 6-1: Manufacturer: syz [ 111.256802][ T5746] usb 6-1: SerialNumber: syz [ 111.264628][ T5746] usb 6-1: config 0 descriptor?? [ 111.270452][ T5746] hub 6-1:0.0: bad descriptor, ignoring hub [ 111.272509][ T5746] hub 6-1:0.0: probe with driver hub failed with error -5 [ 111.277978][ T5746] usb 6-1: selecting invalid altsetting 0 [ 111.395968][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.481531][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 111.504148][ T1135] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 111.506366][ T1135] ata1: failed to read log page 10h (errno=-5) [ 111.508385][ T1135] ata1.00: exception Emask 0x1 SAct 0x80000 SErr 0x0 action 0x0 [ 111.510876][ T1135] ata1.00: irq_stat 0x40000000 [ 111.512434][ T1135] ata1.00: failed command: WRITE FPDMA QUEUED [ 111.514996][ T1135] ata1.00: cmd 61/08:98:2e:31:0a/00:00:00:00:00/40 tag 19 ncq dma 4096 out [ 111.514996][ T1135] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 111.520451][ T1135] ata1.00: status: { DRDY } [ 111.526175][ T1135] ata1.00: configured for UDMA/100 [ 111.531073][ T1135] ata1: EH complete [ 111.539858][ T42] audit: type=1400 audit(1785530994.573:718): avc: denied { write } for pid=7989 comm="syz.2.544" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.566375][ T42] audit: type=1400 audit(1785530994.592:719): avc: denied { mmap_zero } for pid=7989 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 111.711014][ T8001] netlink: 3 bytes leftover after parsing attributes in process `syz.2.547'. [ 111.718501][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880316c3400: rx timeout, send abort [ 111.729663][ T42] audit: type=1400 audit(1785530994.769:720): avc: denied { read } for pid=5130 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 111.737175][ T42] audit: type=1400 audit(1785530994.769:721): avc: denied { search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.743946][ T42] audit: type=1400 audit(1785530994.769:722): avc: denied { write search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.841333][ T8006] clocksource: Switched to clocksource acpi_pm [ 111.847178][ T8006] clocksource: Switched to clocksource tsc [ 112.110369][ T50] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 112.135496][ T7957] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 112.255126][ C3] vxcan1: j1939_tp_rxtimer: 0xffff8880316c3400: abort rx timeout. Force session deactivation [ 112.270694][ T50] usb 7-1: Invalid ep0 maxpacket: 64 [ 112.283352][ T7957] usb 6-1: device descriptor read/64, error -71 [ 112.409644][ T50] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 112.548567][ T7957] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 112.569895][ T50] usb 7-1: Invalid ep0 maxpacket: 64 [ 112.572407][ T50] usb usb7-port1: attempt power cycle [ 112.687545][ T7957] usb 6-1: device descriptor read/64, error -71 [ 112.954552][ T50] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 112.954553][ T7957] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 112.976525][ T7957] usb 6-1: device descriptor read/8, error -71 [ 112.987512][ T50] usb 7-1: Invalid ep0 maxpacket: 64 [ 113.136242][ T50] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 113.158054][ T50] usb 7-1: Invalid ep0 maxpacket: 64 [ 113.160059][ T50] usb usb7-port1: unable to enumerate USB device [ 113.232487][ T7957] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 113.266480][ T7957] usb 6-1: device descriptor read/8, error -71 [ 113.385111][ T34] usb 6-1: USB disconnect, device number 11 [ 113.553288][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 113.691940][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 113.692515][ T34] usb 6-1: device descriptor read/64, error -71 [ 113.949459][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.233814][ T8020] openvswitch: netlink: IP tunnel dst address not specified [ 114.269471][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 114.273066][ T8025] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 114.627026][ T8039] overlay: Unknown parameter 'dont_hash' [ 114.691071][ T8041] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 114.734345][ T8041] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 114.737593][ T8041] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 114.743315][ T8041] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 114.746192][ T8041] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 114.750122][ T8041] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 114.772453][ T8041] pci 0000:00:01.0: Adding to iommu group 1 [ 114.783895][ T8041] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 114.786879][ T8041] pci 0000:00:01.0: vgaarb: bridge control possible [ 114.789507][ T8041] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 114.801223][ T8041] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 114.809118][ T8041] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 114.818264][ T8041] pci 0000:00:1d.0: Adding to iommu group 7 [ 114.821206][ T8041] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 114.827353][ T8041] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 114.834328][ T8041] pci 0000:00:1d.7: Adding to iommu group 7 [ 114.839810][ T8041] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 114.850621][ T8041] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 114.860366][ T8041] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 114.863915][ T8041] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned [ 114.867975][ T8041] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 114.917818][ T8041] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 114.920132][ T8041] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 114.923344][ T8041] [drm] features: -virgl +edid -resource_blob -host_visible [ 114.923357][ T8041] [drm] features: -context_init -blob_alignment [ 114.936852][ T8041] [drm] number of scanouts: 1 [ 114.938388][ T8041] [drm] number of cap sets: 0 [ 114.957741][ T8041] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 114.996168][ T8041] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 115.050719][ T8041] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 42871 usecs [ 115.081545][ T8041] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 115.098409][ T8041] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 115.101104][ T8041] uhci_hcd 0000:00:1d.0: detected 2 ports [ 115.107083][ T8041] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 115.118082][ T8041] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 115.122471][ T8041] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 115.130628][ T8041] usb usb1: Product: UHCI Host Controller [ 115.133006][ T8041] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 115.135724][ T8041] usb usb1: SerialNumber: 0000:00:1d.0 [ 115.161072][ T8041] hub 1-0:1.0: USB hub found [ 115.170300][ T8041] hub 1-0:1.0: 2 ports detected [ 115.260564][ T8041] pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 115.262972][ T8041] pci 0000:00:1d.7: Can't enable PCI device, BIOS handoff failed. [ 115.265427][ T8041] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 29640 usecs [ 115.303293][ T8063] ip_tables: iptables: counters copy to user failed while replacing table [ 115.306534][ T8063] ªªªªª): renamed from hsr0 (while UP) [ 115.324961][ T36] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 115.417900][ T8082] syz.2.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.424809][ T8082] cgroup: Need name or subsystem set [ 115.498060][ T29] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 115.589516][ T8104] netlink: 3 bytes leftover after parsing attributes in process `syz.3.580'. [ 115.679713][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 115.716504][ T29] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 115.719591][ T29] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 115.722262][ T29] usb 1-1: Product: QEMU USB Tablet [ 115.723996][ T29] usb 1-1: Manufacturer: QEMU [ 115.725565][ T29] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 115.779431][ T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input15 [ 115.799485][ T29] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 115.925520][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 116.432760][ T8114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.582'. [ 116.564288][ T5742] Bluetooth: hci0: unexpected event for opcode 0x200d [ 116.595329][ T8130] syz.1.584: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 116.614582][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 116.614603][ T42] audit: type=1400 audit(1785530999.317:744): avc: denied { write } for pid=8124 comm="syz.1.584" name="usb_gadget" dev="configfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.617625][ T8133] netlink: 144 bytes leftover after parsing attributes in process `syz.2.586'. [ 116.630606][ T42] audit: type=1400 audit(1785530999.317:745): avc: denied { write } for pid=8124 comm="syz.1.584" name="functions" dev="configfs" ino=10212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.638920][ T42] audit: type=1800 audit(1785530999.317:746): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.584" name="p_it_ch_name" dev="configfs" ino=25611 res=0 errno=0 [ 116.639583][ T8136] netlink: 144 bytes leftover after parsing attributes in process `syz.2.586'. [ 116.647174][ T42] audit: type=1400 audit(1785530999.317:747): avc: denied { setattr } for pid=8124 comm="syz.1.584" name="uac1.usb0" dev="configfs" ino=25610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.647227][ T42] audit: type=1400 audit(1785530999.336:748): avc: denied { name_connect } for pid=8134 comm="syz.3.587" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 116.653045][ T8135] overlayfs: failed to resolve './file1': -2 [ 116.676900][ T8133] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 116.683044][ T8135] overlayfs: conflicting lowerdir path [ 116.749125][ T8143] vivid-000: kernel_thread() failed [ 116.844843][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 116.846912][ T8141] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 116.871984][ T42] audit: type=1400 audit(1785530999.579:749): avc: denied { write } for pid=8157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.925727][ T42] audit: type=1400 audit(1785530999.626:750): avc: denied { write } for pid=8163 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.133196][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 117.156585][ T42] audit: type=1400 audit(1785530999.841:751): avc: denied { write } for pid=8174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.157636][ T8177] overlayfs: failed to resolve './file0': -2 [ 117.211303][ T42] audit: type=1400 audit(1785530999.898:752): avc: denied { write } for pid=8179 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.302404][ T42] audit: type=1400 audit(1785530999.972:753): avc: denied { write } for pid=8181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.440179][ T5746] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 119.422199][ T1353] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 123.549558][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 123.549572][ T42] audit: type=1400 audit(1785531005.821:761): avc: denied { write } for pid=8207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.599480][ T42] audit: type=1400 audit(1785531005.877:762): avc: denied { write } for pid=8210 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.902307][ T42] audit: type=1400 audit(1785531008.030:763): avc: denied { write } for pid=8213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.958420][ T42] audit: type=1400 audit(1785531008.077:764): avc: denied { write } for pid=8216 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.268023][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 127.274740][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 127.304847][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 127.347138][ T5754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.358037][ T5754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.362504][ T5754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.375133][ T5754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.378662][ T5754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.454825][ T8252] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.457399][ T42] audit: type=1400 audit(1785531009.490:765): avc: denied { create } for pid=8251 comm="syz.1.605" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 127.496712][ T42] audit: type=1400 audit(1785531009.490:766): avc: denied { associate } for pid=8251 comm="syz.1.605" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 127.505397][ T8260] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 127.534600][ T42] audit: type=1400 audit(1785531009.499:767): avc: denied { rmdir } for pid=5738 comm="syz-executor" name="file0" dev="tmpfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 127.609699][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 127.656454][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 127.662208][ T8236] vcan0 speed is unknown, defaulting to 1000 [ 127.746918][ T8280] xt_hl: Unknown TTL match mode: 255 [ 127.768387][ T8280] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.857920][ T5742] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 128.125468][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.127985][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.130722][ T8236] bridge_slave_0: entered allmulticast mode [ 128.135671][ T8236] bridge_slave_0: entered promiscuous mode [ 128.139272][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.141758][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.144080][ T8236] bridge_slave_1: entered allmulticast mode [ 128.146773][ T8236] bridge_slave_1: entered promiscuous mode [ 128.176410][ T8236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.183433][ T8236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.219665][ T8236] team0: Port device team_slave_0 added [ 128.224353][ T8236] team0: Port device team_slave_1 added [ 128.248653][ T8236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.251576][ T8236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.261528][ T8236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.268308][ T8236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.271149][ T8236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.281782][ T8236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.330054][ T8236] hsr_slave_0: entered promiscuous mode [ 128.333344][ T8236] hsr_slave_1: entered promiscuous mode [ 128.452729][ T8236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.456606][ T8236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.459291][ T8236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.463550][ T8236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.466339][ T8236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.470024][ T8236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.473131][ T8236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.476789][ T8236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.492570][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.494771][ T8236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.497051][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.499329][ T8236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.555180][ T8236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.564790][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.567641][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.580751][ T8236] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.590194][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.593209][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.598745][ T42] audit: type=1400 audit(1785531010.547:768): avc: denied { read } for pid=8317 comm="syz.3.619" path="socket:[24557]" dev="sockfs" ino=24557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.609861][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.612862][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.669197][ T8318] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.870217][ T8236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.008689][ T8236] veth0_vlan: entered promiscuous mode [ 129.014971][ T8236] veth1_vlan: entered promiscuous mode [ 129.035750][ T8236] veth0_macvtap: entered promiscuous mode [ 129.042917][ T8236] veth1_macvtap: entered promiscuous mode [ 129.052972][ T8236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.061451][ T8236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.081903][ T5792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.097456][ T5792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.167019][ T7459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.167329][ T5817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.172656][ T7459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.201484][ T7459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.203994][ T7459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.211242][ T42] audit: type=1400 audit(1785531011.127:769): avc: denied { mounton } for pid=8236 comm="syz-executor" path="/syzkaller.2uP21N/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 129.229516][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 129.252465][ T5792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.262433][ T42] audit: type=1400 audit(1785531011.174:770): avc: denied { bind } for pid=8352 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.268141][ T42] audit: type=1400 audit(1785531011.174:771): avc: denied { setopt } for pid=8352 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.274042][ T42] audit: type=1400 audit(1785531011.174:772): avc: denied { accept } for pid=8352 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.279919][ T42] audit: type=1400 audit(1785531011.174:773): avc: denied { write } for pid=8352 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.286081][ T42] audit: type=1400 audit(1785531011.174:774): avc: denied { read } for pid=8352 comm="syz.5.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.592889][ T5742] Bluetooth: hci5: command tx timeout [ 129.773411][ T8380] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.631'. [ 130.001241][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 130.075400][ T42] audit: type=1400 audit(1785531011.932:775): avc: denied { write } for pid=8400 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 130.081520][ T42] audit: type=1400 audit(1785531011.932:776): avc: denied { read } for pid=8400 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 130.519232][ T42] audit: type=1400 audit(1785531012.344:777): avc: denied { map } for pid=8425 comm="syz.2.635" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.529455][ T42] audit: type=1400 audit(1785531012.344:778): avc: denied { read write } for pid=8425 comm="syz.2.635" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.982134][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 131.068651][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 131.071590][ T8448] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 131.111825][ T8452] selinux_netlink_send: 2227 callbacks suppressed [ 131.111839][ T8452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48423 sclass=netlink_route_socket pid=8452 comm=syz.3.640 [ 131.118086][ T8452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48417 sclass=netlink_route_socket pid=8452 comm=syz.3.640 [ 131.144799][ T34] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 131.147552][ T34] usb 10-1: config 1 has no interface number 0 [ 131.149787][ T34] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.153802][ T34] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 131.156905][ T34] usb 10-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.166703][ T34] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 131.172083][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.175508][ T8452] comedi comedi3: pcl812: I/O base address not correctly aligned [ 131.179521][ T34] usb 10-1: Product: syz [ 131.181044][ T34] usb 10-1: Manufacturer: syz [ 131.184665][ T34] usb 10-1: SerialNumber: syz [ 131.196297][ T8437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.200833][ T34] usb 10-1: Expected 3 endpoints, found: 2 [ 131.323033][ T8464] netlink: 'syz.1.642': attribute type 2 has an invalid length. [ 131.325762][ T8464] netlink: 232 bytes leftover after parsing attributes in process `syz.1.642'. [ 131.456391][ T8481] autofs: Unknown parameter 'veth0_to_hsr' [ 131.461925][ T8484] vxfs: WRONG superblock magic 00000000 at 1 [ 131.480355][ T8484] vxfs: WRONG superblock magic 00000000 at 8 [ 131.484275][ T8484] vxfs: can't find superblock. [ 131.587277][ T8511] netlink: 'syz.2.659': attribute type 21 has an invalid length. [ 131.590766][ T8511] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.594078][ T8511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.598124][ T8511] IPv6: NLM_F_CREATE should be set when creating new route [ 131.600410][ T8511] IPv6: NLM_F_CREATE should be set when creating new route [ 131.602685][ T8511] IPv6: NLM_F_CREATE should be set when creating new route [ 131.613412][ T8511] 9p: Unknown access argument 18446744073709551615: -34 [ 131.627951][ T8513] bond0: entered promiscuous mode [ 131.629933][ T8513] bond_slave_0: entered promiscuous mode [ 131.632228][ T8513] bond_slave_1: entered promiscuous mode [ 131.634981][ T8513] veth0_to_bond: entered promiscuous mode [ 131.642664][ T8513] batadv0: entered promiscuous mode [ 131.651643][ T8513] netlink: 'syz.3.660': attribute type 10 has an invalid length. [ 131.659988][ T8513] syz_tun: entered promiscuous mode [ 131.668671][ T8513] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.699571][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.703767][ T8513] loop2: detected capacity change from 0 to 7 [ 131.714132][ T8513] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 131.717280][ T8513] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.719719][ T8513] Dev loop2: unable to read RDB block 7 [ 131.722190][ T8513] loop2: unable to read partition table [ 131.724327][ T8513] loop2: partition table beyond EOD, truncated [ 131.730117][ T8513] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.736938][ T8525] vcan0 speed is unknown, defaulting to 1000 [ 131.800777][ T24] usb 10-1: USB disconnect, device number 2 [ 131.817619][ T5742] Bluetooth: hci5: command tx timeout [ 131.869590][ T8537] gadgetfs: bound to dummy_udc driver [ 131.898319][ T8539] kvm: user requested TSC rate below hardware speed [ 132.118700][ T8551] fuse: Bad value for 'fd' [ 132.129991][ T50] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 132.135454][ C1] gadgetfs: connected [ 132.139614][ T50] gadgetfs: disconnected [ 132.307393][ C1] gadgetfs: connected [ 132.311988][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 132.318868][ T50] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 132.324243][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.350659][ C1] gadgetfs: configuration #1 [ 132.477800][ T8559] SELinux: policydb magic number 0xfe000006 does not match expected magic number 0xf97cff8c [ 132.483326][ T8559] SELinux: failed to load policy [ 132.492612][ T8550] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 132.524160][ T8550] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 132.526970][ T8550] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 132.529634][ T8550] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 132.532182][ T8550] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 132.534917][ T8550] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 132.546025][ T8550] pci 0000:00:01.0: Adding to iommu group 1 [ 132.551516][ T8550] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 132.553658][ T8550] pci 0000:00:01.0: vgaarb: bridge control possible [ 132.555617][ T8550] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 132.564496][ T8550] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 132.567433][ T8550] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 132.580242][ T8550] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 132.591837][ T8562] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 132.599374][ T8562] bond1 (unregistering): Released all slaves [ 132.624446][ T8550] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 132.626848][ T8550] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 132.630011][ T8550] [drm] features: -virgl +edid -resource_blob -host_visible [ 132.630023][ T8550] [drm] features: -context_init -blob_alignment [ 132.645002][ T8550] [drm] number of scanouts: 1 [ 132.646495][ T8550] [drm] number of cap sets: 0 [ 132.677655][ T8550] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 132.714064][ T8550] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 132.736195][ T8537] gadgetfs: suspended from state 3 [ 132.738694][ T8537] gadgetfs: disconnected [ 132.742248][ T29] usb 5-1: USB disconnect, device number 2 [ 132.821172][ T8571] __nla_validate_parse: 2 callbacks suppressed [ 132.821194][ T8571] netlink: 96 bytes leftover after parsing attributes in process `syz.2.675'. [ 132.837744][ T8574] dummy_hcd dummy_hcd.0: remove, state 1 [ 132.839584][ T8574] usb usb5: USB disconnect, device number 1 [ 132.867071][ T8574] dummy_hcd dummy_hcd.0: stopped [ 132.869395][ T8574] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 132.887012][ T8574] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 132.889760][ T8574] dummy_hcd dummy_hcd.0: Dummy host controller [ 132.897260][ T8574] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 2 [ 132.903998][ T8574] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 132.907195][ T8574] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 132.909941][ T8574] usb usb2: Product: Dummy host controller [ 132.911889][ T8574] usb usb2: Manufacturer: Linux syzkaller dummy_hcd [ 132.914060][ T8574] usb usb2: SerialNumber: dummy_hcd.0 [ 132.928613][ T8574] hub 2-0:1.0: USB hub found [ 132.930551][ T8574] hub 2-0:1.0: 1 port detected [ 133.141137][ T8598] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 133.405662][ T8612] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 133.422636][ T8624] 9pnet_virtio: no channels available for device syz [ 133.443234][ T8564] ceph: No mds server is up or the cluster is laggy [ 133.715920][ T8653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 133.719656][ T8653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 133.786463][ T8664] netlink: 76 bytes leftover after parsing attributes in process `syz.1.705'. [ 134.038389][ T5742] Bluetooth: hci5: command tx timeout [ 134.230604][ T1353] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 134.315143][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 134.318686][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 134.358276][ T8723] EXT4-fs (nbd1): unable to read superblock [ 134.398590][ T1353] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 134.404921][ T1353] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.422443][ T1353] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 134.438019][ T8737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.440635][ T8737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 134.443343][ T8737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 134.445434][ T1353] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 134.446887][ T8737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 134.624983][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 134.625015][ T42] audit: type=1400 audit(1785531016.181:803): avc: denied { read } for pid=8732 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.647957][ T42] audit: type=1400 audit(1785531016.218:804): avc: denied { ioctl } for pid=8739 comm="syz.1.730" path="socket:[29914]" dev="sockfs" ino=29914 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.663001][ T8733] /dev/sr0: Can't open blockdev [ 134.690131][ T42] audit: type=1400 audit(1785531016.246:805): avc: denied { write } for pid=8746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.748271][ T8743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.767920][ T42] audit: type=1400 audit(1785531016.321:806): avc: denied { write } for pid=8753 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.799522][ T8757] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 134.802105][ T8757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.731'. [ 134.829397][ T8752] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 134.870683][ T8743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.953175][ T8743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.056539][ T8686] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 135.062254][ T1353] usb 10-1: USB disconnect, device number 3 [ 135.090204][ T1353] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 135.094546][ T1353] spcp8x5 10-1:1.0: device disconnected [ 135.096945][ T8767] vivid-000: unregistering video7 [ 135.108074][ T8767] vivid-000: unregistering video8 [ 135.149983][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.161711][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.165396][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.187728][ T8767] vivid-000: unregistering vbi0 [ 135.203348][ T8767] vivid-000: unregistering vbi1 [ 135.214231][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.214605][ T8767] vivid-000: unregistering swradio0 [ 135.234196][ T8767] vivid-000: unregistering radio0 [ 135.245780][ T8767] vivid-000: unregistering radio1 [ 135.264380][ T8767] vivid-000: unregistering video9 [ 135.268310][ T8767] vivid-000: unregistering video10 [ 135.275152][ T8767] vivid-000: unregistering v4l-touch0 [ 135.304079][ T8767] vivid-001: unregistering video11 [ 135.307137][ T8767] vivid-001: unregistering video12 [ 135.311991][ T8767] vivid-001: unregistering vbi2 [ 135.330117][ T8767] vivid-001: unregistering vbi3 [ 135.333249][ T8767] vivid-001: unregistering swradio1 [ 135.356716][ T8767] vivid-001: unregistering radio2 [ 135.369884][ T8767] vivid-001: unregistering radio3 [ 135.373554][ T8767] vivid-001: unregistering video13 [ 135.376763][ T8767] vivid-001: unregistering video14 [ 135.380652][ T8767] vivid-001: unregistering v4l-touch1 [ 135.442067][ T8767] vivid-002: unregistering video15 [ 135.444568][ T8767] vivid-002: unregistering video16 [ 135.450032][ T8767] vivid-002: unregistering vbi4 [ 135.453526][ T8767] vivid-002: unregistering vbi5 [ 135.456591][ T8767] vivid-002: unregistering swradio2 [ 135.465598][ T8767] vivid-002: unregistering radio4 [ 135.481251][ T8767] vivid-002: unregistering radio5 [ 135.495899][ T8767] vivid-002: unregistering video17 [ 135.511886][ T8767] vivid-002: unregistering video18 [ 135.519066][ T8767] vivid-002: unregistering v4l-touch2 [ 135.572337][ T8767] vivid-003: unregistering video19 [ 135.574798][ T8767] vivid-003: unregistering video20 [ 135.580921][ T8767] vivid-003: unregistering vbi6 [ 135.587243][ T42] audit: type=1400 audit(1785531017.088:807): avc: denied { shutdown } for pid=8776 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.596525][ T8767] vivid-003: unregistering vbi7 [ 135.607022][ T8767] vivid-003: unregistering swradio3 [ 135.617298][ T8767] vivid-003: unregistering radio6 [ 135.622313][ T8767] vivid-003: unregistering radio7 [ 135.629834][ T8767] vivid-003: unregistering video21 [ 135.633028][ T8767] vivid-003: unregistering video22 [ 135.635610][ T8767] vivid-003: unregistering v4l-touch3 [ 135.672979][ T8767] vivid-004: unregistering video23 [ 135.679540][ T8767] vivid-004: unregistering video24 [ 135.687671][ T8767] vivid-004: unregistering vbi8 [ 135.695312][ T8767] vivid-004: unregistering vbi9 [ 135.707117][ T8767] vivid-004: unregistering swradio4 [ 135.712982][ T8767] vivid-004: unregistering radio8 [ 135.721111][ T8767] vivid-004: unregistering radio9 [ 135.726698][ T8767] vivid-004: unregistering video25 [ 135.734868][ T8767] vivid-004: unregistering video26 [ 135.740709][ T8767] vivid-004: unregistering v4l-touch4 [ 135.773140][ T8767] vivid-005: unregistering video27 [ 135.776368][ T8767] vivid-005: unregistering video28 [ 135.780591][ T8767] vivid-005: unregistering vbi10 [ 135.785013][ T8767] vivid-005: unregistering vbi11 [ 135.794229][ T8767] vivid-005: unregistering swradio5 [ 135.799190][ T8767] vivid-005: unregistering radio10 [ 135.804210][ T8767] vivid-005: unregistering radio11 [ 135.809101][ T8767] vivid-005: unregistering video29 [ 135.813224][ T8767] vivid-005: unregistering video30 [ 135.816474][ T8767] vivid-005: unregistering v4l-touch5 [ 135.843290][ T8767] vivid-006: unregistering video31 [ 135.853261][ T8767] vivid-006: unregistering video32 [ 135.861620][ T8767] vivid-006: unregistering vbi12 [ 135.876440][ T8767] vivid-006: unregistering vbi13 [ 135.886135][ T8767] vivid-006: unregistering swradio6 [ 135.889407][ T8767] vivid-006: unregistering radio12 [ 135.895850][ T8767] vivid-006: unregistering radio13 [ 135.905665][ T8767] vivid-006: unregistering video33 [ 135.910430][ T8767] vivid-006: unregistering video34 [ 135.917152][ T8767] vivid-006: unregistering v4l-touch6 [ 135.977209][ T8767] vivid-007: unregistering video35 [ 135.986445][ T8767] vivid-007: unregistering video36 [ 135.992715][ T8767] vivid-007: unregistering vbi14 [ 135.993829][ T7781] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 135.999147][ T8767] vivid-007: unregistering vbi15 [ 136.005976][ T42] audit: type=1400 audit(1785531017.481:808): avc: denied { setopt } for pid=8794 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.009101][ T8767] vivid-007: unregistering swradio7 [ 136.012750][ T8795] sctp: [Deprecated]: syz.3.744 (pid 8795) Use of int in maxseg socket option. [ 136.012750][ T8795] Use struct sctp_assoc_value instead [ 136.039558][ T8767] vivid-007: unregistering radio14 [ 136.046223][ T8767] vivid-007: unregistering radio15 [ 136.055871][ T8767] vivid-007: unregistering video37 [ 136.061287][ T8767] vivid-007: unregistering video38 [ 136.066405][ T8767] vivid-007: unregistering v4l-touch7 [ 136.120378][ T8767] vivid-008: unregistering video39 [ 136.123695][ T8767] vivid-008: unregistering video40 [ 136.128235][ T8767] vivid-008: unregistering vbi16 [ 136.134424][ T8767] vivid-008: unregistering vbi17 [ 136.144140][ T7781] usb 10-1: device descriptor read/64, error -71 [ 136.146688][ T8767] vivid-008: unregistering swradio8 [ 136.159713][ T8804] netlink: 84 bytes leftover after parsing attributes in process `syz.1.747'. [ 136.167627][ T8767] vivid-008: unregistering radio16 [ 136.171087][ T8767] vivid-008: unregistering radio17 [ 136.175191][ T8767] vivid-008: unregistering video41 [ 136.189465][ T8767] vivid-008: unregistering video42 [ 136.199118][ T8767] vivid-008: unregistering v4l-touch8 [ 136.268918][ T8767] vivid-009: unregistering video43 [ 136.271681][ T5742] Bluetooth: hci5: command tx timeout [ 136.278253][ T8767] vivid-009: unregistering video44 [ 136.290335][ T8767] vivid-009: unregistering vbi18 [ 136.300785][ T8767] vivid-009: unregistering vbi19 [ 136.304286][ T8767] vivid-009: unregistering swradio9 [ 136.318896][ T8767] vivid-009: unregistering radio18 [ 136.329341][ T8767] vivid-009: unregistering radio19 [ 136.334165][ T8814] netlink: 'syz.3.750': attribute type 10 has an invalid length. [ 136.340169][ T8767] vivid-009: unregistering video45 [ 136.345186][ T8767] vivid-009: unregistering video46 [ 136.348137][ T8767] vivid-009: unregistering v4l-touch9 [ 136.361630][ T8814] team0: Port device veth0 added [ 136.381406][ T8767] vivid-010: unregistering video47 [ 136.386341][ T8767] vivid-010: unregistering video48 [ 136.390609][ T8767] vivid-010: unregistering vbi20 [ 136.395302][ T8767] vivid-010: unregistering vbi21 [ 136.397542][ T8767] vivid-010: unregistering swradio10 [ 136.401793][ T7781] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 136.416904][ T8767] vivid-010: unregistering radio20 [ 136.428144][ T8767] vivid-010: unregistering radio21 [ 136.437592][ T8767] vivid-010: unregistering video49 [ 136.446964][ T8767] vivid-010: unregistering video50 [ 136.452114][ T8767] vivid-010: unregistering v4l-touch10 [ 136.480342][ T8767] vivid-011: unregistering video51 [ 136.483262][ T8767] vivid-011: unregistering video52 [ 136.486848][ T8767] vivid-011: unregistering vbi22 [ 136.491077][ T8767] vivid-011: unregistering vbi23 [ 136.504333][ T8767] vivid-011: unregistering swradio11 [ 136.512290][ T8767] vivid-011: unregistering radio22 [ 136.516604][ T8767] vivid-011: unregistering radio23 [ 136.521233][ T8767] vivid-011: unregistering video53 [ 136.530831][ T8767] vivid-011: unregistering video54 [ 136.533784][ T8767] vivid-011: unregistering v4l-touch11 [ 136.549670][ T7781] usb 10-1: device descriptor read/64, error -71 [ 136.569110][ T8767] vivid-012: unregistering video55 [ 136.574819][ T8767] vivid-012: unregistering video56 [ 136.577299][ T8767] vivid-012: unregistering vbi24 [ 136.585528][ T8767] vivid-012: unregistering vbi25 [ 136.595345][ T8767] vivid-012: unregistering swradio12 [ 136.598003][ T8767] vivid-012: unregistering radio24 [ 136.600534][ T8767] vivid-012: unregistering radio25 [ 136.605845][ T8767] vivid-012: unregistering video57 [ 136.608282][ T8767] vivid-012: unregistering video58 [ 136.620175][ T8767] vivid-012: unregistering v4l-touch12 [ 136.650102][ T8767] vivid-013: unregistering video59 [ 136.652514][ T8767] vivid-013: unregistering video60 [ 136.655511][ T8767] vivid-013: unregistering vbi26 [ 136.665598][ T8767] vivid-013: unregistering vbi27 [ 136.669639][ T7781] usb usb10-port1: attempt power cycle [ 136.671780][ T8767] vivid-013: unregistering swradio13 [ 136.678006][ T8767] vivid-013: unregistering radio26 [ 136.684451][ T8767] vivid-013: unregistering radio27 [ 136.691824][ T8767] vivid-013: unregistering video61 [ 136.697549][ T8767] vivid-013: unregistering video62 [ 136.701321][ T8767] vivid-013: unregistering v4l-touch13 [ 136.727408][ T8767] vivid-014: unregistering video63 [ 136.729756][ T8767] vivid-014: unregistering video64 [ 136.732946][ T8767] vivid-014: unregistering vbi28 [ 136.736311][ T8767] vivid-014: unregistering vbi29 [ 136.741998][ T8767] vivid-014: unregistering swradio14 [ 136.750902][ T8767] vivid-014: unregistering radio28 [ 136.754150][ T8767] vivid-014: unregistering radio29 [ 136.756348][ T8767] vivid-014: unregistering video65 [ 136.758523][ T8767] vivid-014: unregistering video66 [ 136.763617][ T8767] vivid-014: unregistering v4l-touch14 [ 136.802836][ T8767] vivid-015: unregistering video67 [ 136.805172][ T8767] vivid-015: unregistering video68 [ 136.815635][ T34] IPVS: starting estimator thread 0... [ 136.816798][ T8767] vivid-015: unregistering vbi30 [ 136.836663][ T8767] vivid-015: unregistering vbi31 [ 136.839844][ T8767] vivid-015: unregistering swradio15 [ 136.842399][ T8767] vivid-015: unregistering radio30 [ 136.850737][ T8767] vivid-015: unregistering radio31 [ 136.857303][ T8767] vivid-015: unregistering video69 [ 136.861927][ T8838] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 136.863842][ T8767] vivid-015: unregistering video70 [ 136.866755][ T8767] vivid-015: unregistering v4l-touch15 [ 136.871932][ T8838] dlm: no locking on control device [ 136.874325][ T8838] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 136.877009][ T8838] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.760'. [ 136.883543][ T8838] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 136.896146][ T8767] vivid-016: unregistering video71 [ 136.902582][ T8767] vivid-016: unregistering video72 [ 136.905299][ T8767] vivid-016: unregistering vbi32 [ 136.909713][ T8767] vivid-016: unregistering vbi33 [ 136.914265][ T8836] IPVS: using max 49 ests per chain, 117600 per kthread [ 136.922367][ T8767] vivid-016: unregistering swradio16 [ 136.926423][ T8767] vivid-016: unregistering radio32 [ 136.936701][ T8767] vivid-016: unregistering radio33 [ 136.940144][ T8767] vivid-016: unregistering video73 [ 136.944099][ T8767] vivid-016: unregistering video74 [ 136.950474][ T8767] vivid-016: unregistering v4l-touch16 [ 136.992521][ T8845] kvm: MONITOR instruction emulated as NOP! [ 136.993935][ T8767] vivid-017: unregistering video75 [ 136.995458][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 136.996889][ T8767] vivid-017: unregistering video76 [ 136.999052][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'. [ 136.999075][ T8845] netlink: 'syz.1.762': attribute type 15 has an invalid length. [ 137.005902][ T8845] uhci_hcd 0000:00:1d.0: remove, state 1 [ 137.007147][ T8767] vivid-017: unregistering vbi34 [ 137.009794][ T8845] usb usb1: USB disconnect, device number 1 [ 137.011369][ T8767] vivid-017: unregistering vbi35 [ 137.011747][ T8845] usb 1-1: USB disconnect, device number 2 [ 137.014301][ T8767] vivid-017: unregistering swradio17 [ 137.026057][ T8767] vivid-017: unregistering radio34 [ 137.028615][ T8767] vivid-017: unregistering radio35 [ 137.031840][ T8767] vivid-017: unregistering video77 [ 137.035412][ T8767] vivid-017: unregistering video78 [ 137.042072][ T7781] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 137.047842][ T8767] vivid-017: unregistering v4l-touch17 [ 137.064340][ T7781] usb 10-1: device descriptor read/8, error -71 [ 137.098991][ T8767] vivid-018: unregistering video79 [ 137.104018][ T8767] vivid-018: unregistering video80 [ 137.108912][ T8845] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 137.115098][ T8767] vivid-018: unregistering vbi36 [ 137.123202][ T8767] vivid-018: unregistering vbi37 [ 137.138273][ T8767] vivid-018: unregistering swradio18 [ 137.158950][ T8767] vivid-018: unregistering radio36 [ 137.163339][ T8767] vivid-018: unregistering radio37 [ 137.165791][ T8767] vivid-018: unregistering video81 [ 137.168585][ T8767] vivid-018: unregistering video82 [ 137.173981][ T8767] vivid-018: unregistering v4l-touch18 [ 137.207122][ T8847] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 137.214067][ T8849] netlink: 'syz.3.763': attribute type 10 has an invalid length. [ 137.217640][ T8767] vivid-019: unregistering video83 [ 137.221872][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.222955][ T8767] vivid-019: unregistering video84 [ 137.225836][ T8849] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 137.228649][ T8767] vivid-019: unregistering vbi38 [ 137.229751][ T8849] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 137.231901][ T8847] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 137.236099][ T8767] vivid-019: unregistering vbi39 [ 137.242859][ T8849] netlink: 14 bytes leftover after parsing attributes in process `syz.3.763'. [ 137.245327][ T8767] vivid-019: unregistering swradio19 [ 137.248411][ T8847] pci 0000:00:1d.0: Adding to iommu group 7 [ 137.248800][ T8767] vivid-019: unregistering radio38 [ 137.258264][ T8767] vivid-019: unregistering radio39 [ 137.260050][ T8847] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 137.263363][ T8767] vivid-019: unregistering video85 [ 137.267086][ T8849] bond0 (unregistering): left promiscuous mode [ 137.267602][ T8767] vivid-019: unregistering video86 [ 137.269081][ T8849] bond_slave_0: left promiscuous mode [ 137.271396][ T8767] vivid-019: unregistering v4l-touch19 [ 137.272574][ T8849] bond_slave_1: left promiscuous mode [ 137.275874][ T8849] veth0_to_bond: left promiscuous mode [ 137.278022][ T8849] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 137.284275][ T8849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.289666][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.296146][ T8767] vivid-020: unregistering video87 [ 137.299686][ T8767] vivid-020: unregistering video88 [ 137.304518][ T8767] vivid-020: unregistering vbi40 [ 137.305102][ T8849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.307817][ T8767] vivid-020: unregistering vbi41 [ 137.313082][ T8767] vivid-020: unregistering swradio20 [ 137.315505][ T8767] vivid-020: unregistering radio40 [ 137.318396][ T8849] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 137.320028][ T8767] vivid-020: unregistering radio41 [ 137.325958][ T8767] vivid-020: unregistering video89 [ 137.328268][ T8849] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 137.328413][ T8767] vivid-020: unregistering video90 [ 137.334023][ T8767] vivid-020: unregistering v4l-touch20 [ 137.340330][ T7781] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 137.341577][ T8849] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 137.352272][ T8849] bond0 (unregistering): Released all slaves [ 137.362338][ T8767] vivid-021: unregistering video91 [ 137.364743][ T8767] vivid-021: unregistering video92 [ 137.365195][ T7781] usb 10-1: device descriptor read/8, error -71 [ 137.366638][ T8847] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 92284 usecs [ 137.366990][ T8767] vivid-021: unregistering vbi42 [ 137.368538][ T8767] vivid-021: unregistering vbi43 [ 137.376318][ T8767] vivid-021: unregistering swradio21 [ 137.380339][ T8767] vivid-021: unregistering radio42 [ 137.383342][ T8767] vivid-021: unregistering radio43 [ 137.385783][ T8767] vivid-021: unregistering video93 [ 137.389127][ T8767] vivid-021: unregistering video94 [ 137.396939][ T8767] vivid-021: unregistering v4l-touch21 [ 137.425009][ T8847] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 137.431738][ T8767] vivid-022: unregistering video95 [ 137.431933][ T8847] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 137.437947][ T8847] uhci_hcd 0000:00:1d.0: detected 2 ports [ 137.438130][ T8767] vivid-022: unregistering video96 [ 137.441115][ T8847] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 137.444757][ T8847] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 137.446342][ T8767] vivid-022: unregistering vbi44 [ 137.448127][ T8847] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 137.451358][ T8767] vivid-022: unregistering vbi45 [ 137.451977][ T8847] usb usb1: Product: UHCI Host Controller [ 137.454392][ T8767] vivid-022: unregistering swradio22 [ 137.457108][ T8847] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 137.461607][ T8767] vivid-022: unregistering radio44 [ 137.461846][ T8847] usb usb1: SerialNumber: 0000:00:1d.0 [ 137.465239][ T8767] vivid-022: unregistering radio45 [ 137.477543][ T8767] vivid-022: unregistering video97 [ 137.481776][ T8847] hub 1-0:1.0: USB hub found [ 137.484375][ T8767] vivid-022: unregistering video98 [ 137.484375][ T8847] hub 1-0:1.0: 2 ports detected [ 137.485060][ T8767] vivid-022: unregistering v4l-touch22 [ 137.490873][ T7781] usb usb10-port1: unable to enumerate USB device [ 137.518582][ T8767] vivid-023: unregistering video99 [ 137.524441][ T8767] vivid-023: unregistering video100 [ 137.527809][ T8767] vivid-023: unregistering vbi46 [ 137.531054][ T8767] vivid-023: unregistering vbi47 [ 137.533985][ T8767] vivid-023: unregistering swradio23 [ 137.537335][ T8767] vivid-023: unregistering radio46 [ 137.540250][ T8767] vivid-023: unregistering radio47 [ 137.542389][ T8767] vivid-023: unregistering video101 [ 137.546424][ T8767] vivid-023: unregistering video102 [ 137.549382][ T8767] vivid-023: unregistering v4l-touch23 [ 137.756984][ T29] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 137.926048][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 137.960835][ T29] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 137.963675][ T29] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 137.966190][ T29] usb 1-1: Product: QEMU USB Tablet [ 137.967832][ T29] usb 1-1: Manufacturer: QEMU [ 137.969303][ T29] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 137.988548][ T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input17 [ 138.058726][ T29] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 138.627314][ T8880] __nla_validate_parse: 1 callbacks suppressed [ 138.627328][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 138.633035][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.776'. [ 138.668715][ T8882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.777'. [ 138.675280][ T8882] tmpfs: Bad value for 'mpol' [ 138.705190][ T8884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8884 comm=syz.2.778 [ 138.890548][ T8893] vlan2: entered promiscuous mode [ 138.892309][ T8893] bridge0: entered promiscuous mode [ 138.939055][ T42] audit: type=1400 audit(1785531020.223:809): avc: denied { write } for pid=8892 comm="syz.2.782" name="functions" dev="configfs" ino=10212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.939191][ T8893] Mass Storage Function, version: 2009/09/11 [ 138.954475][ T8893] LUN: removable file: (no medium) [ 138.960609][ T42] audit: type=1400 audit(1785531020.242:810): avc: denied { mounton } for pid=8892 comm="syz.2.782" path="/86/my_configfs/usb_gadget/g1/functions/mass_storage.usb0" dev="configfs" ino=29634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.031354][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 139.034497][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.787'. [ 139.035434][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'. [ 139.076295][ T42] audit: type=1400 audit(1785531020.354:811): avc: denied { ioctl } for pid=8907 comm="syz.5.788" path="socket:[30057]" dev="sockfs" ino=30057 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 139.115829][ T8908] ublk1: read batch cmd buffer failed [ 139.117883][ T8908] ublk1: read batch cmd buffer failed [ 139.307645][ T24] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 139.411084][ T8923] netlink: 44 bytes leftover after parsing attributes in process `syz.5.792'. [ 139.480749][ T24] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 139.483887][ T24] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 139.486550][ T24] usb 7-1: Product: syz [ 139.488361][ T24] usb 7-1: Manufacturer: syz [ 139.490106][ T24] usb 7-1: SerialNumber: syz [ 139.493411][ T24] usb 7-1: config 0 descriptor?? [ 139.669753][ T6626] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 139.714354][ T42] audit: type=1400 audit(1785531020.953:812): avc: denied { accept } for pid=8902 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.720925][ T34] usb 7-1: USB disconnect, device number 16 [ 139.829989][ T6626] usb 10-1: device descriptor read/64, error -71 [ 140.086496][ T6626] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 140.236101][ T6626] usb 10-1: device descriptor read/64, error -71 [ 140.365247][ T6626] usb usb10-port1: attempt power cycle [ 140.567395][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 140.727801][ T6626] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 140.734346][ T24] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 140.737403][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.740264][ T24] usb 7-1: Product: syz [ 140.741659][ T24] usb 7-1: Manufacturer: syz [ 140.743770][ T24] usb 7-1: SerialNumber: syz [ 140.752896][ T24] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 140.757427][ T24] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 140.762973][ T6626] usb 10-1: device descriptor read/8, error -71 [ 140.766541][ T24] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 141.026852][ T6626] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 141.048978][ T6626] usb 10-1: device descriptor read/8, error -71 [ 141.165909][ T6626] usb usb10-port1: unable to enumerate USB device [ 142.172517][ T8926] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 142.177319][ T8926] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 142.180113][ T8926] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 142.184662][ T8926] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 142.189167][ T5746] usb 7-1: USB disconnect, device number 17 [ 142.207731][ T5746] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 142.215986][ T5746] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 142.222640][ T5746] ti_usb_3410_5052 7-1:2.0: device disconnected [ 142.605558][ T42] audit: type=1400 audit(1785531023.658:813): avc: denied { append } for pid=8928 comm="syz.5.794" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.614542][ T42] audit: type=1400 audit(1785531023.667:814): avc: denied { map } for pid=8928 comm="syz.5.794" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.623808][ T42] audit: type=1400 audit(1785531023.667:815): avc: denied { execute } for pid=8928 comm="syz.5.794" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 144.111272][ T42] audit: type=1400 audit(1785531025.061:816): avc: denied { connect } for pid=8964 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.117985][ T42] audit: type=1400 audit(1785531025.071:817): avc: denied { shutdown } for pid=8964 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.210612][ T42] audit: type=1400 audit(1785531025.155:818): avc: denied { mount } for pid=8969 comm="syz.5.808" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.217538][ T42] audit: type=1400 audit(1785531025.155:819): avc: denied { write } for pid=8969 comm="syz.5.808" name="free_buffer" dev="tracefs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 144.224345][ T42] audit: type=1400 audit(1785531025.164:820): avc: denied { open } for pid=8969 comm="syz.5.808" path="/45/tracefs_dir/free_buffer" dev="tracefs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 144.231789][ T42] audit: type=1400 audit(1785531025.164:821): avc: denied { read } for pid=8969 comm="syz.5.808" name="trace" dev="tracefs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 146.032659][ T8941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.061315][ T42] audit: type=1400 audit(1785531026.886:822): avc: denied { unmount } for pid=8236 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 146.088395][ T8973] max out of range [ 146.100916][ T8973] netlink: 44 bytes leftover after parsing attributes in process `syz.5.809'. [ 146.146133][ T8979] netlink: 'syz.5.812': attribute type 1 has an invalid length. [ 146.149355][ T8979] netlink: 224 bytes leftover after parsing attributes in process `syz.5.812'. [ 146.220319][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.815'. [ 146.289412][ T8990] netlink: 'syz.2.817': attribute type 9 has an invalid length. [ 146.292580][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 146.604538][ T9009] netlink: 68 bytes leftover after parsing attributes in process `syz.5.823'. [ 146.715160][ T9011] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 146.743921][ T1353] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 146.908917][ T1353] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 146.912760][ T1353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.916066][ T1353] usb 7-1: Product: syz [ 146.917848][ T1353] usb 7-1: Manufacturer: syz [ 146.919780][ T1353] usb 7-1: SerialNumber: syz [ 146.927711][ T1353] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 146.937384][ T1353] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 146.944446][ T1353] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 147.678246][ T7782] usb 7-1: USB disconnect, device number 18 [ 147.701447][ T7782] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 147.709739][ T9021] Attempt to restore checkpoint with obsolete wellknown handles [ 147.713326][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.827'. [ 147.717698][ T9021] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 147.731400][ T7782] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 147.743311][ T7782] ti_usb_3410_5052 7-1:2.0: device disconnected [ 147.980544][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 147.980563][ T42] audit: type=1400 audit(1785531028.683:826): avc: denied { create } for pid=9028 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.988192][ T42] audit: type=1400 audit(1785531028.683:827): avc: denied { write } for pid=9028 comm="syz.5.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.669558][ T42] audit: type=1400 audit(1785531029.338:828): avc: denied { write } for pid=9067 comm="syz.2.842" name="/" dev="9p" ino=78395253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.677212][ T42] audit: type=1400 audit(1785531029.338:829): avc: denied { remove_name } for pid=9067 comm="syz.2.842" name="file0" dev="9p" ino=78395437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.684560][ T42] audit: type=1400 audit(1785531029.338:830): avc: denied { unlink } for pid=9067 comm="syz.2.842" name="file0" dev="9p" ino=78395437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.695011][ T42] audit: type=1400 audit(1785531029.357:831): avc: denied { write } for pid=9067 comm="syz.2.842" name="/" dev="9p" ino=78395253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.703448][ T42] audit: type=1400 audit(1785531029.357:832): avc: denied { create } for pid=9067 comm="syz.2.842" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 148.711923][ T9068] binder: 9067:9068 ioctl c0306201 0 returned -14 [ 148.716081][ T9068] macvtap0: entered allmulticast mode [ 148.717823][ T9068] veth0_macvtap: entered allmulticast mode [ 148.952258][ T5742] Bluetooth: hci0: unexpected event for opcode 0x200d [ 148.975658][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'. [ 148.997234][ T9075] ±ÿ: renamed from lo (while UP) [ 149.042895][ T42] audit: type=1400 audit(1785531029.684:833): avc: denied { read } for pid=9078 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.078199][ T9081] netlink: 'syz.2.847': attribute type 23 has an invalid length. [ 149.102855][ T42] audit: type=1400 audit(1785531029.731:834): avc: denied { setopt } for pid=9082 comm="syz.5.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 149.186128][ T5742] Bluetooth: hci0: unexpected event for opcode 0x200d [ 149.242985][ T9099] input: syz0 as /devices/virtual/input/input19 [ 149.318913][ T42] audit: type=1400 audit(1785531029.937:835): avc: denied { name_bind } for pid=9113 comm="syz.5.858" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.561223][ T9130] loop8: detected capacity change from 0 to 4194304 [ 149.608752][ T9130] /dev/nullb0: Can't open blockdev [ 150.611480][ T5742] Bluetooth: hci0: unexpected event for opcode 0x000d [ 150.745488][ T9148] 8021q: VLANs not supported on ip_vti0 [ 150.748591][ T9149] 8021q: VLANs not supported on ip_vti0 [ 151.488642][ T6626] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 151.488654][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.496216][ T6626] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 152.844763][ T9152] xt_hashlimit: size too large, truncated to 1048576 [ 152.958243][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.971842][ T9151] bridge_slave_0 (unregistering): left allmulticast mode [ 152.975652][ T9151] bridge_slave_0 (unregistering): left promiscuous mode [ 152.978354][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.369605][ T7782] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 153.531927][ T7782] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 153.536495][ T7782] usb 10-1: config 0 interface 0 has no altsetting 0 [ 153.541679][ T7782] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.545551][ T7782] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.548836][ T7782] usb 10-1: Product: syz [ 153.550496][ T7782] usb 10-1: Manufacturer: syz [ 153.552615][ T7782] usb 10-1: SerialNumber: syz [ 153.557129][ T7782] usb 10-1: config 0 descriptor?? [ 153.572103][ T7782] usb 10-1: selecting invalid altsetting 0 [ 153.711430][ T6626] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.711879][ T5742] Bluetooth: hci0: command 0x041b tx timeout [ 153.714103][ T6626] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 153.861349][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.865725][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.878247][ T5833] usb 10-1: USB disconnect, device number 12 [ 153.878312][ C0] usb 10-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 153.885285][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 154.460825][ T9161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9161 comm=syz.5.874 [ 154.464712][ T9161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9161 comm=syz.5.874 [ 154.468540][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.874'. [ 154.484229][ T9161] i2c i2c-0: new_device: Extra parameters [ 154.625808][ T5742] Bluetooth: hci5: unexpected event for opcode 0x000d [ 154.739991][ T9175] netlink: 'syz.5.880': attribute type 49 has an invalid length. [ 154.746123][ T9175] bond0: (slave bond_slave_0): Releasing backup interface [ 154.821550][ T9175] bond_slave_0: entered promiscuous mode [ 154.824223][ T9175] bond_slave_0: entered allmulticast mode [ 154.904353][ T9183] netlink: 'syz.5.881': attribute type 10 has an invalid length. [ 154.906960][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.914434][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.917081][ T9183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.923512][ T9183] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.961591][ T42] kauditd_printk_skb: 30819 callbacks suppressed [ 154.961604][ T42] audit: type=1400 audit(1785531035.215:31655): avc: denied { write } for pid=9188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.015915][ T42] audit: type=1400 audit(1785531035.271:31656): avc: denied { write } for pid=9196 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.028913][ T7460] nvmet: connect request for invalid subsystem n! [ 155.035633][ T9193] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 155.051764][ T9198] policy can only be matched on NF_INET_PRE_ROUTING [ 155.051778][ T9198] unable to load match [ 155.057003][ T9198] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 155.059118][ T9198] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.064861][ T9198] vhci_hcd vhci_hcd.0: Device attached [ 155.285219][ T9200] vhci_hcd: connection closed [ 155.288088][ T12] vhci_hcd vhci_hcd.5: stop threads [ 155.291588][ T12] vhci_hcd vhci_hcd.5: release socket [ 155.296419][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 155.325139][ T7782] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 155.327981][ T7782] usb 47-1: enqueue for inactive port 0 [ 155.410369][ T7782] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 155.923370][ T6626] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 155.925871][ T6626] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 155.984226][ T5751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.994938][ T64] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.995318][ T5751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.008273][ T5751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.009399][ T64] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.015432][ T64] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.015943][ T5751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.018678][ T64] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.025377][ T5751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.027237][ T64] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.047337][ T5754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.047712][ T5742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.053570][ T5742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.053933][ T5754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.058510][ T5742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.062205][ T5742] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.065677][ T5742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.073938][ T5754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.083729][ T64] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.090599][ T64] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.284499][ T9159] vcan0 speed is unknown, defaulting to 1000 [ 156.385086][ T9190] vcan0 speed is unknown, defaulting to 1000 [ 156.592198][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.595242][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.597784][ T9159] bridge_slave_0: entered allmulticast mode [ 156.601230][ T9159] bridge_slave_0: entered promiscuous mode [ 156.616657][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.619423][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.621934][ T9159] bridge_slave_1: entered allmulticast mode [ 156.624848][ T9159] bridge_slave_1: entered promiscuous mode [ 156.653984][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.664981][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.689348][ T9159] team0: Port device team_slave_0 added [ 156.693450][ T9159] team0: Port device team_slave_1 added [ 156.714246][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.716592][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.724809][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.739173][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.741402][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.749475][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.816252][ T9159] hsr_slave_0: entered promiscuous mode [ 156.819255][ T9159] hsr_slave_1: entered promiscuous mode [ 156.822746][ T9159] debugfs: 'hsr0' already exists in 'hsr' [ 156.825381][ T9159] Cannot create hsr debugfs directory [ 156.843670][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.846308][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.849162][ T9190] bridge_slave_0: entered allmulticast mode [ 156.852565][ T9190] bridge_slave_0: entered promiscuous mode [ 156.863100][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.865495][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.868016][ T9190] bridge_slave_1: entered allmulticast mode [ 156.870773][ T9190] bridge_slave_1: entered promiscuous mode [ 156.907851][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.912604][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.947798][ T9190] team0: Port device team_slave_0 added [ 156.966848][ T9190] team0: Port device team_slave_1 added [ 157.008903][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.011013][ T42] audit: type=1400 audit(1785531037.133:31657): avc: denied { wake_alarm } for pid=9244 comm="syz.5.887" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.011670][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.030357][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.041604][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.043843][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.052205][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.121118][ T9190] hsr_slave_0: entered promiscuous mode [ 157.124399][ T9190] hsr_slave_1: entered promiscuous mode [ 157.127297][ T9190] debugfs: 'hsr0' already exists in 'hsr' [ 157.129664][ T9190] Cannot create hsr debugfs directory [ 157.160597][ T9159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.172520][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.176328][ T9159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.184193][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.202903][ T9159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.216386][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.222992][ T9159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.227427][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.361953][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.428242][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.431545][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.435406][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.439644][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.443084][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.446735][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.450381][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.460180][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.463800][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.478360][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 157.486101][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.488536][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.512130][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.515078][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.521222][ T9190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.528131][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.533739][ T9190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.542099][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.545717][ T9190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.550408][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.554779][ T9190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.559543][ T9190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.667489][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.685952][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.694496][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.697230][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.709747][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.712717][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.872830][ T9299] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.917519][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.981393][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.084357][ T9159] veth0_vlan: entered promiscuous mode [ 158.091630][ T9159] veth1_vlan: entered promiscuous mode [ 158.107339][ T9159] veth0_macvtap: entered promiscuous mode [ 158.111551][ T9159] veth1_macvtap: entered promiscuous mode [ 158.129050][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.148853][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.201858][ T9190] veth0_vlan: entered promiscuous mode [ 158.224245][ T9190] veth1_vlan: entered promiscuous mode [ 158.259800][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.263997][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.291766][ T9190] veth0_macvtap: entered promiscuous mode [ 158.298082][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.299232][ T9190] veth1_macvtap: entered promiscuous mode [ 158.302009][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.313634][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.320827][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.328419][ T5754] Bluetooth: hci7: command tx timeout [ 158.328443][ T5742] Bluetooth: hci6: command tx timeout [ 158.332082][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.336673][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.392484][ T9250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.395490][ T9250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.412876][ T9336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9336 comm=syz.6.873 [ 158.457948][ T7460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.460784][ T7460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.509097][ T7460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.513627][ T7460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.520030][ T9250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.529774][ T9250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.534981][ T9250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.537674][ T9250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.544875][ T9334] zram: Cannot change disksize for initialized device [ 158.744697][ T6626] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 158.907506][ T6626] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 158.911115][ T6626] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.915158][ T6626] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.918913][ T6626] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.921615][ T6626] usb 11-1: Product: syz [ 158.923004][ T6626] usb 11-1: Manufacturer: syz [ 158.924590][ T6626] usb 11-1: SerialNumber: syz [ 158.931121][ T6626] usb 11-1: config 0 descriptor?? [ 158.938093][ T6626] usb 11-1: selecting invalid altsetting 0 [ 159.228228][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.232098][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.257083][ T50] usb 11-1: USB disconnect, device number 2 [ 159.257083][ C2] usb 11-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 159.257551][ T9338] usb 11-1: cannot submit urb 0, error -19: no device [ 159.264393][ T9338] usb 11-1: cannot submit urb 0, error -19: no device [ 159.266741][ T9338] usb 11-1: cannot submit urb 0, error -19: no device [ 159.269400][ T9338] usb 11-1: cannot submit urb 0, error -19: no device [ 159.271678][ T9338] usb 11-1: cannot submit urb 0, error -19: no device [ 159.449875][ T9360] X25: received unknown 00 with LCI 000 [ 159.612490][ T42] audit: type=1400 audit(1785531039.576:31658): avc: denied { write } for pid=9363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.644324][ T42] audit: type=1400 audit(1785531039.594:31659): avc: denied { setattr } for pid=9364 comm="syz.5.910" name="NETLINK" dev="sockfs" ino=34846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.673245][ T42] audit: type=1400 audit(1785531039.622:31660): avc: denied { write } for pid=9370 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.779386][ T42] audit: type=1400 audit(1785531039.725:31661): avc: denied { write } for pid=9380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.846229][ T42] audit: type=1400 audit(1785531039.781:31662): avc: denied { write } for pid=9386 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.930482][ T9395] No buffer was provided with the request [ 159.932936][ T42] audit: type=1400 audit(1785531039.866:31663): avc: denied { write } for pid=9391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.944563][ T42] audit: type=1400 audit(1785531039.884:31664): avc: denied { block_suspend } for pid=9393 comm="syz.6.914" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.090795][ T9332] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 160.253811][ T9332] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.257110][ T9332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.259966][ T9332] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 160.264049][ T9332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.270673][ T9332] usb 10-1: config 0 descriptor?? [ 160.291971][ T9332] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 160.295718][ T9332] dvb-usb: bulk message failed: -22 (3/0) [ 160.314221][ T9332] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 160.321191][ T9332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 160.324778][ T9332] usb 10-1: media controller created [ 160.333977][ T9332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.355590][ T9414] __nla_validate_parse: 58 callbacks suppressed [ 160.355612][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.918'. [ 160.365796][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.918'. [ 160.380487][ T9332] dvb-usb: bulk message failed: -22 (6/0) [ 160.384463][ T9332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 160.395888][ T9332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input20 [ 160.408691][ T9332] dvb-usb: schedule remote query interval to 150 msecs. [ 160.412451][ T9332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 160.539878][ T5754] Bluetooth: hci6: command tx timeout [ 160.551637][ T5754] Bluetooth: hci7: command tx timeout [ 160.589324][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 160.592133][ T9332] dvb-usb: error while querying for an remote control event. [ 160.635783][ T1353] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 160.738586][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 160.738598][ T42] audit: type=1400 audit(1785531040.624:31668): avc: denied { watch watch_reads } for pid=9422 comm="syz.5.920" path="/110/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 160.777242][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 160.781578][ T7781] dvb-usb: error while querying for an remote control event. [ 160.797570][ T1353] usb 12-1: not running at top speed; connect to a high speed hub [ 160.803038][ T1353] usb 12-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 160.806128][ T1353] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.809036][ T1353] usb 12-1: Product: syz [ 160.810490][ T1353] usb 12-1: Manufacturer: syz [ 160.812076][ T1353] usb 12-1: SerialNumber: syz [ 160.824017][ T1353] oti6858 12-1:1.0: oti6858 converter detected [ 160.833912][ T1353] usb 12-1: oti6858 converter now attached to ttyUSB0 [ 160.967445][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 160.969550][ T9332] dvb-usb: error while querying for an remote control event. [ 161.159498][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 161.161751][ T9332] dvb-usb: error while querying for an remote control event. [ 161.300027][ T40] usb 12-1: USB disconnect, device number 2 [ 161.328328][ T40] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 161.330662][ T9332] dvb-usb: bulk message failed: -22 (1/0) [ 161.331357][ T40] oti6858 12-1:1.0: device disconnected [ 161.338541][ T9332] dvb-usb: error while querying for an remote control event. [ 161.367958][ T9438] IPv6: sit1: Disabled Multicast RS [ 161.371120][ T9438] sit1: entered allmulticast mode [ 161.522999][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 161.524415][ T42] audit: type=1400 audit(1785531041.363:31669): avc: denied { ioctl } for pid=9442 comm="syz.7.927" path="socket:[33324]" dev="sockfs" ino=33324 ioctlcmd=0xae60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.525776][ T5746] dvb-usb: error while querying for an remote control event. [ 161.537216][ T42] audit: type=1400 audit(1785531041.363:31670): avc: denied { setattr } for pid=9442 comm="syz.7.927" name="PING" dev="sockfs" ino=33324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.636397][ T9449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.929'. [ 161.718846][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 161.721210][ T1498] dvb-usb: error while querying for an remote control event. [ 161.886116][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 161.888068][ T1498] dvb-usb: error while querying for an remote control event. [ 161.961469][ T34] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 162.059490][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.061714][ T7781] dvb-usb: error while querying for an remote control event. [ 162.144539][ T34] usb 12-1: device descriptor read/all, error -61 [ 162.228511][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.230455][ T7781] dvb-usb: error while querying for an remote control event. [ 162.236388][ T42] audit: type=1400 audit(1785531042.027:31671): avc: denied { getopt } for pid=9454 comm="syz.6.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.292473][ T34] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 162.399231][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.401172][ T7781] dvb-usb: error while querying for an remote control event. [ 162.431061][ T34] usb 12-1: device descriptor read/64, error -71 [ 162.527450][ T5825] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 162.548979][ T34] usb usb12-port1: attempt power cycle [ 162.570028][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.571803][ T7781] dvb-usb: error while querying for an remote control event. [ 162.693479][ T5825] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 162.697997][ T5825] usb 11-1: config 0 interface 0 has no altsetting 0 [ 162.703082][ T5825] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.706497][ T5825] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.709780][ T5825] usb 11-1: Product: syz [ 162.711089][ T5825] usb 11-1: Manufacturer: syz [ 162.712967][ T5825] usb 11-1: SerialNumber: syz [ 162.717552][ T5825] usb 11-1: config 0 descriptor?? [ 162.725045][ T5825] usb 11-1: selecting invalid altsetting 0 [ 162.740918][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.742825][ T7781] dvb-usb: error while querying for an remote control event. [ 162.762471][ T5754] Bluetooth: hci7: command tx timeout [ 162.762589][ T5742] Bluetooth: hci6: command tx timeout [ 162.911928][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 162.912049][ T34] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 162.913914][ T7781] dvb-usb: error while querying for an remote control event. [ 162.934240][ T34] usb 12-1: device descriptor read/8, error -71 [ 163.021495][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.025666][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.048834][ T40] usb 11-1: USB disconnect, device number 3 [ 163.048898][ C2] usb 11-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 163.048998][ C2] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 163.049150][ T9459] usb 11-1: cannot submit urb 0, error -19: no device [ 163.094112][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 163.095974][ T7781] dvb-usb: error while querying for an remote control event. [ 163.190595][ T34] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 163.211773][ T34] usb 12-1: device descriptor read/8, error -71 [ 163.265380][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 163.267784][ T7781] dvb-usb: error while querying for an remote control event. [ 163.329270][ T34] usb usb12-port1: unable to enumerate USB device [ 163.453382][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 163.455828][ T7781] dvb-usb: error while querying for an remote control event. [ 163.628884][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 163.630933][ T7781] dvb-usb: error while querying for an remote control event. [ 163.650135][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.932'. [ 163.678983][ T9467] netlink: 'syz.6.933': attribute type 2 has an invalid length. [ 163.692952][ T9467] : entered promiscuous mode [ 163.799772][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 163.802912][ T7781] dvb-usb: error while querying for an remote control event. [ 163.970369][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 163.972491][ T1498] dvb-usb: error while querying for an remote control event. [ 164.001132][ T42] audit: type=1400 audit(1785531043.674:31672): avc: denied { getopt } for pid=9478 comm="syz.6.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.004651][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.6.937'. [ 164.010477][ T9479] nbd: illegal input index 67111936 [ 164.141193][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.143521][ T1498] dvb-usb: error while querying for an remote control event. [ 164.315215][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.317192][ T1498] dvb-usb: error while querying for an remote control event. [ 164.484295][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.486613][ T1498] dvb-usb: error while querying for an remote control event. [ 164.653764][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.656127][ T1498] dvb-usb: error while querying for an remote control event. [ 164.825908][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.828254][ T1498] dvb-usb: error while querying for an remote control event. [ 164.941559][ T9495] openvswitch: netlink: IPv4 tunnel dst address is zero [ 164.944893][ T9495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.985382][ T5742] Bluetooth: hci7: command tx timeout [ 164.985615][ T5754] Bluetooth: hci6: command tx timeout [ 164.996964][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 164.998746][ T1498] dvb-usb: error while querying for an remote control event. [ 165.029818][ T42] audit: type=1400 audit(1785531044.648:31673): avc: denied { write } for pid=9505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.099585][ T42] audit: type=1400 audit(1785531044.704:31674): avc: denied { write } for pid=9512 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.166694][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 165.169300][ T7781] dvb-usb: error while querying for an remote control event. [ 165.274119][ T1353] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 165.321977][ T9522] XFS (nbd5): SB validate failed with error -5. [ 165.343758][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 165.345863][ T7781] dvb-usb: error while querying for an remote control event. [ 165.435784][ T1353] usb 12-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 165.439514][ T1353] usb 12-1: config 0 interface 0 has no altsetting 0 [ 165.443863][ T1353] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.446819][ T1353] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.447628][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.948'. [ 165.449576][ T1353] usb 12-1: Product: syz [ 165.453850][ T1353] usb 12-1: Manufacturer: syz [ 165.455531][ T1353] usb 12-1: SerialNumber: syz [ 165.458605][ T1353] usb 12-1: config 0 descriptor?? [ 165.483712][ T1353] usb 12-1: selecting invalid altsetting 0 [ 165.519552][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 165.521374][ T7781] dvb-usb: error while querying for an remote control event. [ 165.599610][ T9539] netlink: 84 bytes leftover after parsing attributes in process `syz.5.952'. [ 165.602416][ T9539] nbd: must specify at least one socket [ 165.605547][ T9539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9539 comm=syz.5.952 [ 165.699905][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 165.702607][ T7781] dvb-usb: error while querying for an remote control event. [ 165.778905][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.791050][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.813558][ T9549] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 165.837569][ T29] usb 12-1: USB disconnect, device number 7 [ 165.837581][ C3] usb 12-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 165.837660][ C3] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 165.873913][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 165.875727][ T7781] dvb-usb: error while querying for an remote control event. [ 166.053748][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 166.055858][ T7781] dvb-usb: error while querying for an remote control event. [ 166.061062][ T9558] bond1: entered promiscuous mode [ 166.223210][ T9573] i2c i2c-1: dtv_property_process_set: SET cmd 0x000007c0 undefined [ 166.226234][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 166.228248][ T7781] dvb-usb: error while querying for an remote control event. [ 166.371979][ T42] audit: type=1400 audit(1785531045.892:31675): avc: denied { bind } for pid=9586 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.396103][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 166.398138][ T1498] dvb-usb: error while querying for an remote control event. [ 166.498487][ T9601] binder: 9599:9601 ioctl 400c620e 200000000180 returned -22 [ 166.532521][ T9605] IPv6: Can't replace route, no match found [ 166.566621][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 166.568873][ T1498] dvb-usb: error while querying for an remote control event. [ 166.653426][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.7.975'. [ 166.737525][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 166.739579][ T1498] dvb-usb: error while querying for an remote control event. [ 166.804911][ T42] audit: type=1400 audit(1785531046.304:31676): avc: denied { mounton } for pid=9621 comm="syz.5.978" path="/proc/399/task" dev="proc" ino=34600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 166.869656][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.880973][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.884893][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.891436][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.896793][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.908756][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 166.910627][ T1498] dvb-usb: error while querying for an remote control event. [ 166.991924][ T42] audit: type=1400 audit(1785531046.472:31677): avc: denied { lock } for pid=9636 comm="syz.5.982" path="socket:[33524]" dev="sockfs" ino=33524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.028774][ T42] audit: type=1400 audit(1785531046.519:31678): avc: denied { ioctl } for pid=9640 comm="syz.7.979" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 167.079450][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 167.081237][ T1498] dvb-usb: error while querying for an remote control event. [ 167.099246][ T9625] vcan0 speed is unknown, defaulting to 1000 [ 167.135376][ T9647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9647 comm=syz.5.984 [ 167.139660][ T9647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9647 comm=syz.5.984 [ 167.250612][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 167.253061][ T1498] dvb-usb: error while querying for an remote control event. [ 167.357087][ T9664] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 167.363860][ T42] audit: type=1400 audit(1785531046.828:31679): avc: denied { relabelto } for pid=9663 comm="syz.6.987" name="cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 167.374952][ T42] audit: type=1400 audit(1785531046.828:31680): avc: denied { associate } for pid=9663 comm="syz.6.987" name="cgroup.procs" dev="cgroup" ino=642 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 167.421727][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 167.422042][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.426554][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.426698][ T7781] dvb-usb: error while querying for an remote control event. [ 167.429216][ T9625] bridge_slave_0: entered allmulticast mode [ 167.438287][ T9625] bridge_slave_0: entered promiscuous mode [ 167.446411][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.451079][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.453507][ T9625] bridge_slave_1: entered allmulticast mode [ 167.456732][ T9625] bridge_slave_1: entered promiscuous mode [ 167.487871][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.492884][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.510075][ T9625] team0: Port device team_slave_0 added [ 167.513361][ T9625] team0: Port device team_slave_1 added [ 167.526690][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.529053][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.536627][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.541296][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.543591][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.551295][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.567221][ T9673] program syz.6.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.574477][ T9673] overlayfs: statfs failed on './file0' [ 167.583445][ T9625] hsr_slave_0: entered promiscuous mode [ 167.585730][ T9625] hsr_slave_1: entered promiscuous mode [ 167.587841][ T9625] debugfs: 'hsr0' already exists in 'hsr' [ 167.589667][ T9625] Cannot create hsr debugfs directory [ 167.603091][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 167.605772][ T7781] dvb-usb: error while querying for an remote control event. [ 167.617762][ T42] audit: type=1326 audit(1785531047.062:31681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.5.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e019 code=0x7ffc0000 [ 167.625282][ T42] audit: type=1326 audit(1785531047.062:31682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.5.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e019 code=0x7ffc0000 [ 167.632701][ T42] audit: type=1326 audit(1785531047.062:31683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.5.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57119e019 code=0x7ffc0000 [ 167.640110][ T42] audit: type=1326 audit(1785531047.062:31684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.5.989" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc57119e019 code=0x7ffc0000 [ 167.687369][ T9679] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 167.690318][ T9679] SELinux: failed to load policy [ 167.767732][ T9681] ip6t_srh: unknown srh match flags 4000 [ 167.784765][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 167.787214][ T9625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.787345][ T7781] dvb-usb: error while querying for an remote control event. [ 167.808613][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.812756][ T9625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.841124][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.849571][ T9625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.857066][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.868668][ T9625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.877234][ T9625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.912760][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.915151][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.917574][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.920344][ T9625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.933451][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.997'. [ 167.967704][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 167.969513][ T7781] dvb-usb: error while querying for an remote control event. [ 168.001431][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.034112][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.041427][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.071683][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.086254][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.088520][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.103644][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.106445][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.127201][ T5754] Bluetooth: hci7: unexpected subevent 0x19 length: 24 < 28 [ 168.149350][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 168.152962][ T7781] dvb-usb: error while querying for an remote control event. [ 168.190285][ T9731] syz.6.1005 (9731): drop_caches: 0 [ 168.211954][ T9730] CacheFiles: No cache directory specified [ 168.319328][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 168.321207][ T1498] dvb-usb: error while querying for an remote control event. [ 168.406637][ T5740] usb 8-1: Failed to early initialize device [ 168.442703][ T5740] usb 8-1: USB disconnect, device number 7 [ 168.496180][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.497996][ T1498] libceph: mon0 (1)[c::]:6789 socket error on write [ 168.503074][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 168.509375][ T5746] dvb-usb: error while querying for an remote control event. [ 168.682429][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 168.684788][ T5746] dvb-usb: error while querying for an remote control event. [ 168.731592][ T9625] veth0_vlan: entered promiscuous mode [ 168.740793][ T9625] veth1_vlan: entered promiscuous mode [ 168.778379][ T9625] veth0_macvtap: entered promiscuous mode [ 168.785370][ T9625] veth1_macvtap: entered promiscuous mode [ 168.790754][ T29] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 168.800926][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.812476][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.854587][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 168.866856][ T7781] dvb-usb: error while querying for an remote control event. [ 168.872134][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.877768][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.899305][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.903026][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.921718][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.928626][ T9250] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.928755][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.931709][ T9250] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.045850][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.047889][ T7781] dvb-usb: error while querying for an remote control event. [ 169.216985][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.219607][ T7781] dvb-usb: error while querying for an remote control event. [ 169.348342][ T29] libceph: mon0 (1)[c::]:6789 socket error on write [ 169.360678][ T9754] ceph: No mds server is up or the cluster is laggy [ 169.387678][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.389916][ T7781] dvb-usb: error while querying for an remote control event. [ 169.558785][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.561454][ T7781] dvb-usb: error while querying for an remote control event. [ 169.729992][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.732666][ T7781] dvb-usb: error while querying for an remote control event. [ 169.900684][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 169.903273][ T7781] dvb-usb: error while querying for an remote control event. [ 170.001642][ T9784] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 170.082471][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.084536][ T7781] dvb-usb: error while querying for an remote control event. [ 170.104110][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.107640][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.163591][ T9801] CUSE: unknown device info "" [ 170.165219][ T9801] CUSE: unknown device info "" [ 170.169416][ T9801] CUSE: unknown device info "" [ 170.171088][ T9801] CUSE: unknown device info "" [ 170.174656][ T9801] CUSE: DEVNAME unspecified [ 170.182397][ T9801] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 170.256543][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.261638][ T7781] dvb-usb: error while querying for an remote control event. [ 170.435036][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.436868][ T7781] dvb-usb: error while querying for an remote control event. [ 170.606750][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.608663][ T7781] dvb-usb: error while querying for an remote control event. [ 170.696203][ T9820] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20004 [ 170.726249][ T9822] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.1030'. [ 170.731602][ T9822] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.1030'. [ 170.778188][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.780051][ T7781] dvb-usb: error while querying for an remote control event. [ 170.948602][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 170.951052][ T7781] dvb-usb: error while querying for an remote control event. [ 171.119843][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 171.122227][ T7781] dvb-usb: error while querying for an remote control event. [ 171.172625][ T7782] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 171.194011][ T9838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 171.225952][ T5754] Bluetooth: hci0: command tx timeout [ 171.289786][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 171.294701][ T7781] dvb-usb: error while querying for an remote control event. [ 171.406506][ T9864] gfs2: error -5 reading superblock [ 171.461030][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 171.463328][ T7781] dvb-usb: error while querying for an remote control event. [ 171.631814][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 171.633643][ T7781] dvb-usb: error while querying for an remote control event. [ 171.802808][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 171.804838][ T7781] dvb-usb: error while querying for an remote control event. [ 171.974032][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 171.976475][ T5746] dvb-usb: error while querying for an remote control event. [ 172.145357][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 172.147655][ T5746] dvb-usb: error while querying for an remote control event. [ 172.181122][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 172.181140][ T42] audit: type=1400 audit(1785531051.339:31779): avc: denied { write } for pid=9867 comm="syz.7.1046" name="functions" dev="configfs" ino=10212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.191409][ T9871] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 172.193415][ T42] audit: type=1400 audit(1785531051.348:31780): avc: denied { write } for pid=9867 comm="syz.7.1046" name="target" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.196592][ T9869] [ 172.196599][ T9869] ====================================================== [ 172.196610][ T9869] WARNING: possible circular locking dependency detected [ 172.196616][ T9869] syzkaller #0 Tainted: G L [ 172.196623][ T9869] ------------------------------------------------------ [ 172.196627][ T9869] syz.7.1046/9869 is trying to acquire lock: [ 172.205763][ T42] audit: type=1400 audit(1785531051.348:31781): avc: denied { write } for pid=9867 comm="syz.7.1046" name="usb_gadget" dev="configfs" ino=35607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.205984][ T9869] ffff88802008f340 [ 172.208956][ T42] audit: type=1400 audit(1785531051.348:31782): avc: denied { write } for pid=9867 comm="syz.7.1046" name="naa.1234567890abcdef" dev="configfs" ino=35609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.211450][ T9869] (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 172.240482][ T9869] [ 172.240482][ T9869] but task is already holding lock: [ 172.240495][ T9869] ffff8880390d7118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 172.240573][ T9869] [ 172.240573][ T9869] which lock already depends on the new lock. [ 172.240573][ T9869] [ 172.240580][ T9869] [ 172.240580][ T9869] the existing dependency chain (in reverse order) is: [ 172.240586][ T9869] [ 172.240586][ T9869] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 172.240623][ T9869] lock_acquire+0x1b9/0x370 [ 172.240653][ T9869] __mutex_lock+0x1a4/0x1bd0 [ 172.240694][ T9869] tcm_set_name+0x29/0xb0 [ 172.240708][ T9869] function_make+0x21c/0x3f0 [ 172.240729][ T9869] configfs_mkdir+0x51e/0xb70 [ 172.240752][ T9869] vfs_mkdir+0x361/0x850 [ 172.240790][ T9869] filename_mkdirat+0x48b/0x5e0 [ 172.240806][ T9869] __x64_sys_mkdir+0x6b/0x90 [ 172.240824][ T9869] do_syscall_64+0x115/0x870 [ 172.240843][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.240860][ T9869] [ 172.240860][ T9869] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 172.240887][ T9869] lock_acquire+0x1b9/0x370 [ 172.240906][ T9869] __mutex_lock+0x1a4/0x1bd0 [ 172.240922][ T9869] configfs_rmdir+0x5ae/0x950 [ 172.240943][ T9869] vfs_rmdir+0x328/0x8a0 [ 172.240963][ T9869] filename_rmdir+0x31a/0x5c0 [ 172.240980][ T9869] __x64_sys_rmdir+0x46/0x70 [ 172.240998][ T9869] do_syscall_64+0x115/0x870 [ 172.241016][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.241033][ T9869] [ 172.241033][ T9869] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 172.241060][ T9869] check_prev_add+0xeb/0xe60 [ 172.241078][ T9869] __lock_acquire+0x136c/0x1a40 [ 172.241096][ T9869] lock_acquire+0x1b9/0x370 [ 172.241114][ T9869] down_write+0x8b/0x1f0 [ 172.241134][ T9869] configfs_depend_item_unlocked+0xf3/0x6a0 [ 172.241153][ T9869] usbg_make_tpg+0x261/0x620 [ 172.241170][ T9869] target_fabric_make_tpg+0xab/0x8c0 [ 172.241207][ T9869] configfs_mkdir+0x51e/0xb70 [ 172.241229][ T9869] vfs_mkdir+0x361/0x850 [ 172.241249][ T9869] filename_mkdirat+0x48b/0x5e0 [ 172.241264][ T9869] __x64_sys_mkdir+0x6b/0x90 [ 172.241287][ T9869] do_syscall_64+0x115/0x870 [ 172.241303][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.241322][ T9869] [ 172.241322][ T9869] other info that might help us debug this: [ 172.241322][ T9869] [ 172.241329][ T9869] Chain exists of: [ 172.241329][ T9869] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 172.241329][ T9869] [ 172.241365][ T9869] Possible unsafe locking scenario: [ 172.241365][ T9869] [ 172.241369][ T9869] CPU0 CPU1 [ 172.241374][ T9869] ---- ---- [ 172.241379][ T9869] lock(&opts->dep_lock); [ 172.241389][ T9869] lock(gadget_subsys.su_mutex); [ 172.241402][ T9869] lock(&opts->dep_lock); [ 172.241413][ T9869] lock(&sb->s_type->i_mutex_key#24); [ 172.241423][ T9869] [ 172.241423][ T9869] *** DEADLOCK *** [ 172.241423][ T9869] [ 172.241426][ T9869] 5 locks held by syz.7.1046/9869: [ 172.241432][ T9869] #0: ffff888023b72450 (sb_writers#19){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 172.241466][ T9869] #1: ffff88803aa5b580 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 172.241501][ T9869] #2: ffffffff8fd87b28 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 172.241547][ T9869] #3: ffffffff90252e40 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 172.241596][ T9869] #4: ffff8880390d7118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 172.241639][ T9869] [ 172.241639][ T9869] stack backtrace: [ 172.241661][ T9869] CPU: 2 UID: 0 PID: 9869 Comm: syz.7.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.241683][ T9869] Tainted: [L]=SOFTLOCKUP [ 172.241687][ T9869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.241701][ T9869] Call Trace: [ 172.241711][ T9869] [ 172.241716][ T9869] dump_stack_lvl+0x100/0x190 [ 172.241736][ T9869] print_circular_bug.cold+0x178/0x1c7 [ 172.241754][ T9869] check_noncircular+0x146/0x160 [ 172.241768][ T9869] check_prev_add+0xeb/0xe60 [ 172.241781][ T9869] __lock_acquire+0x136c/0x1a40 [ 172.241796][ T9869] ? rcu_is_watching+0x12/0xc0 [ 172.241812][ T9869] lock_acquire+0x1b9/0x370 [ 172.241825][ T9869] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 172.241839][ T9869] ? __pfx___might_resched+0x10/0x10 [ 172.241853][ T9869] down_write+0x8b/0x1f0 [ 172.241866][ T9869] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 172.241881][ T9869] ? __pfx_down_write+0x10/0x10 [ 172.241895][ T9869] configfs_depend_item_unlocked+0xf3/0x6a0 [ 172.241910][ T9869] ? __lock_acquire+0x49f/0x1a40 [ 172.241925][ T9869] usbg_make_tpg+0x261/0x620 [ 172.241938][ T9869] ? __pfx_usbg_make_tpg+0x10/0x10 [ 172.241951][ T9869] ? find_held_lock+0x2b/0x80 [ 172.241960][ T9869] ? __pfx_usbg_make_tpg+0x10/0x10 [ 172.241972][ T9869] target_fabric_make_tpg+0xab/0x8c0 [ 172.241988][ T9869] configfs_mkdir+0x51e/0xb70 [ 172.242002][ T9869] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 172.242017][ T9869] ? __pfx_configfs_mkdir+0x10/0x10 [ 172.242032][ T9869] ? inode_permission+0x374/0x620 [ 172.242048][ T9869] vfs_mkdir+0x361/0x850 [ 172.242063][ T9869] filename_mkdirat+0x48b/0x5e0 [ 172.242075][ T9869] ? __pfx_filename_mkdirat+0x10/0x10 [ 172.242087][ T9869] ? strncpy_from_user+0x19d/0x2d0 [ 172.242114][ T9869] ? do_getname+0x191/0x390 [ 172.242127][ T9869] __x64_sys_mkdir+0x6b/0x90 [ 172.242139][ T9869] do_syscall_64+0x115/0x870 [ 172.242150][ T9869] ? clear_bhb_loop+0x40/0x90 [ 172.242161][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.242172][ T9869] RIP: 0033:0x7f198f79e019 [ 172.242182][ T9869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.242194][ T9869] RSP: 002b:00007f199058f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 172.242204][ T9869] RAX: ffffffffffffffda RBX: 00007f198fa25fa0 RCX: 00007f198f79e019 [ 172.242211][ T9869] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 172.242217][ T9869] RBP: 00007f198f83500c R08: 0000000000000000 R09: 0000000000000000 [ 172.242224][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.242230][ T9869] R13: 00007f198fa26038 R14: 00007f198fa25fa0 R15: 00007ffc31713048 [ 172.242240][ T9869] [ 172.254722][ T42] audit: type=1400 audit(1785531051.404:31783): avc: denied { write } for pid=9867 comm="syz.7.1046" name="core" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.258568][ T42] audit: type=1400 audit(1785531051.404:31784): avc: denied { write } for pid=9867 comm="syz.7.1046" name="rd_mcp_0" dev="configfs" ino=35619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.259632][ T42] audit: type=1400 audit(1785531051.404:31785): avc: denied { write } for pid=9867 comm="syz.7.1046" name="dev0" dev="configfs" ino=35620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.259718][ T42] audit: type=1400 audit(1785531051.404:31786): avc: denied { create } for pid=9867 comm="syz.7.1046" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 172.261702][ T9869] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 172.301242][ T9866] CacheFiles: No cache directory specified [ 172.315625][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 172.509136][ T5746] dvb-usb: error while querying for an remote control event. [ 172.679650][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 172.681474][ T7781] dvb-usb: error while querying for an remote control event. [ 172.853841][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 172.855782][ T5825] dvb-usb: error while querying for an remote control event. [ 173.020979][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 173.023018][ T5825] dvb-usb: error while querying for an remote control event. [ 173.203478][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 173.205385][ T5825] dvb-usb: error while querying for an remote control event. [ 173.373816][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 173.375754][ T5825] dvb-usb: error while querying for an remote control event. [ 173.448822][ T5754] Bluetooth: hci0: command tx timeout [ 173.545199][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 173.547506][ T24] dvb-usb: error while querying for an remote control event. [ 173.726475][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 173.729181][ T24] dvb-usb: error while querying for an remote control event. [ 173.907857][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 173.910249][ T24] dvb-usb: error while querying for an remote control event. [ 174.079437][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 174.084831][ T24] dvb-usb: error while querying for an remote control event. [ 174.105083][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.205824][ T8890] team0: Port device syz_tun removed [ 174.230189][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.249865][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 174.252211][ T5740] dvb-usb: error while querying for an remote control event. [ 174.330044][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.420786][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 174.422765][ T5740] dvb-usb: error while querying for an remote control event. [ 174.445695][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.573244][ T13] bridge_slave_1: left allmulticast mode [ 174.575083][ T13] bridge_slave_1: left promiscuous mode [ 174.576934][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.580260][ T13] bridge_slave_0: left allmulticast mode [ 174.582354][ T13] bridge_slave_0: left promiscuous mode [ 174.584195][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.592315][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 174.594205][ T5740] dvb-usb: error while querying for an remote control event. [ 174.623729][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.627635][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.631030][ T13] bond0 (unregistering): Released all slaves [ 174.675680][ T42] audit: type=1400 audit(1785531053.669:31787): avc: denied { write } for pid=9881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.723668][ T42] audit: type=1400 audit(1785531053.715:31788): avc: denied { write } for pid=9884 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.759919][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 174.773425][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 174.775363][ T5740] dvb-usb: error while querying for an remote control event. [ 174.871036][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.944450][ T5740] dvb-usb: bulk message failed: -22 (1/0) [ 174.946439][ T5740] dvb-usb: error while querying for an remote control event. [ 174.986316][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 175.093537][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 175.115328][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.117388][ T24] dvb-usb: error while querying for an remote control event. [ 175.120193][ T13] hsr_slave_0: left promiscuous mode [ 175.122641][ T13] hsr_slave_1: left promiscuous mode [ 175.124641][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.127310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.130081][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.132535][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.136176][ T13] veth1_macvtap: left promiscuous mode [ 175.138209][ T13] veth0_macvtap: left allmulticast mode [ 175.140002][ T13] veth0_macvtap: left promiscuous mode [ 175.141773][ T13] veth1_vlan: left promiscuous mode [ 175.143496][ T13] veth0_vlan: left promiscuous mode [ 175.231842][ T13] team0 (unregistering): Port device team_slave_1 removed [ 175.246885][ T13] team0 (unregistering): Port device team_slave_0 removed [ 175.297879][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.300318][ T24] dvb-usb: error while querying for an remote control event. [ 175.468539][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.470790][ T24] dvb-usb: error while querying for an remote control event. [ 175.638996][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.641888][ T24] dvb-usb: error while querying for an remote control event. [ 175.671121][ T5754] Bluetooth: hci0: command tx timeout [ 175.730321][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.734565][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.792660][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.796289][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.810034][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.811878][ T24] dvb-usb: error while querying for an remote control event. [ 175.905739][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.909009][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.974329][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.978158][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.991591][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 175.994076][ T24] dvb-usb: error while querying for an remote control event. [ 176.071424][ T13] bridge_slave_1: left allmulticast mode [ 176.073506][ T13] bridge_slave_1: left promiscuous mode [ 176.075701][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.079162][ T13] bridge_slave_0: left allmulticast mode [ 176.081228][ T13] bridge_slave_0: left promiscuous mode [ 176.083134][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.087113][ T13] pimreg: left allmulticast mode [ 176.162663][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 176.164858][ T24] dvb-usb: error while querying for an remote control event. [ 176.235830][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 176.333573][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 176.335851][ T24] dvb-usb: error while querying for an remote control event. [ 176.352582][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 176.413343][ T13] batadv0: left promiscuous mode [ 176.417778][ T13] hsr_slave_0: left promiscuous mode [ 176.424110][ T13] hsr_slave_1: left promiscuous mode [ 176.426563][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.429414][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.438351][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.441976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.449042][ T13] veth1_macvtap: left promiscuous mode [ 176.451545][ T13] veth0_macvtap: left promiscuous mode [ 176.453834][ T13] veth1_vlan: left promiscuous mode [ 176.456002][ T13] veth0_vlan: left promiscuous mode [ 176.515445][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 176.517799][ T24] dvb-usb: error while querying for an remote control event. [ 176.561362][ T13] team0 (unregistering): Port device team_slave_1 removed [ 176.567691][ T13] team0 (unregistering): Port device team_slave_0 removed [ 176.594899][ T13] team0 (unregistering): Port device veth0 removed [ 176.611054][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 176.686226][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 176.696455][ T24] dvb-usb: error while querying for an remote control event. [ 176.755647][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 176.878524][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 176.881226][ T24] dvb-usb: error while querying for an remote control event. [ 177.061029][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.064045][ T24] dvb-usb: error while querying for an remote control event. [ 177.242024][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.244586][ T24] dvb-usb: error while querying for an remote control event. [ 177.423570][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.426179][ T24] dvb-usb: error while querying for an remote control event. [ 177.605194][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.607808][ T24] dvb-usb: error while querying for an remote control event. [ 177.786870][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.789597][ T24] dvb-usb: error while querying for an remote control event. [ 177.957882][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 177.960470][ T24] dvb-usb: error while querying for an remote control event. [ 178.130248][ T7781] dvb-usb: bulk message failed: -22 (1/0) [ 178.132720][ T7781] dvb-usb: error while querying for an remote control event. [ 178.299869][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 178.301693][ T5746] dvb-usb: error while querying for an remote control event. [ 178.471257][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 178.473389][ T1498] dvb-usb: error while querying for an remote control event. [ 178.642463][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 178.644267][ T1498] dvb-usb: error while querying for an remote control event. [ 178.812981][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 178.815001][ T1498] dvb-usb: error while querying for an remote control event. [ 178.984511][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 178.986709][ T29] dvb-usb: error while querying for an remote control event. [ 179.154665][ T7782] dvb-usb: bulk message failed: -22 (1/0) [ 179.157435][ T7782] dvb-usb: error while querying for an remote control event. [ 179.325658][ T7782] dvb-usb: bulk message failed: -22 (1/0) [ 179.327608][ T7782] dvb-usb: error while querying for an remote control event. [ 179.497464][ T7782] dvb-usb: bulk message failed: -22 (1/0) [ 179.499392][ T7782] dvb-usb: error while querying for an remote control event. [ 179.668065][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 179.670382][ T24] dvb-usb: error while querying for an remote control event. [ 179.838621][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 179.840509][ T24] dvb-usb: error while querying for an remote control event. [ 180.009878][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 180.012097][ T1498] dvb-usb: error while querying for an remote control event. [ 180.181488][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 180.183723][ T1498] dvb-usb: error while querying for an remote control event. [ 180.352381][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 180.354852][ T1498] dvb-usb: error while querying for an remote control event. [ 180.523010][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 180.524824][ T5746] dvb-usb: error while querying for an remote control event. [ 180.694999][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 180.697400][ T5746] dvb-usb: error while querying for an remote control event. [ 180.864632][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 180.866477][ T5746] dvb-usb: error while querying for an remote control event. [ 181.036488][ T5746] dvb-usb: bulk message failed: -22 (1/0) [ 181.038883][ T5746] dvb-usb: error while querying for an remote control event. [ 181.206409][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 181.208288][ T1498] dvb-usb: error while querying for an remote control event. [ 181.378126][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 181.380087][ T1498] dvb-usb: error while querying for an remote control event. [ 181.549382][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 181.551648][ T1498] dvb-usb: error while querying for an remote control event. [ 181.720376][ T7782] dvb-usb: bulk message failed: -22 (1/0) [ 181.722793][ T7782] dvb-usb: error while querying for an remote control event. [ 181.890964][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 181.892865][ T29] dvb-usb: error while querying for an remote control event. [ 182.072592][ T1498] dvb-usb: bulk message failed: -22 (1/0) [ 182.074512][ T1498] dvb-usb: error while querying for an remote control event.