last executing test programs: 1m37.297450708s ago: executing program 2 (id=3): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x238, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendto(r0, &(0x7f0000000080)="b4f899344d03e355e328f21b89cc521711418b08e5b0b809902968994656686492c748fe97ed72552ff0dbf61d", 0x2d, 0x40, &(0x7f0000000100)=@nfc={0x27, r1, 0xffffffffffffffff, 0x7}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="14a7774be9b9aca07ed7b1cae5dda08326119a6eaaf3af38660e78dcc1347d77c1159fbbe396d84c93a7cf289910cd392d5de925a29cb52db33c6c785915669d7935ad448f3d1e0a5928ed4af0eb53f9681442c503053bdf51db304319aec0dc75916b2172ea330b3d16aed58a6d8324230555e282cb808e8bcc270aa2a01f83743edc6d59a0ff03d6a351e74dc18decda6e178f0683a2993a70e91569d7be0616cc", 0xa2, r0}, 0x68) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002980)={0x0, @remote, @dev}, &(0x7f00000029c0)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004300)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="96711bd0f01b55fe1aa1e18a79129b66ded97ec87056aca10bb6a0ea37dffe03f64e35cf2780ece70cf602a7377a2cc9b1ccee6e942ba34c3457304eb54a3d5a450dd18f651a0236d897299c02d29067950e70e45098f636e9143e2bab9ad20192a4c6af20017a1396b90d5ae191b099801f75e18d", 0x75}], 0x2}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="1ba98d44c59e71b460a5d32f0df7394764ba473bf7ab966c06cccd9b17b901d0887d80eddc0eca4d5bdfc43c475dc4256e4f2c2654470370001a7d23a9cd02e86eded314df50e5888e3f1145f8b38249855c6721b768d58fa9f3b7dcf0db52d120c4d0abafcf00dcb21151bb656fa0e390a3988e913e7f2f80296ae3610b3161bb76b74e86ff445ed2c44bc29e6e7e41bcda57f3b56ad5c5b8a17c967cb3280d796d3591293ace80994dad7b7c6eeed80ff7ca78c2d0a672848978e2a678162adb926168b03bdba93a3fe5463651d590dec0d5a774c766ee65b4", 0xda}], 0x1, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe5}}], 0x18}}, {{&(0x7f0000001580)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002800)=[{&(0x7f00000015c0)="7c649cc8b3e903bfc2954aa38289132c5220d1beea6189a8c9f7b7aa477fdf61b98a7a622e3477f23f44337b5ed772e70676caa171cb1f821f5b67374d0430c5d80e8eacb588d95b13efc8a377e0299cdb63ca13914ca746fc265d8979008f981a1fa9343c4c27fa994b9964e75a", 0x6e}, {&(0x7f0000001640)="6938e1cf0853c5834f523b3835c4e05c8bf0e05a4de0e31ffdf60f379ca990c70f7fa81b48a755c9eaf980476c5001ab78434e8a522a48153121c46933dbee754433af646d5da1eebc2778c9ba5c9d265736ff4c38dddc4a1ff4f22a0d1b144ce781b78f105e118e3d1ed1b10116266c2a8ef861b732eeda0154448d825b7ecd9d79535f6b9a0921c4a9a01ecb32db72f470381fcf5a252acb073f7173feb79a1fb1d020e338b80900ef90b0541878465557a95613fe8b7b5a5f4cb9b76330f9b0c064776d60238d1146", 0xca}, {&(0x7f0000001740)="8692e8818a605b7f260014cff4e856c2e6bd3cbe22e78cd667cce09631b32c58223876f60d", 0x25}, {&(0x7f0000001780)="eb18fa5dcb30b887f8c8e07ed9f16f33f7bd679f1766ffff138f1e53e7b8ceab171e12df2f16777f928806cbdb1d06af94e35420187433e16aac7935ed53bdfa988dde57290bc5401fd24a31d5ab6f42bbffd7bf24d8a0", 0x57}, {&(0x7f0000001800)="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", 0x1000}], 0x5}}, {{&(0x7f0000002880)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002940)=[{&(0x7f00000028c0)="1aa0a45e484e7d0a6234b615261285e704e9d43729a1c710cf653e8f3d4baa922b0a96e16ac332ad0a7ea3a3a7bba1cc0c17443b7c809b61ef19d2c9f95b1267103b6245249dca6b2fe8dddce4e50052df47aecf42f2aa2577715a372d23600d52f58e99a614dc6a93da087496173c5fd0733e307a33258d1c727b93b779", 0x7e}], 0x1, &(0x7f0000002a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@cipso={0x86, 0x13, 0x3, [{0x5, 0x9, "30dff3993645c8"}, {0x7, 0x4, "e5c8"}]}, @timestamp_prespec={0x44, 0x24, 0x85, 0x3, 0x3, [{@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x9}, {@multicast1, 0x7}]}, @rr={0x7, 0x7, 0x22, [@local]}, @timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0x0, [{@loopback, 0x45}, {@multicast2, 0x9}, {@private=0xa010102, 0x9}, {@private=0xa010101, 0x9}, {@multicast1, 0x662f}, {@local, 0x69}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}]}, @rr={0x7, 0x17, 0xca, [@private=0xa010102, @multicast2, @remote, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x4, [{@broadcast, 0x21ee}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x12}]}, @lsrr={0x83, 0x1f, 0x1b, [@multicast1, @empty, @remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @rand_addr=0x64010101}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x31, 0x3, 0x3, [{@empty, 0x8000}, {@loopback, 0x3c403e75}, {@rand_addr=0x64010101, 0x6}, {@rand_addr=0x64010100, 0x100}]}, @generic={0x7, 0x4, "9771"}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@rr={0x7, 0x27, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010100, @local, @private=0xa010101, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @cipso={0x86, 0x36, 0x3, [{0x2, 0xb, "c6d54d9a37b7619a63"}, {0x0, 0xc, "393c3f94892c9db6a5b2"}, {0x2, 0x5, "7f14d0"}, {0x3, 0x11, "2391a191c2159bc30f597efdc79dd4"}, {0x5, 0x3, "b4"}]}, @ra={0x94, 0x4}, @generic={0x86, 0xc, "d296f0d3b2d84fd039a3"}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x34, 0x3, 0x0, [{@local, 0x5}]}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x220}}, {{&(0x7f0000002c40)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002c80)="1d55da081904281135a71912d9c9eeaf71fe4110c06a6c5a31ae7019ab51b1d13f735701cca15189a11fb443242e06412e508e745ac67f1a2aeeeacf55463d47fe659eda743bac903199d6593d56485a801402c92d5d0c82211c10dab74deec02fe05da74e9acf825f025942c3ba8c7be0123e6fc7b4f5a390b21dd67d8309e1f6cfeb2717f9a84889b20d7808913efe579c7527ab716abd9fe3dbafc9", 0x9d}, {&(0x7f0000002d40)="4a523d925e641c1ebe564ae9baddd49b9f4694fea1ebef62ee350bff66bb721dba4911e8d10fb2974ee0318ab94c1354734644d07e663115a5723911533db1729eb872ad9c67318477bca3b3b0119bbfb7651fc5dc96691ee1c3cf963223650ee54a57dd2d64313ed77d036e774a428ab10c22b2050bf71d4091fa10512aab1c177e82f98c260982934cf29eb8f486bd257dab096c42e76a9506d8b628c8d4c1e26c6a5bb8526d0ac483ea", 0xab}, {&(0x7f0000002e00)="30546ecf12e0487f9842fc973a9b170ed4ad654b0ce9fc23c1b46254e29945ab1e8632d81b89ce6bfa9b322b0bce38c27b015bd7017ecd389ce36b5b63c7832ad45f6cb1f0e8e188cdc98650f6f748e8c28c32788681f147f659ca202e8d840b83c6c00ee1a688e01352bcdc1d203754148bfd3aa9fa0efc7e11a9e06f483ffb459fba71efc4daf5bc4a341b7eb09e8ac75b583ae10537101e74afb1d370ec190427c00359a96691535415194e66c94cd5aa183663e763b0ebfbb5b64ac88ae749be7dd475d497cc45bd3fca71386f7c0d1521a1dfd48b55db30c03e2f40b1b5f3ffa4", 0xe3}], 0x3, &(0x7f0000002f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f0000002f80)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000004280)=[{&(0x7f0000002fc0)="577c1b76fd60a24a3a804daa48d72ce47091ceea16aa136406be46aca65ccd53687ef362d36d8eeaf77c5df989d9e72a1ff49bbae76e30fd3f04a952", 0x3c}, {&(0x7f0000003000)="444c52c6d1562ab90dc071d3c50a8c64238d19fe625ca9344d914243a13541b3defdca1876dbfbe5db72cbb3a61db5304057637355151ee1dbc3cff59d3ba971ae039f0fc3c7b7eccc48dc3c6ea69806bd823d45fd41938641dc88", 0x5b}, {&(0x7f0000003080)="618d77a1cebe578b609d1137c54e7afe96b70d82af11ab600208449de874f1ad3404d35213da31c1b6b183fd0504078ebc47e44a64939e71552b8483d1815c65725d3abc6a80a2f950837d632791b71763559143995559cb18bf5c448089fbf0b42f9161566b63926a18e942a86f3650f48f626e965499796bd7ed8dc53259ccfadd37db8ed15fe427fb3e1022d5c42f9fe8f35deb11405571258370b5a2dba592462a11898aa2939d96f8d101e616bc4404aeb2571649bc48939c3d15dfa3d7ead4e4bcd016969cf8c142223ea7", 0xce}, {&(0x7f0000003180)="3dd6a0b22d6c58744191faf8fd8bc1a6849b3bf3959e61e457a356c52bcd9fba76a94ae70a6a278e3a16a0a848ed5f8e7a8f8a4cc495f339dc6e0469bb977e4f53d46dfa98de8619e4a895fd855d5ca41e9820d56ceec8803a5d5929e5af9aa743015164bdbba00af5acc99cc076f753973ca09598af1c21f3b64cde29bb3e6baa6e58311a32766a3d9c818be89511c0c9e7e498af6ea731e10b31ef98bf5ed717e07c5c0c22ae5af40033002543ab248c5ba82cd51f0ab1db54fba2e6d339a08533130c4e108f24d9b03110c78b7d59b1fed1fa12764f9f1ae7550585912e9f8b7eb4b14c5e8859793181bdf9fd78ba815b2acdcd13aa5f92ce1d8bbf287b04cf45758aba2d40b05dc70069eb4eeb7b72a655941400dae75f390e58f28764a9d1a390d7ae7c0c91e196a8ff171419faffc3fb10b86095e19cfb88746d5379c4b207a989af203f27876db1470bf0d8312e519f857174d96cf4577348a4a3138ce576fb942a810ca95bfd2d4ec721580b5546a0602884728cd63e89050b670efd101a7ae692da43a263d03f6bd7f81dcbe24b3c1789a592147b7462d005e62bc9ce4c97f6430f71b0767ff3a6e046f463aa6af3568dced860def1063708b400f209d6c03bca477436365e257cfe4c4696da429e93af476012a23cd8c2c8deeed3ebf5982654dd8f0ffc5f68de0175455d31ecd51f14dec8a143bcdaf0f349f2071deff27f66477f814c1f944fe48b22583baad347ea9e543cee6dead52d1aedd46fcf9166d46971006acfeeb034971aaad3e22d1a794119a389b2988e15d4591da8b11a125a75a8297dda106817453d4ea96fd7bf1f4b19006aaaac59d6b90f1608cf03ccf2c9e91afdef5071d4664a9727216991328c65634db1c3581c66dbceb5a02dabcb5012ada376e6d2f36af6888d9b663e7c861320116739fa025548719f5046d5f50fbe77bc1072e82d618b4a61ee2103e40b8fab0ecfa9d9557bed3764fcceb0122ed8ce0da78ec6aeff08982faa6b58ebe66868ed833d4f373cb7f0043374b8c526b19daf24c8c157d99fb7bbcf8e4794fc0f711b2d4f019e5f4d5c3dad49e141c338bda276bcff349f6e7e63c61cc89e71f85ad648c27b231e2ba88c4eb7215879c32ded1f7db160ab739fd240caa3dd24098ce7c0d573426237a52988947979019b93d50b70918b8d8fdb79d37ee72604d43bf79b65cf9092490d931ff992ec60fc76c86a1397a7c13482bc5d6318ccccb148540b4743f8380f1b3bb7f8170e3e1d47faf5b0db6d3561da91b1b1e60c6031afa92bea54266c2fa8903625155fbbad9b8dc2af44ebda8777c23fd6b749cf7bb3cf3059168c40ed71c05d834c85f1b5eba93b1e70faad87437e055df63485bbae0c97ac992dbcfd18b2aa90fe332f89cc382cee144755079a3c414afd5e583a2d1211f4cda783a26d0453c6d15606ac86f10fd3304793c3f7c63104d7af1a2316afa8aec4b4359178552302e60f13a72fb9fbc4c0c76ab406eb2ae26669b88b666ac6e245904f7f5e946a661e816c3305ec4f9fd6e987c06891fea7a95741a2df4faffb63db7e95adca6b53e42ea586215b8cea4a5bb3eb85b76666e431409deae3b24040b19496a4524dc438823ecc1c1842bc7bdb13e3e3fe68d2725928e2a6f99283c6afc6520a8cabc30b5bb589ae89ba94029964bbd81768f5456178bc18453a1b85fefbf09046c60bc88133ea78a21fa12d7cd6d7159229eeb5d8eb55029c6d943ad7d67c3ce3acb1284647335e25f3699f0423458ab419e80c84474f9a347227f06990c6a7ea8216400c1ccff63e84f9222f33cd045b2557abdde6b2ba559ae829ab34ca27f395e1160588e831bd3d6e5cc3bccdc122c17cedcd787b94b2f64bfcfd7f5bb9395fe2a88c1b563b8a3287391f2f063a2e23b2fb1a91de4e333c513d3636e4fe16dbdfe96c8fff44550caf30034afcf873e633f15527005c691d070d68875b77d36f88be5ef46e8b0a6164a1ec253468e41cf1a15c8bcbb3dcedb6fede12b80c6c92e24b73f5bbb7b26a240f543fa1cbde0a93e91030f18149ef8a2494e3714ef711fae2a65dee848258d2c247337dadedaadfd894327c3e83ea639a668cf212cd8b40fdf4f5324ff84d48017039b10eed9493bd8977f6dc8a0f47900c34ccd6c1d92e48c832e2dd5de3b712caf10789e7c03a601087d09e26979a85631da48d61df72dc9c93d15bf6740be3d73378492d508b169cc036f5c86ad79c19c1d57f6bb2bfb01c5644b4c1a00a9351051a97fa845c4000c748684c7f002fbdc29c0a8df4f40801c717cf5e076c98d1f92eab301ab28f0490a6aeed04d0636595c2511b75cd4305fd56b9582dddcf771d8d47a1b6d5f177ea5bd852eca7f4f06b83c9d34a3b730e9091b7037bc49f869e7a4a0a133b3a8d16d40b66aecd008de9ec6c3731efc18f96514c0e343ae5d77f6829b55ef62b234348d236c3998357ddd7cffbb2e36117604f948140653eae4970f17b9ffd9a25d69c2ce27c14f8c8c2433dbab1a0ee73132680961e11e1f4c70ce43eb71e90c0844a28177869b50ebb814d4ff288bc93fb0073bec8c4175c3b3337b750944ac8f2956dc98aaee2b953705bf5de79d15ecf1f5be8320adbc05f4b8a9854bf44f76cf17826e890742318ac051a11c5695dd0bd86ed46a130628bc6f830e4a0d2efb3826d69463018cc9b2121411231b717ecc164ec5c6094203356e51398639abb809209afa32adb4fd2d7c7a6845e620cce25e50bd926c623f7a6b2ec86465605ecdfc5f354b9fad66b9d9025eafda8ca8d5b291716ded14a8ae15f536b2345e98ff3ba691641a26c33f63b983d1c542091cf53339a6486a98b46bbebed533fede2142b82373e43506656dc835deb718fe08e4e96068b68376a8e22484e9bb01f6495706f2043a6c4651604f63899c5eeaf08cd80e93bb1e88b696ff82ecb1def103a845d21632ba44e4d00c2f84e8840fa418ebb118c1e1c6b625ef0899c024854aba96b30c2160f8d350c64c79c8876da494e5cddfb5b652aa193c55472d5f02e6fe41e88cc054d071928d7a2c13d65c00f79e1742a074b44e54e72cc28cd784ee289cec3f87a55f6b3c198d2487ff1ff3454a9b9377be0696ad24c03c55f29553771650b08e389c00234a7e18e481d1cbb3dcc60ed8af30417cdabd7790138703b482de87944660ddcfdd521ae28433f484be847e5b9c0fa7a98f26e2f943e7b6a213fda8f55f12c541a06266162d07f9a18a746d7c5e2cbb060f0bf98798763ecf5fd6407195124d7c654380f2a4770b0a3a4a9061a262c8ecb62ec64bc0836813f901a6d928ebf5b6421db90e27e3ea4bbc4c35f1174153fc9a0c092735fdc26240acf0a55e160a91d0f91770f156fd542c87d11b6de1c7273c383575c0cc00261c7c5920917e678f1864e1005d0f1a12dade3a02840813ed0796bed892ffb2ed8048f57e35bbba0db2ceb9d869c97a9cbbbd89eb9d9a1804c16571740ebe2785b3c3a2e5a948d6e84e3116c2330e7dc24b8073b6b6f50b8331947b37efca0892484fd78b926152658dfdd8f91eefad427a58e7c9a77bcf3ef9638bb69a9d649f8ef1222358c97c2211c50d13b62636176fa66a1b34d97df40a04c7c664eb0448e6d6040ad30805bd54bee676206e38c040bdc3552a432832b31777df8b93a2a1ab9e64c734d1d6827087f41844ed88ab5daf5a0171ed57a4752751b7dc5936a26f20306b078caf2c3278b312154ed2bbc2b963741bf7082f16baa419674aadf44620b24d51bf42068ab5d48460c158d834a02767a9481557020526c00150b75ff4f100e45778e8101c9c7f42d847189e9ea90ae734fbe199164c8ede6db484115fb7defae460eaee513b2df8d1a3531d43837969385352034d955e75d519fccfaac840c8972887990d5da84193e0b196a99ae05c4fe0b63992408aa07dfd183a3ea9d08d2912a7e8bc2deb7ac69dd2af3b2268e029ff6690e24e2b0fb9199d5c681034a2b734fcc86212f949a8209ee11ee5aea34b2484d07acc4f0a0d2422cbaec85209b608030584ce09fc138028513619fa00c6dc8b55a95371480ffb9f9c990694b924472ef806db3d7ecfc5fac116dc9c8e97b282be282bf05b98440e3292032b088659736d6297bd58807254d83ee69264a02aac083550f1a517d8d541e9eb8950539f0e5774cb035ea3ebac63ac2ae22825ab75721c15b3b5309aa9594b9f4e690d3f8db2922dcd80356b08a0a930d34cecab88171686b0fec4e1d96f89acb40ae7afd27a783ea5bb84ef3cd79dd4dad4c0ab158f2fcc264b4156de41efaf09261809fe68f85c28f479f899c3f7b8957e173127694e2d91ea38fe139672ee081228f0d7b4d1f9005e0e26dbe8dcdbd6eb97b2c82e5cdd5ad913b0c2e720e67141049d9a02de43c56de9aa769d148692098575370c6910849499782fb752584d42ca42fe9d2ab667376e4612ff430311c982a23b38fcdea19259c41ed1971ae77f969d6fe76d1ea210c9d1144ee05568454bbe9c2684da7748fc2323f076a3bdc74676ad1c8039794682907422f143ecfb3dab43738ec672efa7ea8e1b83dc95e9a4d4c7b7fadf37d8f413567c02af136a50056e947d464734dad35f5ed15b7e34fc3eb212dcfb0b11b01dca0e1fb1145d52fcf6e47faefea71c3c4f21c8aec9224da8cb221baf0efe8259e56cfaea964e11f9a314a5873a96b8fe09f98bd6b379eef21f78a47c26739d9c1b6719ec4730658b04255a207ed567fae686b11da47e141f4bc58bf52eeeb9c5577c720142c131cad72c5368e4335b01e4a546f503bb1c3d6de32a549b5b327c275ad9bb48673230d3e0db45b610510b928b1f87a5d90e7f6a9d5be62859c2f8a52dc745ce32a41b7deaa3bc18bf44ec9cb317325f1e4d4ec420f48ed68ad924845a1a60a47493c1cc566001717942222d1d2985fd11426ca35a5ebc3532a5a2ab94e8205b2d9c3792ffe3fb3ad02cf245e88f3da799b3d372c13c2a9ed7a72fbb8e4563c01e6f9836e773de9012ea956fa3f9a90177fc51547baf72fda282c89feb5cbac6fecdc32ae747df544f992bb3310c3943a37dafbc454263176ff1b1aea32a6f139025770935ff657aeb5566fb9503cdf72ed047f58c53ffebf3c4a4c2846b8be2752929ae7b81b24060358817372b8b375adb3023df788c6d6e3bf4c5ec6dec631afc33a6ac10cc3ed45946029a38d1dd716819e5a5e9eb93c4472cf47f66f6733d8bc6adb76aa6bf3c0a95dfc6144886d2d03e2e5c2e791a0269bb89b149a93be493744b3d3179237002f8dbe6b257b36eb7925ef70cd748efbf551170104b5f7fb37da59029005e8ef6c48432bfcfaff1bb0c1f000e861bf4a13141263de782e3585009f7abb3639b0acb202221f32b06850ca4c720ed1512b36eb850e7e6a44f233fd4d3322252a58d10d423b7e2a47bc3957b25c67fa85852ffa7c5d01f93a3b8dc44398b8997e2434110800e98a41fded789e6210a873b091f751b56282b5a2bd73c652b52a6f82003c69b2324ae301df45bca2a90b0c2ca2af50211c1c949547e44c956b313165c35ee51b31166521d1bac5b28373fcc6064bd2c86701232fc7c3f3fd658c10bcf3db3a59d0b64875cd79c39bc99957901520251d75709b89da76a71b512ac75044e60d0b64d645811f1677581ccc455ec2a43a591facee5af9b833a4cc2f799fb51d020f7c6146dff2e0af176515a1177abe24b788df2441d38f6c2bc174550d14df458689cf5c0322c70fe8", 0x1000}, {&(0x7f0000004180)="cbf9f153a92d677cec8516314d892665744e07be1e6e4f7e6bbc68a239f6765084828b5bc54130040a366855f10f14fd54aa8e826f387b957872bad70542a613f01fedf55e3cea703a805cf0db4c11d71c068c36eb4679017bb7042ebe828f539c0cfff2345fa137bf348db93998ed049fe7d6bf13b656546f910c3873c7e1314d80ae908b0d6b18bc92641abb0932285336c09b0fa7daef28ae1f8933fb24c85a081b21f318f709db0fb432dec0cf9daf118992ddd0eb1d4f8b176e30e1270d869ca3acebd2968608bb8ad7841c0911dabeec47c877f6c26ff85416d15d0873ec6efc", 0xe3}], 0x5}}], 0x6, 0x40040) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000004480)={{0x0, 0xc81, 0x1, 0x0, 0xff, 0x1000, 0x7ff, 0x6, 0x2, 0x3, 0x80000001, 0x7fe0000000000000, 0x1, 0x9, 0x4}}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000005480)={{0x29, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 'sh\x00', 0x16, 0x7b878b6e, 0x61}, {@loopback, 0x4e23, 0x2, 0xffff, 0x6, 0xffffffff}}, 0x44) shutdown(r0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000005500)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000005540)={0x0, 0x799}, &(0x7f0000005580)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000055c0)=r4, 0x4) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000005600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005640)=0x14) getsockname$packet(r5, &(0x7f0000005680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000056c0)=0x14) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000005700)=""/254, 0xfe, 0x2, &(0x7f0000005800)={0x2, 0x0, @local}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000005840)={0x2, 0x6, 0x4, 0x7, 0x8, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d5, 0x5, 0x7, 0xc6, 0x1, 0x40000000}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x9, 0xf3, 0x1, 0x1}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005900)) bind$bt_sco(r3, &(0x7f0000005940), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000005a00)={r4, 0x64, &(0x7f0000005980)=[@in6={0xa, 0x4e23, 0xe0000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x155, @private0, 0x5}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}]}, &(0x7f0000005a40)=0x10) r7 = io_uring_setup(0x1578, &(0x7f0000005a80)={0x0, 0x30dd, 0x8, 0x1, 0x38e}) io_uring_enter(r7, 0x1edf, 0x504, 0x30, &(0x7f0000005b00)={[0x9]}, 0x8) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000005b40)="9d1662eee0d947646a78d9b7478fb63225b9b17848a175e135c847e3c85139ea1918a0b6d5b10104fa05d453e5d21460fa3a0c3b2206464ae08353963108e7165d58bac0f9bf962fee241bb220287a8407a0c370dab68d4dbf31ba07665e4a1cfb7db947f0603f523cda69d419ba01138ad4f6ebd2ea5d20ad71cb035c5ee2ace85dc9585deed14161bfc4a6952b06fede3b62911dc04d88ae24229872b6a3f24074e52109eecf2b7063aa5b65999b740e448b130b9605ec31329bb32cad71ab3909943d2a7175de3b47be8d808472d635", 0xd1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = syz_open_dev$rtc(&(0x7f0000005c40), 0x0, 0x2001) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1a31) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000005c80)=0x8, 0x4) 1m37.070785797s ago: executing program 2 (id=8): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) (async) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) (async) socket$inet6(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x22000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x75) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20040000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x16}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) close(0x3) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) 1m22.115839102s ago: executing program 32 (id=8): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) (async) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) (async) socket$inet6(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x22000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x75) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20040000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x16}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) close(0x3) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) 1m3.665766557s ago: executing program 4 (id=319): r0 = socket(0xa, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0xff00000000000000, 0x0, 0xa1, 0x0, 0x4, r1, &(0x7f0000000200)="1d", 0x1, 0x1100}]) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r7 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) sendto$inet(r0, &(0x7f0000000240)="9c66a1c883451f3cbfdd6bc8f20d14baf2a3b50da435b0fc9bb1a35309d8d73353f94d210c420e8b", 0x28, 0x10, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) syz_usb_control_io$hid(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x4, 0x700000000000000}, 0x0) syz_usb_disconnect(r7) ioctl(r8, 0xc4c85513, &(0x7f0000000200)) r9 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000007000)=@vmx={0x10d, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {0x2}}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r10, 0x2000000, 0xd50, 0x1e, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x18e480, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) dup2(r11, r0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r11, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0xffffffffffffffff, 0x0, r13}) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r14, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r14, 0xc03064ca, &(0x7f0000000d40)={&(0x7f0000000dc0)=[r15], &(0x7f0000000d80), 0xe46, 0x1}) 46.979586378s ago: executing program 4 (id=342): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x43, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x66fb, 0x80000, 0x1000000, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5fec3581, 0xfffffffd, 0x3}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x10, @loopback, 0x10}}, 0x8c6c, 0xa}, 0x90) r11 = accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r11, 0x28, 0x6, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 46.968360763s ago: executing program 4 (id=352): r0 = fanotify_init(0x200, 0x800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000874, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x8000026, r2, 0x0) (async) ioctl$COMEDI_SETWSUBD(r1, 0x6411) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) 46.889671649s ago: executing program 4 (id=355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) 46.819879228s ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write(r1, &(0x7f0000000140)='1\n', 0x2) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000005c0)=ANY=[], 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f00000004c0)={0x5, 0xc4, 0xfffffffffffffffd, 0x7, 0x6b2c3579}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x80010040) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fff, 0xfe6c}]}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000078fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9c40000b90780000fe06e2d4c3d9080a000008000000007f001312c8497a470a3dc09be42aa5080a000000860000afaac6ecff01050600000003220c39cdb44d6203ad4cde65080a00000001000000070000000000000000"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 46.755163291s ago: executing program 4 (id=360): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./dev/sda1\x00', &(0x7f0000000040), 0x10400, &(0x7f0000000200)={[], [{@measure}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0xb579fe78a54e093b, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0xd4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='efivarfs\x00', 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x8}}) r7 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @loopback, 0x80, 0x2}, 0x20) connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3, 0x1}, 0x20) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8d7d1000) eventfd2(0x0, 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000070000000c00078008000800000000dc0900020073797a310000000005c1040000000000050005000a000000050001000700000011000300686173683a69702c6d61726b00"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4044044) 31.653430682s ago: executing program 33 (id=360): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./dev/sda1\x00', &(0x7f0000000040), 0x10400, &(0x7f0000000200)={[], [{@measure}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0xb579fe78a54e093b, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0xd4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='efivarfs\x00', 0x80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0x8}}) r7 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @loopback, 0x80, 0x2}, 0x20) connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3, 0x1}, 0x20) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8d7d1000) eventfd2(0x0, 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000070000000c00078008000800000000dc0900020073797a310000000005c1040000000000050005000a000000050001000700000011000300686173683a69702c6d61726b00"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4044044) 2.30860386s ago: executing program 1 (id=794): r0 = io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x10000000, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0xf4, 0x4, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000200)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1, 0x3}}, 0x1) 2.210264773s ago: executing program 1 (id=795): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xb5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000fbff000000050000000900010073797a30000000002c000000030a01010000000000000000050000040900010073797a30000000000900030073797a300000000038000000060a010400000000000000000500000008000b4000000000100004800c00018008000100647570000900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="68000000fb00000000fb68000169787dd7c4fd7ba0d38b35802b44279a9edcf4467447dd6b529b3776c36070b44fd172a5de859aef7b586032746bf2865c65c61888b4e0b7fc4370cff8d4b69887a94e864584a61c87cf9cf1132dd76f103061b029148a90193850a559d06cb84869398fc3ab366255ac5638e5"], 0xc2400) write(r1, &(0x7f0000000300)='au', 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff0000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000000000000000000000600ff0901a10185107508950609018102090191028511750895130901810209019102c0"], 0x13c) close(0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = io_uring_setup(0x64bb, &(0x7f0000000000)={0x0, 0x2000a86c, 0x1000, 0x1, 0xa1}) close(r5) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) r8 = io_uring_setup(0x7625, &(0x7f0000000ac0)={0x0, 0x653f, 0x80000, 0xfffffffc, 0x135}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000280)=[r7], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3ea2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) 2.209745063s ago: executing program 0 (id=796): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000003080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) ioctl$FIGETBSZ(r1, 0x5421, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000003080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) (async) ioctl$FIGETBSZ(r1, 0x5421, &(0x7f0000000040)) (async) 2.139525954s ago: executing program 0 (id=797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x2d0, 0x2d0, 0xffffffff, 0xf0, 0x2d0, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xe, @ipv4=@rand_addr=0x64010102, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, @gre_key=0x4, @gre_key=0x7f}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@multicast1, @ipv6=@mcast1, @icmp_id=0x4c85, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x1d, 0x8, 0x5, 0x64}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private0, @ipv4=@empty, @port=0x4e20, @port=0x4e20}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'erspan0\x00', 'xfrm0\x00', {}, {}, 0x3b, 0xd7}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x400, [0x4, 0x1], 0x80000001, 0x4, 0x6, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00', @mcast2, @empty, @mcast2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @loopback, @private0, @private2], 0x7}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7fff, 0x9, 0x7fb0cc613855b3a6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x6, 0x73, 0x9, 0xfffffff6}, {0x34, 0x9, 0x8, 0x372}, {0x6, 0x6, 0x4, 0x4}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x700, 0x40, 0x73e5, 0x4, {{0x17, 0x4, 0x0, 0x36, 0x5c, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x45, 0x3, [{0x0, 0xd, "d7512266c1836d71bdad6f"}, {0x7, 0xd, "20492089dbb294c9bac187"}, {0x0, 0xf, "e7264e553e86b82df880ec759a"}, {0x5, 0x5, "d57fcc"}, {0x2, 0x11, "f15e1cf729a53403e50eb9b42d6888"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r1, 0x4, 0x7, 0x7, 0x3, 0x6f, @mcast1, @loopback, 0x7, 0x40, 0x6, 0x7}}) 2.03710011s ago: executing program 0 (id=798): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001002abd7000040000001c000000", @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e010104000e8076819344e6b59dbae01f2aea72696d341e55c1afc75e3cdde4ed84ef78db82be6935eb5cdb3a11fabc5ce48894220cf083a6616a9ebd3e6256847a95e27b5cec65d6eef38d59e4c7e63dd06cd373c216de6d110da4765b56953980"], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffff, 0x40}) 1.96980525s ago: executing program 0 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback, 0x3}, 0x1c) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x302c2c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./mnt/@cell/foo@sys\x00', 0x1, 0x80) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, r3, 0x4}, 0x10) 1.969315078s ago: executing program 1 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="08006b060000000500340000000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x19) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000080}, 0x2bd6026cceb08e3c) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x18, r1, 0x8, 0x70b528, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x4c, r1, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x4c}}, 0x44011) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdc02258207286dfbd7011f0100000001000000709a94449343f61a5d0f95f2c530819c36e7e779e3"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) recvfrom$inet6(r8, 0x0, 0x0, 0x2042, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) 1.85998214s ago: executing program 0 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)=0x9000) 1.710519753s ago: executing program 0 (id=805): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) (async) close(0x3) pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xc3) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xa, @win={{0x3, 0x6, 0xb, 0x3}, 0x9, 0x8, 0x0, 0x7, 0x0, 0x6}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4008, 0x2, 0x0, 0x0, 0x0, 0x1, 0x56, 0x0, 0xb, 0x20, 0x93, 0x1000000}]}) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r9, &(0x7f0000001300)='7', 0x1) (async) write$char_usb(r9, &(0x7f0000001300)='7', 0x1) write$char_usb(r9, &(0x7f0000000480)="6b33b79a8dcd38bd8b7db0819aae02000000d96c001c6fcf8e695b0bda423c658839c960810973ced50de80922cd8b2d24dfbe115f77a01026e55a97df3f56ce394c0744aebbf09fe7", 0xfffffe2b) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) syz_usb_disconnect(r8) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xe4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xd6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x7, 0xf}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0x5, 0x81, 0x40, 0x6}, 0x12c, &(0x7f0000000200)={0x5, 0xf, 0x12c, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x86, 0x0, 0x80000, 0x880f, 0x8008}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "ba858c51e06d58a45041d0e9f588c8bf"}, @generic={0xfa, 0x10, 0x3, "4baddaa3b815faf89a80cf2fd7c428762a40ef098dcde6d5049a17f29943bfa17bf1d757593a09b0e8e36d2a3df190f09d0e93b0448b480b09a1ca15aac5130a3314b12b587931e0e962293a6a3f433fc1c4441f9f5f54450e6ce8512765b306663e490d1221df62428609ea439443929325a807dc401e2e322138cd8957e9a61bcf07aad5b53a91a1c652054be2603bbdbf3e128793893d9140616c3be98e94b4771d85d306058b1a9f5d772e5e9ae1901e0a8ec04a5d87b5ff0f4b9666abb13915890360dd75816cc8cf7e6e41e58b7d5ac6795df87558a59016378b2a6f308def2eaff0d7b5bb6836a69a2cb8084922f798ec90fc4b"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x6, 0x2}]}}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x219000, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x219000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) 1.58928972s ago: executing program 5 (id=806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.240393193s ago: executing program 5 (id=808): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1e}, 0x94) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b, 0x7f}, @ipv4=@udp={{0xb, 0x4, 0x3, 0x1b, 0xac, 0x66, 0x0, 0x1, 0x11, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp={0x44, 0xc, 0x66, 0x0, 0x0, [0x5, 0x9]}, @end, @generic={0x86, 0x8, "be85823b684f"}]}}, {0x4e20, 0x4e20, 0x80, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100}, "a656fa5c00e68efc4e867f2636f8119ebb1c350edd3a2e4fc32e4af1093174ff005603e96a25f74c1494d9b0e7bcd3b446c6023539b70dc306f96bb30d94007518da0b90a2b370ff930fbbddbfdb953599a9190a7258670605ff2e401574379dd210bb84686678d467655676754238a2"}}}}, 0xba) r5 = getpid() openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x4, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r7, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r7, 0xc0045405, &(0x7f0000000000)=0x82) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket(0x28, 0x5, 0x0) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r10, 0x4) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) shutdown(r9, 0x0) recvfrom$unix(r9, 0x0, 0x0, 0x10120, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df01200004"], 0x509) 1.110587232s ago: executing program 5 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$inet(0x2, 0x3, 0x2) 1.060285844s ago: executing program 5 (id=810): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x404, 0x1, 0x5, 0x0, [{0x7, 0xc, 0x4, '\x00', 0x38}, {0x3, 0xfe, 0x7c, '\x00', 0x2f}, {0x6, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x1, '\x00', 0x16}, {0x5, 0x5, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x47}, {0x52, 0x9, 0x48, '\x00', 0x7}, {0x6, 0x6, 0xab, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x16, 0x24, 0xa5, '\x00', 0x1}, {0x7, 0x1, 0x7, '\x00', 0x8}, {0x6, 0xc, 0x5, '\x00', 0x3}, {0x19, 0x11, 0x8c, '\x00', 0x4}, {0x5, 0xc1, 0x7, '\x00', 0x6}, {0x8, 0x2, 0xcb, '\x00', 0x3}, {0x7, 0x6, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x6, 0x3, 0x7, '\x00', 0x6}, {0xf4, 0x8, 0x5, '\x00', 0xf8}, {0x4, 0x5, 0x31, '\x00', 0xf7}, {0x6, 0x7, 0xfe, '\x00', 0xa}, {0xff, 0x20, 0x3, '\x00', 0x7}, {0x16, 0x88, 0x4, '\x00', 0x8}]}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x2, 0xa, 0x0, 0x613, 0xf, 0x81, 0x7, 0x6, 0x0, 0x77, 0x10, 0x0, 0x3, 0x7, 0x4, 0xd, 0x7, 0x5, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000380)={0x9, [[0x9, 0x4, 0x5, 0x1, 0x7, 0x10, 0x8000, 0x7], [0x400, 0xb8a, 0x401, 0x0, 0x7f, 0x5, 0x8d2c, 0x4], [0x80000000, 0x799, 0x8, 0x6, 0x62a17e7b, 0x43, 0x2, 0x7]], '\x00', [{0xcd3, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x10000, 0x0, 0x1, 0x1}, {0xffff3741, 0xa400, 0x1}, {0x6cd4b727, 0x4}, {0x1, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xa6, 0x1, 0x1, 0x1}, {0xfffffffe, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xd08, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xb, 0x1, 0x0, 0x1}, {0x2, 0x141, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x5d, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) 1.044144552s ago: executing program 1 (id=811): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc4, &(0x7f0000000000)=""/196}, 0x94) socket(0x28, 0x6, 0x1ff) 979.67463ms ago: executing program 1 (id=812): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000003000000020000000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001e0000dd296ff6ffff5156e026c3a7c70000000000000000800000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 977.788915ms ago: executing program 5 (id=813): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0xb000, {}, 0x1, 0x20000009a6}, {"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", "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"}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34000000030a010800000000000000000a0000080900010073797a31000000000c000240000000000000000208000540020000001400000011000100"], 0x5c}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 977.53968ms ago: executing program 1 (id=814): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) lseek(r4, 0x8, 0x2) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @multicast1}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='pimreg\x00', 0x3, 0xf9, 0x1}) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 659.888802ms ago: executing program 5 (id=815): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 290.250501ms ago: executing program 3 (id=817): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x10800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000400)=r3}, 0x20) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="09000300010001", 0x7) ioctl$CDROMVOLCTRL(r4, 0x30d, &(0x7f0000000080)={0xfa, 0x8, 0x7, 0xd}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x402042, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0xfffff2f8, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x40, 0x5, 0xffffff01}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000380)="c7753eb46837d67a3fe1108aa537de389608292c1fbc4e8c71990f6cf9276c9d1959de5c8ec607e0a65a515a9328a5c37edfd3473647a6262b693f1654a3dcf39af007fc5b693f67d604bbc5fc6c83f5442e02ba594d5b5127867d8473548f1e77a47d43d54c", 0x66}, {&(0x7f0000000700)="e5c174f3a237bc406c48102a89fb3a2da6fa0b4af229119540e7a4c31c7ba64f4cee9ba80867ea3a3cdcaf3ea607c21613059f7730ba493391d2d563940d89ca12d8851befb5d203b9a2570805e3cf3e64d07efe4f6f3d145b8b9ae25c27efe9ddad9684cdde6611dc067451411bce0c27b679798e60aeb42d9964fcde0f4d99b8f1463ff9e2737b5810816d6d31286580e04596b942d51378a56fe6d8bf887a99fe45ef1e22782fbf6ddf3c195fad3582cbe783f8b427077f2a0624637c677136454403d18848b0e4918e640768cba39b6202c740de75a6b1000000005385dff6683b67f216158c2c7cf09efe2d6aab20a585b97000"/261, 0x105}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="65feffffffffffff0000000002000000d34a0000000000002000000000000000000000000700000000440c61e3ac1414220000f1610000001400000000000000000000000100000001000000000000001100a3c4635ac659b24f00000100000006000000000000001100000000000000000000000100fdff0500000000000000"], 0x80}, 0x800) ioctl$CDROM_LAST_WRITTEN(r6, 0x5323, 0x0) 289.506378ms ago: executing program 3 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, 0x4, 0x40, 0x3, 0x17, 0x22, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x7, 0x20, 0xfff, 0xf}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x400, 0x70bd26, 0x3, {0x2, 0x78, 0x58, 0xff, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) 200.484515ms ago: executing program 3 (id=819): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) time(&(0x7f0000000000)) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) write$tun(r0, &(0x7f00000018c0)={@val, @val={0x0, 0x1, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf18, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0xc, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xf4e) 50.768608ms ago: executing program 3 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/40, 0x28}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00001b5dc6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f0000000640)="89c1e73dbba6d6cc4f35f18081260d5100b36d0cc1bac04a116148cfab0e5504c2fff73d35ed388e2f2588b5895abd2ba0ba5b70cba6de26cb28b90b2a1b6c12acd74dbf5f3e9f6654f19259ca7b942e5b3fa54b0ec10f7fff04d99555f14f86c583c39d3e7427fce326610072311996c1937fd727c007ce", 0x78) pipe(&(0x7f0000000580)) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f00000006c0)) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="eb", 0x1}], 0x1}}], 0x1, 0x884) writev(r3, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000380), 0x4801, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 465.439µs ago: executing program 3 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 0s ago: executing program 3 (id=822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c001700080000000000000004001900"], 0x24}}, 0x0) inotify_init1(0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @initdev}, &(0x7f0000002140)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010424bd7000fbdbdfe2978bbf0008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008004b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) 0s ago: executing program 3 (id=823): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x8, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048012}, 0x20000040) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf25070000001b3006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00"], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000980)}) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ T7113] team_slave_1: entered promiscuous mode [ 78.156530][ T7113] gretap1: entered promiscuous mode [ 78.196733][ T5821] usb 6-1: device descriptor read/64, error -71 [ 78.204639][ T7115] i8042 kbd 00:00: in use; can't configure [ 78.242620][ T7117] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 78.253740][ T7117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.261012][ T7117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.261178][ T7117] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 78.261555][ T7117] bond1: (slave gre1): Error -95 calling set_mac_address [ 78.307126][ T5821] usb usb6-port1: attempt power cycle [ 78.315193][ T7117] gretap2: entered promiscuous mode [ 78.321456][ T7117] bond1: (slave gretap2): making interface the new active one [ 78.324883][ T7117] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 78.508987][ T7130] capability: warning: `syz.3.333' uses 32-bit capabilities (legacy support in use) [ 78.552376][ T7130] xt_nfacct: accounting object `syz1' does not exist [ 78.569243][ T42] libceph: connect (1)[c::]:6789 error -101 [ 78.569348][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 78.646713][ T5821] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.659642][ T7130] ceph: No mds server is up or the cluster is laggy [ 78.668914][ T5821] usb 6-1: device descriptor read/8, error -71 [ 78.762487][ T7140] nbd3: detected capacity change from 0 to 1 [ 78.765608][ T5742] buffer_io_error: 10 callbacks suppressed [ 78.765623][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765649][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765694][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765725][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765746][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765758][ T5742] ldm_validate_partition_table(): Disk read failed. [ 78.765776][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765796][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765815][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765836][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765847][ T5742] Dev nbd3: unable to read RDB block 0 [ 78.765865][ T5742] Buffer I/O error on dev nbd3, logical block 0, async page read [ 78.765898][ T5742] nbd3: unable to read partition table [ 78.766044][ T5742] nbd3: partition table beyond EOD, truncated [ 78.770330][ T5742] ldm_validate_partition_table(): Disk read failed. [ 78.770381][ T5742] Dev nbd3: unable to read RDB block 0 [ 78.770424][ T5742] nbd3: unable to read partition table [ 78.770557][ T5742] nbd3: partition table beyond EOD, truncated [ 78.806727][ T5807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 78.813518][ T7141] block nbd3: shutting down sockets [ 78.899628][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 78.908755][ T5821] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 78.927464][ T5821] usb 6-1: device descriptor read/8, error -71 [ 78.956690][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 78.958888][ T5807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.958914][ T5807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 78.961948][ T5807] usb 5-1: string descriptor 0 read error: -22 [ 78.962008][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.968032][ T5807] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 78.968063][ T5807] dw2102: su3000_power_ctrl: 1, initialized 0 [ 78.968424][ T5807] dvb-usb: bulk message failed: -22 (2/0) [ 78.974831][ T43] audit: type=1400 audit(1789154911.769:1090): avc: denied { append } for pid=7148 comm="syz.3.339" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.978601][ T7149] loop5: detected capacity change from 0 to 2640 [ 78.983707][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.984220][ T7149] ldm_validate_partition_table(): Disk read failed. [ 78.984262][ T7149] Dev loop5: unable to read RDB block 0 [ 78.984348][ T7149] loop5: unable to read partition table [ 78.984436][ T7149] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 78.986371][ T5807] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 78.986412][ T5807] usb 5-1: media controller created [ 78.986761][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986777][ T5807] dw2102: i2c transfer failed. [ 78.986806][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986817][ T5807] dw2102: i2c transfer failed. [ 78.986828][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986839][ T5807] dw2102: i2c transfer failed. [ 78.986848][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986878][ T5807] dw2102: i2c transfer failed. [ 78.986890][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986901][ T5807] dw2102: i2c transfer failed. [ 78.986911][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 78.986922][ T5807] dw2102: i2c transfer failed. [ 78.986928][ T5807] dvb-usb: MAC address: 02:02:02:02:02:02 [ 78.995140][ T7149] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 79.000683][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.017254][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 79.017269][ T5807] dw2102: command 0x0e transfer failed. [ 79.017278][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 79.017289][ T5807] dw2102: command 0x0e transfer failed. [ 79.037000][ T5821] usb usb6-port1: unable to enumerate USB device [ 79.055787][ T5143] ldm_validate_partition_table(): Disk read failed. [ 79.055825][ T5143] Dev loop5: unable to read RDB block 0 [ 79.056051][ T5143] loop5: unable to read partition table [ 79.085993][ T7153] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 79.135503][ T5090] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 79.237513][ T42] usb 9-1: USB disconnect, device number 5 [ 79.327634][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 79.327650][ T5807] dw2102: command 0x0e transfer failed. [ 79.327655][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 79.327661][ T5807] dw2102: command 0x0e transfer failed. [ 79.327665][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 79.327672][ T5807] dw2102: command 0x51 transfer failed. [ 79.329784][ T7134] dvb-usb: bulk message failed: -22 (4/0) [ 79.329796][ T7134] dw2102: i2c transfer failed. [ 79.359658][ T5807] DVB: Unable to find symbol ds3000_attach() [ 79.359669][ T5807] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 79.378200][ T43] audit: type=1400 audit(1789154912.179:1091): avc: denied { write } for pid=7163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.407057][ T5807] rc_core: IR keymap rc-su3000 not found [ 79.407069][ T5807] Registered IR keymap rc-empty [ 79.409678][ T5807] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 79.410653][ T5807] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input7 [ 79.416543][ T5807] dvb-usb: schedule remote query interval to 150 msecs. [ 79.416557][ T5807] dw2102: su3000_power_ctrl: 0, initialized 1 [ 79.416564][ T5807] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 79.427610][ T43] audit: type=1400 audit(1789154912.219:1092): avc: denied { write } for pid=7167 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.475197][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 79.488979][ T7158] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 79.517896][ T5807] usb 5-1: USB disconnect, device number 14 [ 79.523337][ T7170] batadv0: entered promiscuous mode [ 79.524165][ T7170] macsec1: entered promiscuous mode [ 79.524283][ T7170] macsec1: entered allmulticast mode [ 79.524292][ T7170] batadv0: entered allmulticast mode [ 79.525883][ T7170] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 79.529161][ T7170] batadv0: left allmulticast mode [ 79.529325][ T7170] batadv0: left promiscuous mode [ 79.570284][ T5807] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 79.589350][ T43] audit: type=1400 audit(1789154912.389:1093): avc: denied { write } for pid=7173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.623600][ T43] audit: type=1400 audit(1789154912.419:1094): avc: denied { accept } for pid=7169 comm="syz.4.342" laddr=fe80::1f lport=42516 faddr=fe80::25 fport=19972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 79.656973][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.657006][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.657062][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.971092][ T5807] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 80.101479][ T7204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7204 comm=syz.0.347 [ 80.101863][ T7205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7205 comm=syz.0.347 [ 81.418443][ T5522] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 81.736811][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.736855][ T5090] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.694011][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 85.694025][ T43] audit: type=1400 audit(1789154918.489:1110): avc: denied { write } for pid=7227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.761760][ T43] audit: type=1400 audit(1789154918.559:1111): avc: denied { write } for pid=7230 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.665772][ T43] audit: type=1400 audit(1789154921.459:1112): avc: denied { write } for pid=7234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.720428][ T43] audit: type=1400 audit(1789154921.519:1113): avc: denied { write } for pid=7237 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.384738][ T43] audit: type=1400 audit(1789154924.179:1114): avc: denied { write } for pid=7240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.439886][ T43] audit: type=1400 audit(1789154924.239:1115): avc: denied { write } for pid=7243 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.965110][ T43] audit: type=1400 audit(1789154925.759:1116): avc: denied { watch } for pid=7250 comm="syz.4.352" path="/47/net_prio.prioidx" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.965556][ T43] audit: type=1400 audit(1789154925.759:1117): avc: denied { watch_sb } for pid=7250 comm="syz.4.352" path="/47/net_prio.prioidx" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.992200][ T7251] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 93.024866][ T43] audit: type=1400 audit(1789154925.819:1118): avc: denied { write } for pid=7259 comm="syz.1.354" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.025942][ T7251] bridge0: port 3(team0) entered blocking state [ 93.025995][ T7262] ucma_write: process 158 (syz.4.355) changed security contexts after opening file descriptor, this is not allowed. [ 93.026032][ T7251] bridge0: port 3(team0) entered listening state [ 93.026235][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.026322][ T7251] bridge0: port 2(bridge_slave_1) entered listening state [ 93.026519][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.027252][ T7251] bridge0: port 1(bridge_slave_0) entered listening state [ 93.056239][ T7251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.069325][ T43] audit: type=1400 audit(1789154925.869:1119): avc: denied { read } for pid=7263 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 93.071505][ T43] audit: type=1400 audit(1789154925.869:1120): avc: denied { map } for pid=7263 comm="syz.4.356" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 93.137599][ T7264] tipc: Started in network mode [ 93.137619][ T7264] tipc: Node identity 1000001, cluster identity 4369 [ 93.137631][ T7264] tipc: Node number set to 16777217 [ 93.138528][ T7264] tipc: Cannot configure node identity twice [ 93.141553][ T7264] tipc: New replicast peer: 127.0.0.1 [ 93.142120][ T43] audit: type=1400 audit(1789154925.939:1121): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.143235][ T7264] tipc: Enabled bearer , priority 10 [ 93.236683][ T62] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 93.416655][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 93.417109][ T62] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.417960][ T62] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.417974][ T62] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.417985][ T62] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.418008][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.418021][ T62] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.418034][ T62] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.418054][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.419423][ T62] usb 5-1: config 0 descriptor?? [ 93.446710][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.446857][ T5522] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.606710][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 93.607791][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.608907][ T5522] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.608935][ T5522] usb 8-1: no configurations [ 93.608945][ T5522] usb 8-1: can't read configurations, error -22 [ 93.609590][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 93.609626][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.609650][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.609670][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.609690][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.609721][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.625553][ T62] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.630036][ T62] usb 5-1: USB disconnect, device number 15 [ 93.631846][ T62] usblp0: removed [ 93.747093][ T5522] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 93.815572][ T42] usb 6-1: GET_CAPABILITIES returned 0 [ 93.815598][ T42] usbtmc 6-1:16.0: can't read capabilities [ 93.824811][ T43] audit: type=1400 audit(1789154926.619:1122): avc: denied { accept } for pid=7247 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.902637][ T5522] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.902674][ T5522] usb 8-1: no configurations [ 93.902685][ T5522] usb 8-1: can't read configurations, error -22 [ 93.903072][ T5522] usb usb8-port1: attempt power cycle [ 94.015981][ T43] audit: type=1400 audit(1789154926.809:1123): avc: denied { write } for pid=7271 comm="syz.1.359" name="usbtmc0" dev="devtmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.021536][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.023465][ T42] usb 6-1: USB disconnect, device number 12 [ 94.236793][ T5522] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 94.258322][ T5522] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.258357][ T5522] usb 8-1: no configurations [ 94.258368][ T5522] usb 8-1: can't read configurations, error -22 [ 94.396766][ T5522] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 94.427849][ T5522] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.427884][ T5522] usb 8-1: no configurations [ 94.427894][ T5522] usb 8-1: can't read configurations, error -22 [ 94.429035][ T5522] usb usb8-port1: unable to enumerate USB device [ 94.452409][ T7282] netlink: 'syz.0.361': attribute type 8 has an invalid length. [ 94.674731][ T7288] erspan1: entered promiscuous mode [ 94.915093][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.368'. [ 94.939689][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 95.031153][ T7308] bond5: option xmit_hash_policy: invalid value (6) [ 95.034056][ T7308] bond5 (unregistering): Released all slaves [ 95.068647][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 95.068661][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 95.121292][ T7320] ip6t_srh: unknown srh match flags 7700 [ 95.140417][ T7329] tipc: Enabling of bearer rejected, already enabled [ 96.043981][ T7350] openvswitch: netlink: Key type 68 is out of range max 32 [ 96.046475][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 96.046545][ T7350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.046555][ T7350] IPv6: NLM_F_CREATE should be set when creating new route [ 96.046650][ T7350] IPv6: NLM_F_CREATE should be set when creating new route [ 96.239704][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.379'. [ 96.301449][ T7365] bonding: no command found in bonding_masters - use +ifname or -ifname [ 96.359743][ T7370] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.383819][ T7370] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.431003][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.441913][ T7381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 96.442512][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.442626][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.442731][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.442879][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.442985][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.443093][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.443197][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.443299][ T7381] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 96.454345][ T7382] bond5: (slave geneve3): making interface the new active one [ 96.458545][ T7382] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 96.537216][ T7388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17539 sclass=netlink_route_socket pid=7388 comm=syz.0.388 [ 96.537813][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 96.537822][ T43] audit: type=1400 audit(1789154929.339:1137): avc: denied { mmap_zero } for pid=7385 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 96.580504][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.389'. [ 96.582822][ T43] audit: type=1400 audit(1789154929.379:1138): avc: denied { listen } for pid=7394 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.635067][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 96.746447][ T7404] macsec1: entered promiscuous mode [ 96.746468][ T7404] macsec1: entered allmulticast mode [ 97.036974][ T7426] xt_ipcomp: unknown flags 1D [ 97.037411][ T7426] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كX3UPK5R X7R.]O\kekөopґ 0[{q6?Uq9mߣ7``I3ŵ' is too long [ 97.114279][ T43] audit: type=1400 audit(1789154929.909:1139): avc: denied { create } for pid=7427 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 97.126458][ T43] audit: type=1400 audit(1789154929.919:1140): avc: denied { sys_admin } for pid=7427 comm="syz.1.399" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.485997][ T7445] overlayfs: overlapping lowerdir path [ 97.529845][ T7447] jffs2: notice: (7447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 97.533400][ T43] audit: type=1400 audit(1789154930.329:1141): avc: denied { write } for pid=7446 comm="syz.1.404" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.537834][ T7447] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 97.537870][ T7447] SELinux: failed to load policy [ 97.539132][ T43] audit: type=1400 audit(1789154930.339:1142): avc: denied { mounton } for pid=7446 comm="syz.1.404" path="/124/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.542797][ T7450] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 97.542840][ T7450] SELinux: failed to load policy [ 97.633479][ T43] audit: type=1400 audit(1789154930.429:1143): avc: denied { ioctl } for pid=7453 comm="syz.0.406" path="pid:[4026532863]" dev="nsfs" ino=4026532863 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.716361][ T7467] bond2: option mode: invalid value (7) [ 97.722727][ T7467] bond2 (unregistering): Released all slaves [ 97.752923][ T7471] Unsupported ieee802154 address type: 0 [ 97.752981][ T43] audit: type=1400 audit(1789154930.549:1144): avc: denied { bind } for pid=7470 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.763371][ T7471] bond2: entered promiscuous mode [ 97.763568][ T7471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.796141][ T43] audit: type=1400 audit(1789154930.589:1145): avc: denied { shutdown } for pid=7474 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.823622][ T7471] veth3: entered allmulticast mode [ 97.832607][ T7471] bond2: (slave veth3): making interface the new active one [ 97.832626][ T7471] veth3: entered promiscuous mode [ 97.833360][ T7471] bond2: (slave veth3): Enslaving as an active interface with an up link [ 97.839974][ T7477] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.839990][ T7477] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 97.878664][ T43] audit: type=1400 audit(1789154930.679:1146): avc: denied { mounton } for pid=7465 comm="syz.1.408" path="/proc/403/cgroup" dev="proc" ino=17995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 97.968361][ T7488] comedi comedi3: comedi_test: 259 microvolt, 4 microsecond waveform attached [ 98.190865][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 98.284395][ T5090] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 98.801828][ T7518] loop7: detected capacity change from 0 to 7 [ 98.886044][ T7518] Dev loop7: unable to read RDB block 7 [ 98.886067][ T7518] loop7: unable to read partition table [ 98.886158][ T7518] loop7: partition table beyond EOD, truncated [ 98.886170][ T7518] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 98.891367][ C2] blk_print_req_error: 10 callbacks suppressed [ 98.891380][ C2] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 98.891418][ C2] buffer_io_error: 67 callbacks suppressed [ 98.891424][ C2] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 99.624651][ T7546] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 101.841092][ T7520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.925636][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 101.925651][ T43] audit: type=1400 audit(1789154934.719:1151): avc: denied { mount } for pid=7549 comm="syz.3.431" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.932864][ T7553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.430'. [ 101.949276][ T7555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7555 comm=syz.0.432 [ 102.010573][ T43] audit: type=1400 audit(1789154934.809:1152): avc: denied { getopt } for pid=7563 comm="syz.0.436" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.018300][ T7564] dvmrp0: entered allmulticast mode [ 102.049363][ T43] audit: type=1400 audit(1789154934.849:1153): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.071057][ T43] audit: type=1400 audit(1789154934.869:1154): avc: denied { bind } for pid=7570 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.803952][ T7594] ublk_ctrl_add_dev: dev id not match 4294967295 198 [ 102.967095][ T43] audit: type=1400 audit(1789154935.759:1155): avc: denied { mount } for pid=7602 comm="syz.3.445" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 102.971380][ T7604] 9p: Bad value for 'rfdno' [ 103.012200][ T43] audit: type=1400 audit(1789154935.809:1156): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 103.051180][ T43] audit: type=1400 audit(1789154935.849:1157): avc: denied { ioctl } for pid=7610 comm="syz.1.448" path="socket:[20078]" dev="sockfs" ino=20078 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.139490][ T7621] bond0: no command found in slaves file - use +ifname or -ifname [ 103.245638][ T43] audit: type=1400 audit(1789154936.039:1158): avc: denied { getopt } for pid=7631 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.437706][ T7652] program syz.3.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.443686][ T7652] veth0_macvtap: left promiscuous mode [ 103.640112][ T43] audit: type=1400 audit(1789154936.439:1159): avc: denied { write } for pid=7663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.698836][ T43] audit: type=1400 audit(1789154936.499:1160): avc: denied { write } for pid=7673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.717151][ T7668] binder: 7655:7668 ioctl 8004500b 2000000002c0 returned -22 [ 103.720582][ T7668] binder: 7655:7668 ioctl c0306201 200000000280 returned -14 [ 103.720685][ T7675] binder: 7655:7675 ioctl c0306201 200000000280 returned -14 [ 103.721720][ T7668] binder: 7655:7668 ioctl c0306201 0 returned -14 [ 103.734535][ T5445] veth0_macvtap: entered promiscuous mode [ 104.566521][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 104.886803][ T5522] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 105.036736][ T5522] usb 6-1: Using ep0 maxpacket: 8 [ 105.037377][ T5522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.038295][ T5522] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 105.038320][ T5522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 105.038333][ T5522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.038345][ T5522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.038356][ T5522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.038376][ T5522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.171996][ T7724] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 105.172043][ T7724] SELinux: failed to load policy [ 105.222516][ T7727] Invalid source name [ 105.222530][ T7727] UBIFS error (pid: 7727): cannot open "/dev/sg0", error -22 [ 105.243327][ T5522] usb 6-1: GET_CAPABILITIES returned 0 [ 105.243368][ T5522] usbtmc 6-1:16.0: can't read capabilities [ 105.339561][ T7734] binder: 7726:7734 ioctl 8004500b 2000000002c0 returned -22 [ 105.444542][ T5522] usb 6-1: USB disconnect, device number 13 [ 106.160227][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 106.160246][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 106.168787][ T7744] overlayfs: upper fs does not support file handles, falling back to index=off. [ 106.168798][ T7744] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 106.494988][ T7770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.495026][ T7770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.529854][ T7775] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 106.529899][ T7775] SELinux: failed to load policy [ 106.605104][ T7770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.605128][ T7770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.681822][ T7770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.681865][ T7770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.772066][ T7770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.772104][ T7770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.826791][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 106.959434][ T10] usb 5-1: device descriptor read/64, error -71 [ 106.979167][ T7778] vlan2: entered promiscuous mode [ 106.979183][ T7778] batadv0: entered promiscuous mode [ 106.979304][ T7778] vlan2: entered allmulticast mode [ 106.979313][ T7778] batadv0: entered allmulticast mode [ 107.132034][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 107.132053][ T43] audit: type=1400 audit(1789154939.929:1164): avc: denied { read } for pid=7779 comm="syz.1.482" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.132269][ T43] audit: type=1400 audit(1789154939.929:1165): avc: denied { open } for pid=7779 comm="syz.1.482" path="/156/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.156075][ T7784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.156296][ T7784] block device autoloading is deprecated and will be removed. [ 107.158781][ T43] audit: type=1400 audit(1789154939.959:1166): avc: denied { ioctl } for pid=7779 comm="syz.1.482" path="/156/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.206857][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 107.213650][ T7784] xt_bpf: check failed: parse error [ 107.218355][ T7787] Mount JFS Failure: -22 [ 107.218365][ T7787] jfs_mount failed w/return code = -22 [ 107.272057][ T7789] comedi comedi4: comedi_config --init_data is deprecated [ 107.347062][ T10] usb 5-1: device descriptor read/64, error -71 [ 107.467214][ T10] usb usb5-port1: attempt power cycle [ 107.826695][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 107.847489][ T10] usb 5-1: device descriptor read/8, error -71 [ 107.970398][ T43] audit: type=1400 audit(1789154940.769:1167): avc: denied { name_bind } for pid=7796 comm="syz.1.486" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.006708][ T43] audit: type=1400 audit(1789154940.789:1168): avc: denied { mounton } for pid=7796 comm="syz.1.486" path="/157/config" dev="configfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.062244][ T5090] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 108.086778][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 108.107254][ T10] usb 5-1: device descriptor read/8, error -71 [ 108.139971][ T111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.140002][ T7805] xt_hashlimit: size too large, truncated to 1048576 [ 108.205776][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.215847][ T7807] bridge_slave_0 (unregistering): left allmulticast mode [ 108.215865][ T7807] bridge_slave_0 (unregistering): left promiscuous mode [ 108.216017][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.232678][ T10] usb usb5-port1: unable to enumerate USB device [ 108.279906][ T7810] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.279933][ T7810] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.284673][ T7810] binder: 7809:7810 ioctl c0306201 2000000001c0 returned -14 [ 108.344989][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.370374][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.371356][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.373268][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.384114][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.385425][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.387975][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.411072][ T43] audit: type=1400 audit(1789154941.209:1169): avc: denied { read } for pid=7821 comm="syz.3.493" name="/" dev="configfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.411303][ T43] audit: type=1400 audit(1789154941.209:1170): avc: denied { read open } for pid=7821 comm="syz.3.493" path="/" dev="configfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.565426][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.576722][ T50] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.617034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.643062][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.657961][ T5835] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 108.705871][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.726764][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 108.727319][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.728204][ T50] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 108.728222][ T50] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 108.728235][ T50] usb 6-1: config 1 interface 0 has no altsetting 0 [ 108.729723][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.729735][ T50] usb 6-1: Product: syz [ 108.729744][ T50] usb 6-1: Manufacturer: syz [ 108.729751][ T50] usb 6-1: SerialNumber: syz [ 108.732290][ T7818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.732452][ T7818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.760175][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.776992][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.807073][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 108.808226][ T5835] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.809480][ T5835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 108.809498][ T5835] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.809516][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.809529][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.809541][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.809554][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.809567][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.809623][ T5835] usb 8-1: config 168 interface 0 has no altsetting 0 [ 108.812816][ T5835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 108.812834][ T5835] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.812852][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.812866][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.812878][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.812891][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.812904][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.812917][ T5835] usb 8-1: config 168 interface 0 has no altsetting 0 [ 108.815107][ T5835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 108.815135][ T5835] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.815165][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.815186][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.815206][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.815226][ T5835] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.815247][ T5835] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.815268][ T5835] usb 8-1: config 168 interface 0 has no altsetting 0 [ 108.858696][ T5835] usb 8-1: string descriptor 0 read error: -22 [ 108.858867][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.927462][ T5835] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.942946][ T50] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 108.953488][ T50] usb 6-1: USB disconnect, device number 14 [ 108.991516][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.991706][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.991832][ T7815] bridge_slave_0: entered allmulticast mode [ 108.992827][ T7815] bridge_slave_0: entered promiscuous mode [ 108.995247][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.995324][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.995429][ T7815] bridge_slave_1: entered allmulticast mode [ 108.999306][ T7815] bridge_slave_1: entered promiscuous mode [ 109.019762][ T12] bridge_slave_1: left allmulticast mode [ 109.019786][ T12] bridge_slave_1: left promiscuous mode [ 109.021109][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.025092][ T12] bridge_slave_0: left allmulticast mode [ 109.025105][ T12] bridge_slave_0: left promiscuous mode [ 109.025207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.160530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.163683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.171073][ T12] bond0 (unregistering): Released all slaves [ 109.191849][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.194824][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.257280][ T7815] team0: Port device team_slave_0 added [ 109.259989][ T7815] team0: Port device team_slave_1 added [ 109.261891][ T42] usb 8-1: USB disconnect, device number 11 [ 109.262981][ T7842] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 109.315848][ T43] audit: type=1400 audit(1789154942.109:1171): avc: denied { write } for pid=7845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.320343][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.320357][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.320379][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.321892][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.321904][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.321924][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.348883][ T7815] hsr_slave_0: entered promiscuous mode [ 109.349301][ T7815] hsr_slave_1: entered promiscuous mode [ 109.349582][ T7815] debugfs: 'hsr0' already exists in 'hsr' [ 109.349593][ T7815] Cannot create hsr debugfs directory [ 109.369457][ T43] audit: type=1400 audit(1789154942.169:1172): avc: denied { write } for pid=7848 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.405414][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.494166][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.494'. [ 109.514185][ T43] audit: type=1400 audit(1789154942.309:1173): avc: denied { write } for pid=7854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.569093][ T12] hsr_slave_0: left promiscuous mode [ 109.569675][ T12] hsr_slave_1: left promiscuous mode [ 109.570151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.570169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.572041][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.572057][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.602218][ T12] veth1_macvtap: left promiscuous mode [ 109.602280][ T12] veth0_macvtap: left promiscuous mode [ 109.602332][ T12] veth1_vlan: left promiscuous mode [ 109.602372][ T12] veth0_vlan: left promiscuous mode [ 109.656735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.750587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.756481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.830145][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.847858][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.857965][ T7876] tmpfs: Bad value for 'mpol' [ 109.858093][ T7876] tmpfs: Bad value for 'mpol' [ 109.858208][ T7876] tmpfs: Bad value for 'mpol' [ 109.858331][ T7876] tmpfs: Bad value for 'mpol' [ 109.858463][ T7876] tmpfs: Bad value for 'mpol' [ 109.858753][ T7876] tmpfs: Bad value for 'mpol' [ 109.858897][ T7876] tmpfs: Bad value for 'mpol' [ 109.859040][ T7876] tmpfs: Bad value for 'mpol' [ 109.859153][ T7876] tmpfs: Bad value for 'mpol' [ 109.859270][ T7876] tmpfs: Bad value for 'mpol' [ 109.859387][ T7876] tmpfs: Bad value for 'mpol' [ 109.859503][ T7876] tmpfs: Bad value for 'mpol' [ 109.859634][ T7876] tmpfs: Bad value for 'mpol' [ 109.859749][ T7876] tmpfs: Bad value for 'mpol' [ 109.859868][ T7876] tmpfs: Bad value for 'mpol' [ 109.866144][ T7876] tmpfs: Bad value for 'mpol' [ 109.866292][ T7876] tmpfs: Bad value for 'mpol' [ 109.866409][ T7876] tmpfs: Bad value for 'mpol' [ 109.866536][ T7876] tmpfs: Bad value for 'mpol' [ 109.867294][ T7876] tmpfs: Bad value for 'mpol' [ 109.867414][ T7876] tmpfs: Bad value for 'mpol' [ 109.867546][ T7876] tmpfs: Bad value for 'mpol' [ 109.867725][ T7876] tmpfs: Bad value for 'mpol' [ 109.867846][ T7876] tmpfs: Bad value for 'mpol' [ 109.867959][ T7876] tmpfs: Bad value for 'mpol' [ 109.868681][ T7876] tmpfs: Bad value for 'mpol' [ 109.868897][ T7876] tmpfs: Bad value for 'mpol' [ 109.869111][ T7876] tmpfs: Bad value for 'mpol' [ 109.869360][ T7876] tmpfs: Bad value for 'mpol' [ 109.869487][ T7876] tmpfs: Bad value for 'mpol' [ 109.869600][ T7876] tmpfs: Bad value for 'mpol' [ 109.869778][ T7876] tmpfs: Bad value for 'mpol' [ 109.869896][ T7876] tmpfs: Bad value for 'mpol' [ 109.870012][ T7876] tmpfs: Bad value for 'mpol' [ 109.870124][ T7876] tmpfs: Bad value for 'mpol' [ 109.870238][ T7876] tmpfs: Bad value for 'mpol' [ 109.870350][ T7876] tmpfs: Bad value for 'mpol' [ 109.870533][ T7876] tmpfs: Bad value for 'mpol' [ 109.870759][ T7876] tmpfs: Bad value for 'mpol' [ 109.870965][ T7876] tmpfs: Bad value for 'mpol' [ 109.871143][ T7876] tmpfs: Bad value for 'mpol' [ 109.871260][ T7876] tmpfs: Bad value for 'mpol' [ 109.871375][ T7876] tmpfs: Bad value for 'mpol' [ 109.871560][ T7876] tmpfs: Bad value for 'mpol' [ 109.871676][ T7876] tmpfs: Bad value for 'mpol' [ 109.871790][ T7876] tmpfs: Bad value for 'mpol' [ 109.871903][ T7876] tmpfs: Bad value for 'mpol' [ 109.872019][ T7876] tmpfs: Bad value for 'mpol' [ 109.872133][ T7876] tmpfs: Bad value for 'mpol' [ 109.872264][ T7876] tmpfs: Bad value for 'mpol' [ 109.872382][ T7876] tmpfs: Bad value for 'mpol' [ 109.872500][ T7876] tmpfs: Bad value for 'mpol' [ 109.872664][ T7876] tmpfs: Bad value for 'mpol' [ 109.872791][ T7876] tmpfs: Bad value for 'mpol' [ 109.872906][ T7876] tmpfs: Bad value for 'mpol' [ 109.873023][ T7876] tmpfs: Bad value for 'mpol' [ 109.873170][ T7876] tmpfs: Bad value for 'mpol' [ 109.873286][ T7876] tmpfs: Bad value for 'mpol' [ 109.873399][ T7876] tmpfs: Bad value for 'mpol' [ 109.873518][ T7876] tmpfs: Bad value for 'mpol' [ 109.873634][ T7876] tmpfs: Bad value for 'mpol' [ 109.873792][ T7876] tmpfs: Bad value for 'mpol' [ 109.873936][ T7876] tmpfs: Bad value for 'mpol' [ 109.874052][ T7876] tmpfs: Bad value for 'mpol' [ 109.874166][ T7876] tmpfs: Bad value for 'mpol' [ 109.917874][ T7815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.928303][ T7815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.932421][ T7815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.939671][ T7815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.940065][ T7815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.954144][ T7815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.956441][ T7815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.962834][ T7815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.012070][ T7895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.032686][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.053721][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.094629][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.097549][ T7896] bridge_slave_0 (unregistering): left allmulticast mode [ 110.097563][ T7896] bridge_slave_0 (unregistering): left promiscuous mode [ 110.097597][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.127461][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.127515][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.131304][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.131355][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.133567][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 110.222598][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.226414][ T7901] e1000e 0000:00:02.0 eth1: removed PHC [ 110.398682][ T7901] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 110.466705][ T5090] Bluetooth: hci5: command tx timeout [ 110.483325][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 110.483726][ T7925] syzkaller1: entered promiscuous mode [ 110.483742][ T7925] syzkaller1: entered allmulticast mode [ 110.619664][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.706662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.721338][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.867118][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.894509][ T7815] veth0_vlan: entered promiscuous mode [ 110.899998][ T7815] veth1_vlan: entered promiscuous mode [ 110.914042][ T7815] veth0_macvtap: entered promiscuous mode [ 110.919505][ T7815] veth1_macvtap: entered promiscuous mode [ 110.927137][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.929073][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.966272][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969432][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969457][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.969474][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.003186][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.003204][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.030253][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.030268][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.546380][ T7988] cgroup: fork rejected by pids controller in /syz5 [ 111.802908][ T8051] serio: Serial port ptm0 [ 111.816825][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 111.848271][ T8056] netlink: 220 bytes leftover after parsing attributes in process `syz.1.515'. [ 111.874670][ T8056] 9p: Bad value for 'rfdno' [ 111.903031][ T8042] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 111.938859][ T8061] loop0: detected capacity change from 0 to 3904 [ 111.969520][ T8061] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 111.969536][ T8061] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 111.969544][ T8061] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 111.969572][ T8061] loop0: [ 112.114535][ T8065] Failed to get privilege flags for destination (handle=0x2:0x0) [ 112.240111][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 112.240128][ T43] audit: type=1400 audit(1789154945.039:1199): avc: denied { shutdown } for pid=8067 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.273049][ T5143] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 112.273071][ T5143] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 112.273081][ T5143] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 112.273125][ T5143] loop0: [ 112.443645][ T43] audit: type=1400 audit(1789154945.239:1200): avc: denied { write } for pid=8079 comm="syz.5.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.544798][ T8087] overlayfs: overlapping lowerdir path [ 112.546758][ T5090] Bluetooth: hci5: command tx timeout [ 112.642835][ T43] audit: type=1400 audit(1789154945.439:1201): avc: denied { read } for pid=8100 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.686880][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687109][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687193][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687251][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687304][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687357][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687417][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687470][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687523][ T8102] xt_SECMARK: invalid mode: 2 [ 112.687575][ T8102] xt_SECMARK: invalid mode: 2 [ 112.732464][ T8113] vcan1: entered allmulticast mode [ 112.736125][ T43] audit: type=1400 audit(1789154945.529:1202): avc: denied { setopt } for pid=8112 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.906344][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 112.906369][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 112.989102][ T8142] vxcan1: entered promiscuous mode [ 113.019202][ T43] audit: type=1400 audit(1789154945.819:1203): avc: denied { bind } for pid=8148 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.019248][ T43] audit: type=1400 audit(1789154945.819:1204): avc: denied { name_bind } for pid=8148 comm="syz.1.538" src=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 113.019291][ T43] audit: type=1400 audit(1789154945.819:1205): avc: denied { node_bind } for pid=8148 comm="syz.1.538" src=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 113.073358][ T8153] Cannot find add_set index 2 as target [ 113.136856][ T50] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 113.257270][ T25] net_ratelimit: 6 callbacks suppressed [ 113.257288][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.287480][ T50] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 113.288601][ T50] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 113.288621][ T50] usb 5-1: config 1 has no interface number 0 [ 113.290435][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.290453][ T50] usb 5-1: Product: syz [ 113.290465][ T50] usb 5-1: Manufacturer: syz [ 113.290477][ T50] usb 5-1: SerialNumber: syz [ 113.300502][ T50] usb 5-1: 3:1 : does not exist [ 113.300514][ T50] usb 5-1: 3:2 : does not exist [ 113.498246][ T42] usb 5-1: USB disconnect, device number 20 [ 113.606944][ T43] audit: type=1400 audit(1789154946.409:1206): avc: denied { create } for pid=8160 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.607389][ T43] audit: type=1400 audit(1789154946.409:1207): avc: denied { read } for pid=8160 comm="syz.3.541" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.607660][ T43] audit: type=1400 audit(1789154946.409:1208): avc: denied { open } for pid=8160 comm="syz.3.541" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.698935][ T8132] unsupported nlmsg_type 40 [ 113.987641][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.039502][ T8175] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.146799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.188897][ T8187] comedi comedi1: no devices specified [ 114.235178][ T8191] binder: Bad value for 'max' [ 114.269136][ T8197] loop4: detected capacity change from 0 to 7223 [ 114.273653][ T8197] loop4: AHDI p2 p3 [ 114.277035][ T8197] loop4: p3 start 335544320 is beyond EOD, truncated [ 114.617053][ T65] Bluetooth: hci5: command tx timeout [ 114.960934][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 115.027886][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.039715][ T8243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.186793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.286857][ T8258] overlayfs: failed to resolve './file0': -2 [ 115.290559][ T8259] validate_nla: 28 callbacks suppressed [ 115.290571][ T8259] netlink: 'syz.5.564': attribute type 13 has an invalid length. [ 115.317602][ T8262] No such timeout policy "syz1" [ 115.344384][ T8258] netlink: 112 bytes leftover after parsing attributes in process `syz.3.566'. [ 115.392048][ T8263] SELinux: common does not define every permission it declares [ 115.392325][ T8263] SELinux: failed to load policy [ 115.393242][ T8267] SELinux: common does not define every permission it declares [ 115.393525][ T8267] SELinux: failed to load policy [ 116.003714][ T8295] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 116.003726][ T8295] overlayfs: missing 'lowerdir' [ 116.069641][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.178312][ T8304] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.227735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.297952][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.572666][ T8333] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 116.697003][ T5090] Bluetooth: hci5: command 0x0419 tx timeout [ 116.750482][ T8365] vlan2: entered promiscuous mode [ 116.750506][ T8365] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 117.061265][ T8377] cgroup: fork rejected by pids controller in /syz0 [ 117.071511][ T8377] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 117.089253][ T8377] 8021q: adding VLAN 0 to HW filter on device bond6 [ 117.095905][ T8377] bond6: (slave veth0_to_bond): making interface the new active one [ 117.098010][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.103286][ T8377] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.373612][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 117.373628][ T43] audit: type=1400 audit(1789154950.169:1242): avc: denied { map } for pid=8388 comm="syz.3.601" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.481598][ T43] audit: type=1400 audit(1789154950.279:1243): avc: denied { create } for pid=8396 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.489482][ T5545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.502152][ T8397] netlink: 'syz.3.604': attribute type 12 has an invalid length. [ 117.545292][ T8402] NILFS (nullb0): couldn't find nilfs on the device [ 117.545479][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.549941][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.550481][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.553224][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.553687][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.583848][ T43] audit: type=1400 audit(1789154950.379:1244): avc: denied { read append } for pid=8401 comm="syz.5.606" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.584173][ T43] audit: type=1400 audit(1789154950.379:1245): avc: denied { open } for pid=8401 comm="syz.5.606" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.584781][ T43] audit: type=1400 audit(1789154950.379:1246): avc: denied { ioctl } for pid=8401 comm="syz.5.606" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.645763][ T5545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.647855][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'. [ 117.738701][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 117.738805][ T5545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.855525][ T5545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.887846][ T25] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 117.888942][ T25] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 117.888955][ T25] usb 8-1: config 1 has no interface number 0 [ 117.891425][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.891438][ T25] usb 8-1: Product: syz [ 117.891445][ T25] usb 8-1: Manufacturer: syz [ 117.891452][ T25] usb 8-1: SerialNumber: syz [ 117.903081][ T25] usb 8-1: 3:0 : does not exist [ 117.903094][ T25] usb 8-1: 3:0 : does not exist [ 117.978934][ T8428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5142 sclass=netlink_route_socket pid=8428 comm=syz.5.610 [ 118.031292][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 118.147672][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 118.147696][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 118.169386][ T5545] bridge_slave_1: left allmulticast mode [ 118.169404][ T5545] bridge_slave_1: left promiscuous mode [ 118.169512][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.178885][ T5545] dvmrp0: left allmulticast mode [ 118.296709][ C1] net_ratelimit: 2 callbacks suppressed [ 118.296722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.344355][ T5545] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 118.374863][ T5545] bond5 (unregistering): (slave geneve3): Releasing active interface [ 118.401080][ T5545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.407318][ T5545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.414962][ T5545] bond0 (unregistering): Released all slaves [ 118.426142][ T5545] rdma (unregistering): Released all slaves [ 118.440323][ T5545] bond1 (unregistering): (slave bond2): Releasing backup interface [ 118.441656][ T5545] bond1 (unregistering): Released all slaves [ 118.458257][ T5545] bond2 (unregistering): Released all slaves [ 118.477787][ T5545] bond3 (unregistering): Released all slaves [ 118.487416][ T5545] bond4 (unregistering): Released all slaves [ 118.505344][ T5545] bond5 (unregistering): Released all slaves [ 118.534777][ T5545] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 118.536387][ T5545] bond6 (unregistering): Released all slaves [ 118.579489][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.579510][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.614319][ T8462] gretap0: entered promiscuous mode [ 118.615153][ T8462] gretap0: left promiscuous mode [ 118.621584][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.621627][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.621693][ T8400] bridge_slave_0: entered allmulticast mode [ 118.622450][ T8400] bridge_slave_0: entered promiscuous mode [ 118.623591][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.623631][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.623686][ T8400] bridge_slave_1: entered allmulticast mode [ 118.624562][ T8400] bridge_slave_1: entered promiscuous mode [ 118.625651][ T43] audit: type=1400 audit(1789154951.419:1247): avc: denied { write } for pid=8463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.632226][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.632253][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.645606][ T8468] gretap0: entered promiscuous mode [ 118.653388][ T8468] gretap0: left promiscuous mode [ 118.667848][ T5522] usb 8-1: USB disconnect, device number 12 [ 118.671852][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.682537][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.713572][ T43] audit: type=1400 audit(1789154951.509:1248): avc: denied { write } for pid=8469 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.720880][ T8400] team0: Port device team_slave_0 added [ 118.722164][ T8400] team0: Port device team_slave_1 added [ 118.786962][ T65] Bluetooth: hci5: command 0x0419 tx timeout [ 118.814167][ T43] audit: type=1400 audit(1789154951.609:1249): avc: denied { append } for pid=8471 comm="syz.1.615" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 118.842311][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.842329][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.842351][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.845469][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 118.848082][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.848095][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.848115][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.905191][ T8400] hsr_slave_0: entered promiscuous mode [ 118.905923][ T8400] hsr_slave_1: entered promiscuous mode [ 118.906521][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 118.906538][ T8400] Cannot create hsr debugfs directory [ 118.970747][ T43] audit: type=1400 audit(1789154951.769:1250): avc: denied { write } for pid=8482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.052455][ T43] audit: type=1400 audit(1789154951.849:1251): avc: denied { write } for pid=8485 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.104396][ T5445] 8021q: adding VLAN 0 to HW filter on device eth1 [ 119.126778][ T25] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 119.145752][ T5545] hsr_slave_0: left promiscuous mode [ 119.146350][ T5545] hsr_slave_1: left promiscuous mode [ 119.153656][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.153677][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.157836][ T5545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.157855][ T5545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.172944][ T5545] veth1_macvtap: left promiscuous mode [ 119.172977][ T5545] veth0_macvtap: left promiscuous mode [ 119.173054][ T5545] veth1_vlan: left promiscuous mode [ 119.173105][ T5545] veth0_vlan: left promiscuous mode [ 119.179143][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.286016][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 119.286048][ T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 119.287798][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 119.287829][ T25] usb 6-1: can't read configurations, error -61 [ 119.310537][ T8494] cgroup: Invalid name [ 119.336969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.337406][ T1809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.371527][ T8494] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 119.414975][ T5545] team0 (unregistering): Port device team_slave_1 removed [ 119.416875][ T25] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 119.427539][ T5545] team0 (unregistering): Port device team_slave_0 removed [ 119.553606][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 119.570520][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 119.570540][ T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 119.571702][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 119.571719][ T25] usb 6-1: can't read configurations, error -61 [ 119.571859][ T25] usb usb6-port1: attempt power cycle [ 119.577025][ T65] Bluetooth: hci0: command tx timeout [ 119.635648][ T8497] 9p: Bad value for 'rfdno' [ 119.692735][ T8503] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.741851][ T8503] @0: renamed from bond_slave_1 (while UP) [ 119.906748][ T25] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 119.928414][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 119.928434][ T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 119.929542][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 119.929559][ T25] usb 6-1: can't read configurations, error -61 [ 120.017027][ T8516] FAULT_INJECTION: forcing a failure. [ 120.017027][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 120.017063][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.3.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.017091][ T8516] Tainted: [L]=SOFTLOCKUP [ 120.017099][ T8516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.017111][ T8516] Call Trace: [ 120.017118][ T8516] [ 120.017126][ T8516] dump_stack_lvl+0x100/0x190 [ 120.017158][ T8516] should_fail_ex.cold+0x5/0xa [ 120.017185][ T8516] should_failslab+0xc2/0x120 [ 120.017218][ T8516] __kmalloc_cache_noprof+0x91/0x6d0 [ 120.017246][ T8516] ? gadget_bind_driver+0x100/0xbf0 [ 120.017273][ T8516] ? dummy_alloc_request+0xa9/0x1b0 [ 120.017306][ T8516] dummy_alloc_request+0xa9/0x1b0 [ 120.017337][ T8516] usb_ep_alloc_request+0x6e/0x2e0 [ 120.017367][ T8516] gadget_bind+0xe7/0x660 [ 120.017386][ T8516] ? kernfs_create_link+0x1bd/0x240 [ 120.017412][ T8516] gadget_bind_driver+0x28c/0xbf0 [ 120.017431][ T8516] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 120.017460][ T8516] ? __pfx_gadget_bind_driver+0x10/0x10 [ 120.017481][ T8516] really_probe+0x241/0xa60 [ 120.017505][ T8516] __driver_probe_device+0x210/0x460 [ 120.017525][ T8516] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.017550][ T8516] driver_probe_device+0x4a/0x140 [ 120.017572][ T8516] __driver_attach+0x21f/0x5b0 [ 120.017593][ T8516] ? __pfx___driver_attach+0x10/0x10 [ 120.017614][ T8516] bus_for_each_dev+0x13e/0x1d0 [ 120.017643][ T8516] ? __pfx_bus_for_each_dev+0x10/0x10 [ 120.017669][ T8516] ? bus_add_driver+0x2b5/0x5b0 [ 120.017695][ T8516] bus_add_driver+0x305/0x5b0 [ 120.017716][ T8516] driver_register+0x1e2/0x360 [ 120.017737][ T8516] ? rcu_is_watching+0x13/0xc0 [ 120.017783][ T8516] usb_gadget_register_driver_owner+0x132/0x210 [ 120.017806][ T8516] raw_ioctl+0x1a85/0x2b80 [ 120.017843][ T8516] ? __pfx_raw_ioctl+0x10/0x10 [ 120.017872][ T8516] ? selinux_file_ioctl+0x13b/0x290 [ 120.017893][ T8516] ? selinux_file_ioctl+0xb6/0x290 [ 120.017917][ T8516] ? __pfx_raw_ioctl+0x10/0x10 [ 120.017948][ T8516] __x64_sys_ioctl+0x18e/0x210 [ 120.017970][ T8516] do_syscall_64+0x123/0x790 [ 120.017996][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.018017][ T8516] RIP: 0033:0x7f24d759ddeb [ 120.018034][ T8516] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 120.018052][ T8516] RSP: 002b:00007f24d84c9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.018071][ T8516] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f24d759ddeb [ 120.018083][ T8516] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 120.018094][ T8516] RBP: 00007f24d84cafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 120.018106][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.018118][ T8516] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.018142][ T8516] [ 120.020241][ T8516] raw-gadget.1 gadget.3: usb_ep_alloc_request failed [ 120.020266][ T8516] udc dummy_udc.3: failed to start USB Raw Gadget: -12 [ 120.020285][ T8516] raw-gadget.1 gadget.3: probe with driver raw-gadget.1 failed with error -12 [ 120.021256][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.021586][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.057349][ T25] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 120.078457][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 120.078485][ T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 120.079759][ T25] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 120.079782][ T25] usb 6-1: can't read configurations, error -61 [ 120.080099][ T25] usb usb6-port1: unable to enumerate USB device [ 120.137521][ T8400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.143951][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.144892][ T8400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.151586][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.153661][ T8400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.157445][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.158359][ T8400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.176370][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.217021][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.222341][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.231400][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.235430][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.235475][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.239824][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.239872][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.376758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.456903][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.473604][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.499721][ T8400] veth0_vlan: entered promiscuous mode [ 120.503393][ T8400] veth1_vlan: entered promiscuous mode [ 120.518491][ T8400] veth0_macvtap: entered promiscuous mode [ 120.520972][ T8400] veth1_macvtap: entered promiscuous mode [ 120.527445][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.529533][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.576950][ T5545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.576992][ T5545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.577022][ T5545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.577052][ T5545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.631644][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.631663][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.671322][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.671340][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.742028][ T8545] syzkaller1: entered promiscuous mode [ 120.742050][ T8545] syzkaller1: entered allmulticast mode [ 120.752200][ T8545] Invalid/unusable pipe [ 120.857104][ T65] Bluetooth: hci5: command 0x0419 tx timeout [ 121.016868][ T42] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 121.171940][ T42] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 121.173251][ T42] usb 8-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 121.173290][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 121.173311][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.173331][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 121.173349][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 121.173366][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 121.173381][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 121.173396][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 121.173411][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 121.173427][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 121.173443][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 121.173458][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 121.173474][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 194, changing to 11 [ 121.173491][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 58790, setting to 1024 [ 121.173509][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 121.175462][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.175482][ T42] usb 8-1: Product: syz [ 121.175493][ T42] usb 8-1: Manufacturer: syz [ 121.175505][ T42] usb 8-1: SerialNumber: syz [ 121.253748][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.253842][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.253923][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.253996][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254073][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254147][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254220][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254293][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254366][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254438][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254508][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.254714][ T8547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.256183][ T42] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 121.257466][ T42] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 121.272859][ T42] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 121.274556][ T42] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 121.277709][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.278300][ T42] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 121.416863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.509105][ T8548] netlink: 'syz.3.624': attribute type 101 has an invalid length. [ 121.576943][ T5601] usb 8-1: USB disconnect, device number 13 [ 121.591216][ T5601] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 121.596569][ T5601] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 121.597872][ T5601] keyspan 8-1:1.0: device disconnected [ 121.656881][ T65] Bluetooth: hci0: command tx timeout [ 121.965413][ T8552] Device name not specified. [ 121.965413][ T8552] [ 122.191611][ T8561] bridge0: port 3(team0) entered disabled state [ 122.192531][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.192698][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.228795][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.231337][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.254616][ T8561] geneve1: left allmulticast mode [ 122.294455][ T8561] gretap2: left promiscuous mode [ 122.296406][ T8561] bond2: left promiscuous mode [ 122.296420][ T8561] veth3: left promiscuous mode [ 122.297259][ T1809] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 122.301903][ T8561] veth3: left allmulticast mode [ 122.304435][ T8561] vlan2: left promiscuous mode [ 122.304450][ T8561] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 122.307300][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.336733][ T7850] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.336762][ T7850] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.336781][ T7850] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.336798][ T7850] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.385912][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 122.385931][ T43] audit: type=1400 audit(1789155211.228:1270): avc: denied { write } for pid=8568 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.457940][ T1809] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 122.458987][ T1809] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 122.459009][ T1809] usb 6-1: config 1 has no interface number 0 [ 122.460866][ T1809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.460886][ T1809] usb 6-1: Product: syz [ 122.460900][ T1809] usb 6-1: Manufacturer: syz [ 122.460914][ T1809] usb 6-1: SerialNumber: syz [ 122.468449][ T43] audit: type=1400 audit(1789155211.318:1271): avc: denied { write } for pid=8570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.469131][ T1809] usb 6-1: cannot find UAC_HEADER [ 122.515615][ T1809] snd-usb-audio 6-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 122.523593][ T43] audit: type=1400 audit(1789155211.368:1272): avc: denied { write } for pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.539165][ T7273] udevd[7273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.613866][ T43] audit: type=1400 audit(1789155211.458:1273): avc: denied { write } for pid=8575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.668889][ T5601] usb 6-1: USB disconnect, device number 19 [ 122.686846][ T43] audit: type=1400 audit(1789155211.528:1274): avc: denied { write } for pid=8578 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.774987][ T43] audit: type=1400 audit(1789155211.618:1275): avc: denied { write } for pid=8580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.795273][ T8586] input: syz1 as /devices/virtual/input/input9 [ 122.852774][ T43] audit: type=1400 audit(1789155211.698:1276): avc: denied { write } for pid=8588 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.853455][ T8590] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 122.910113][ T8594] FAULT_INJECTION: forcing a failure. [ 122.910113][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 122.910136][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.0.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.910151][ T8594] Tainted: [L]=SOFTLOCKUP [ 122.910155][ T8594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.910162][ T8594] Call Trace: [ 122.910166][ T8594] [ 122.910170][ T8594] dump_stack_lvl+0x100/0x190 [ 122.910191][ T8594] should_fail_ex.cold+0x5/0xa [ 122.910209][ T8594] should_failslab+0xc2/0x120 [ 122.910224][ T8594] kmem_cache_alloc_noprof+0x92/0x6a0 [ 122.910235][ T8594] ? __pfx_map_id_range_down+0x10/0x10 [ 122.910248][ T8594] ? rcu_is_watching+0x13/0xc0 [ 122.910263][ T8594] ? security_inode_alloc+0x3b/0x2c0 [ 122.910283][ T8594] security_inode_alloc+0x3b/0x2c0 [ 122.910301][ T8594] inode_init_always_gfp+0xc6f/0xfb0 [ 122.910317][ T8594] alloc_inode+0x8e/0x250 [ 122.910334][ T8594] sock_alloc+0x44/0x280 [ 122.910348][ T8594] ? security_socket_create+0x7f/0x250 [ 122.910366][ T8594] __sock_create+0xc2/0x860 [ 122.910384][ T8594] __sys_socket+0x14d/0x260 [ 122.910401][ T8594] ? __pfx___sys_socket+0x10/0x10 [ 122.910423][ T8594] __x64_sys_socket+0x72/0xb0 [ 122.910439][ T8594] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.910455][ T8594] do_syscall_64+0x123/0x790 [ 122.910470][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.910481][ T8594] RIP: 0033:0x7fd27d79e159 [ 122.910491][ T8594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.910501][ T8594] RSP: 002b:00007fd27e5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 122.910512][ T8594] RAX: ffffffffffffffda RBX: 00007fd27da25fa0 RCX: 00007fd27d79e159 [ 122.910519][ T8594] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 000000000000000a [ 122.910525][ T8594] RBP: 00007fd27d83503b R08: 0000000000000000 R09: 0000000000000000 [ 122.910532][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.910538][ T8594] R13: 00007fd27da26038 R14: 00007fd27da25fa0 R15: 00007ffc1c0c5318 [ 122.910552][ T8594] [ 123.046211][ T8599] syzkaller1: entered promiscuous mode [ 123.091824][ T65] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 123.093811][ T8612] nbd: couldn't find device at index 16 [ 123.142006][ T43] audit: type=1400 audit(1789155211.988:1277): avc: denied { ioctl } for pid=8617 comm="syz.5.637" path="socket:[27033]" dev="sockfs" ino=27033 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.337380][ T42] net_ratelimit: 2 callbacks suppressed [ 123.337396][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.462404][ T8651] FAULT_INJECTION: forcing a failure. [ 123.462404][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 123.462426][ T8651] CPU: 2 UID: 0 PID: 8651 Comm: syz.5.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.462442][ T8651] Tainted: [L]=SOFTLOCKUP [ 123.462446][ T8651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.462452][ T8651] Call Trace: [ 123.462456][ T8651] [ 123.462460][ T8651] dump_stack_lvl+0x100/0x190 [ 123.462483][ T8651] should_fail_ex.cold+0x5/0xa [ 123.462500][ T8651] should_failslab+0xc2/0x120 [ 123.462515][ T8651] __kmalloc_noprof+0xfc/0x840 [ 123.462527][ T8651] ? __kasan_kmalloc+0xaa/0xb0 [ 123.462539][ T8651] ? lsm_blob_alloc+0x68/0x90 [ 123.462557][ T8651] lsm_blob_alloc+0x68/0x90 [ 123.462571][ T8651] security_msg_queue_alloc+0x22/0x240 [ 123.462587][ T8651] newque+0x144/0x680 [ 123.462602][ T8651] ipcget+0xee/0xf50 [ 123.462615][ T8651] ? __pfx_do_futex+0x10/0x10 [ 123.462629][ T8651] ? __might_fault+0xc5/0x140 [ 123.462645][ T8651] ? find_held_lock+0x2b/0x80 [ 123.462693][ T8651] ? __might_fault+0xc5/0x140 [ 123.462717][ T8651] ? __pfx_ipcget+0x10/0x10 [ 123.462736][ T8651] ? __x64_sys_futex+0x34f/0x4d0 [ 123.462752][ T8651] ? __x64_sys_futex+0x358/0x4d0 [ 123.462768][ T8651] __x64_sys_msgget+0x125/0x1a0 [ 123.462783][ T8651] ? __pfx___x64_sys_msgget+0x10/0x10 [ 123.462801][ T8651] do_syscall_64+0x123/0x790 [ 123.462819][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.462830][ T8651] RIP: 0033:0x7f15a259e159 [ 123.462841][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.462851][ T8651] RSP: 002b:00007f15a351f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 123.462862][ T8651] RAX: ffffffffffffffda RBX: 00007f15a2825fa0 RCX: 00007f15a259e159 [ 123.462869][ T8651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.462876][ T8651] RBP: 00007f15a263503b R08: 0000000000000000 R09: 0000000000000000 [ 123.462882][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.462888][ T8651] R13: 00007f15a2826038 R14: 00007f15a2825fa0 R15: 00007fff0a099598 [ 123.462902][ T8651] [ 123.463394][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.5.646'. [ 123.506819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.507537][ T1809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.521323][ T8652] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 123.533532][ T8652] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 123.533591][ T8652] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 123.533646][ T8652] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 123.533709][ T8652] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 123.533861][ T8652] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 123.534175][ T8652] pci 0000:00:02.0: enabling Extended Tags [ 123.603394][ T8652] pci 0000:00:02.0: Adding to iommu group 2 [ 123.629161][ T8652] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 123.629187][ T8652] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 123.642353][ T8652] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 123.643338][ T8652] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 123.644419][ T8652] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 123.739640][ T65] Bluetooth: hci0: command tx timeout [ 123.785578][ T8652] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 124.083848][ T8652] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 124.381982][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.389169][ T8652] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 124.510119][ T8652] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 124.546849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.864900][ T43] audit: type=1400 audit(1789155213.708:1278): avc: denied { write } for pid=8653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.940277][ T43] audit: type=1400 audit(1789155213.788:1279): avc: denied { write } for pid=8669 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.987233][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.417209][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.577104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.817065][ T65] Bluetooth: hci0: command tx timeout [ 125.840084][ T8684] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 126.284420][ T8637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.352443][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 126.355954][ T8703] macvtap1: entered allmulticast mode [ 126.355968][ T8703] bond0: entered allmulticast mode [ 126.355975][ T8703] bond_slave_0: entered allmulticast mode [ 126.355983][ T8703] bond_slave_1: entered allmulticast mode [ 126.356008][ T8703] bond_slave_0: entered promiscuous mode [ 126.356024][ T8703] bond_slave_1: entered promiscuous mode [ 126.356762][ T8703] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 126.362529][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 126.374262][ T8706] macvtap2: entered allmulticast mode [ 126.381071][ T8706] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 126.408967][ T8714] 9pnet_virtio: no channels available for device syz [ 126.467649][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.547066][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.564924][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'. [ 126.564937][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.666'. [ 126.580227][ T8730] befs: Unknown parameter 'debug ' [ 126.611462][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.616840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.621704][ T8736] Bluetooth: MGMT ver 1.23 [ 126.689984][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 126.690084][ T8744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.696051][ T8744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.004132][ T8781] syz.5.673 (8781) used greatest stack depth: 19288 bytes left [ 127.052726][ T8786] batman_adv: batadv0: Adding interface: veth0 [ 127.052744][ T8786] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.052769][ T8786] batman_adv: batadv0: Interface activated: veth0 [ 127.053832][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.674'. [ 127.333681][ T8806] netlink: 68 bytes leftover after parsing attributes in process `syz.5.677'. [ 127.467640][ T8813] random: crng reseeded on system resumption [ 127.532706][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 127.532722][ T43] audit: type=1400 audit(1789155216.378:1303): avc: denied { map } for pid=8811 comm="syz.1.680" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 127.532760][ T43] audit: type=1400 audit(1789155216.378:1304): avc: denied { execute } for pid=8811 comm="syz.1.680" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 128.115339][ T43] audit: type=1400 audit(1789155216.958:1305): avc: denied { append } for pid=8817 comm="syz.0.681" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.426103][ T43] audit: type=1400 audit(1789155217.268:1306): avc: denied { setopt } for pid=8829 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.536928][ T7280] net_ratelimit: 2 callbacks suppressed [ 128.536944][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.696899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.739585][ T8853] syzkaller0: entered promiscuous mode [ 128.739607][ T8853] syzkaller0: entered allmulticast mode [ 128.827648][ T8854] netlink: 'syz.3.690': attribute type 37 has an invalid length. [ 128.865190][ T8858] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 129.076251][ T43] audit: type=1400 audit(1789155217.918:1307): avc: denied { bind } for pid=8871 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.100697][ T43] audit: type=1400 audit(1789155217.948:1308): avc: denied { write } for pid=8870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.172700][ T43] audit: type=1400 audit(1789155218.018:1309): avc: denied { write } for pid=8877 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.251437][ T43] audit: type=1400 audit(1789155218.098:1310): avc: denied { write } for pid=8881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.319259][ T43] audit: type=1400 audit(1789155218.168:1311): avc: denied { write } for pid=8884 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.394474][ T43] audit: type=1400 audit(1789155218.238:1312): avc: denied { write } for pid=8886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.578357][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.578455][ T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.581923][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.582566][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.584063][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.590306][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.736875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.914204][ T8872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.914803][ T8872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.914974][ T8872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.915114][ T8872] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 129.915184][ T8872] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.917964][ T8872] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.923753][ T8872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.924128][ T8872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.933947][ T8872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.065252][ T8903] loop1: detected capacity change from 0 to 8 [ 130.247500][ T8913] qrtr: Invalid version 72 [ 130.310131][ T8917] tmpfs: Bad value for 'mpol' [ 130.329766][ T8903] Dev loop1: unable to read RDB block 8 [ 130.329802][ T8903] loop1: unable to read partition table [ 130.329996][ T8903] loop1: partition table beyond EOD, truncated [ 130.331050][ T8903] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 130.508853][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508874][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508884][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508893][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508902][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508911][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508920][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508928][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508937][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508946][ T8924] tc action pedit 'at' offset 5 out of bounds [ 130.508965][ T8924] 0: reclassify loop, rule prio 0, protocol 800 [ 130.685438][ T8931] FAULT_INJECTION: forcing a failure. [ 130.685438][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 130.685473][ T8931] CPU: 3 UID: 0 PID: 8931 Comm: syz.0.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.685500][ T8931] Tainted: [L]=SOFTLOCKUP [ 130.685507][ T8931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.685519][ T8931] Call Trace: [ 130.685525][ T8931] [ 130.685533][ T8931] dump_stack_lvl+0x100/0x190 [ 130.685567][ T8931] should_fail_ex.cold+0x5/0xa [ 130.685595][ T8931] should_failslab+0xc2/0x120 [ 130.685621][ T8931] kmem_cache_alloc_noprof+0x92/0x6a0 [ 130.685644][ T8931] ? prepare_creds+0x2c/0x950 [ 130.685667][ T8931] prepare_creds+0x2c/0x950 [ 130.685688][ T8931] set_current_groups+0x15/0xd0 [ 130.685717][ T8931] __do_sys_setgroups+0x3e2/0x4f0 [ 130.685750][ T8931] do_syscall_64+0x123/0x790 [ 130.685777][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.685797][ T8931] RIP: 0033:0x7fd27d79e159 [ 130.685813][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.685832][ T8931] RSP: 002b:00007fd27e5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 130.685852][ T8931] RAX: ffffffffffffffda RBX: 00007fd27da25fa0 RCX: 00007fd27d79e159 [ 130.685864][ T8931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.685875][ T8931] RBP: 00007fd27d83503b R08: 0000000000000000 R09: 0000000000000000 [ 130.685887][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.685898][ T8931] R13: 00007fd27da26038 R14: 00007fd27da25fa0 R15: 00007ffc1c0c5318 [ 130.685924][ T8931] [ 130.688941][ T8931] binder: 8930:8931 ioctl 4018620d 0 returned -22 [ 131.007196][ T8934] Cannot find add_set index 2 as target [ 131.259210][ T65] Bluetooth: hci1: command 0x0406 tx timeout [ 131.432598][ T8958] autofs: Unknown parameter 'p' [ 131.513313][ T8931] binder: 8930:8931 ioctl c0306201 200000000200 returned -14 [ 131.580658][ T8962] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 131.580672][ T8962] netlink: 232 bytes leftover after parsing attributes in process `syz.3.719'. [ 131.580680][ T8962] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 131.638026][ T8963] /dev/nullb0: Can't open blockdev [ 131.807091][ T7280] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 131.957753][ T7280] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 131.958868][ T7280] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 131.958888][ T7280] usb 5-1: config 0 has no interface number 0 [ 131.958918][ T7280] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.960719][ T7280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.960737][ T7280] usb 5-1: Product: syz [ 131.960746][ T7280] usb 5-1: Manufacturer: syz [ 131.960757][ T7280] usb 5-1: SerialNumber: syz [ 131.963127][ T7280] usb 5-1: config 0 descriptor?? [ 131.972405][ T7280] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 131.978284][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.987197][ T65] Bluetooth: hci5: command 0x0419 tx timeout [ 131.987225][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.987245][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.184752][ T7280] usb 5-1: USB disconnect, device number 21 [ 132.189243][ T7280] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 132.625029][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.625103][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.828023][ T8998] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.828284][ T8998] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 132.966679][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 132.966691][ T43] audit: type=1400 audit(1789155221.808:1322): avc: denied { write } for pid=9006 comm="syz.3.730" name="/" dev="9p" ino=73941771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.749261][ T43] audit: type=1326 audit(1789155222.598:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.734" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24d759e159 code=0x0 [ 133.749371][ T7280] net_ratelimit: 7 callbacks suppressed [ 133.749383][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.846045][ T43] audit: type=1400 audit(1789155222.688:1324): avc: denied { nlmsg_write } for pid=9017 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 133.854504][ T7280] hid_parser_main: 13 callbacks suppressed [ 133.854519][ T7280] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.860231][ T7280] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 133.897143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.942815][ T9030] netlink: 72 bytes leftover after parsing attributes in process `syz.1.738'. [ 133.944126][ T43] audit: type=1400 audit(1789155222.788:1325): avc: denied { getopt } for pid=9029 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.950745][ T73] IPVS: starting estimator thread 0... [ 133.978073][ T9030] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 133.978097][ T9030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 133.978243][ T9030] vhci_hcd vhci_hcd.0: Device attached [ 133.980522][ T9030] /dev/nullb0: Can't open blockdev [ 133.982449][ T9034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.738'. [ 133.985445][ T9034] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 133.985466][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 133.985502][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 133.986346][ T9030] /dev/nullb0: Can't open blockdev [ 133.988142][ T9038] vhci_hcd: connection closed [ 133.988639][ T7850] vhci_hcd vhci_hcd.1: stop threads [ 133.988660][ T7850] vhci_hcd vhci_hcd.1: release socket [ 133.988677][ T7850] vhci_hcd vhci_hcd.1: disconnect device [ 133.995343][ T9032] vhci_hcd: connection closed [ 133.997133][ T7850] vhci_hcd vhci_hcd.1: stop threads [ 133.997151][ T7850] vhci_hcd vhci_hcd.1: release socket [ 133.997168][ T7850] vhci_hcd vhci_hcd.1: disconnect device [ 134.046745][ T9031] IPVS: using max 42 ests per chain, 100800 per kthread [ 134.066768][ T5090] Bluetooth: hci5: command 0x0419 tx timeout [ 134.066795][ T5090] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.071000][ T9041] syz.5.739 (9041) used obsolete PPPIOCDETACH ioctl [ 134.071224][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.739'. [ 134.121129][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.739'. [ 134.169519][ T9021] infiniband syz0: set active [ 134.169533][ T9021] infiniband syz0: added bond0 [ 134.179668][ T9021] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 134.179690][ T9021] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 134.179712][ T9021] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 134.196560][ T43] audit: type=1400 audit(1789155223.038:1326): avc: denied { write } for pid=9048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.217270][ T9021] RDS/IB: syz0: added [ 134.218265][ T9021] smc: adding ib device syz0 with port count 1 [ 134.218330][ T9021] smc: ib device syz0 port 1 has no pnetid [ 134.250016][ T43] audit: type=1400 audit(1789155223.098:1327): avc: denied { write } for pid=9052 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.320099][ T9059] bridge2: entered promiscuous mode [ 134.320148][ T9059] bridge2: entered allmulticast mode [ 134.321023][ T5445] veth1_vlan: left promiscuous mode [ 134.425968][ T43] audit: type=1400 audit(1789155223.268:1328): avc: denied { write } for pid=9063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.475482][ T43] audit: type=1400 audit(1789155223.318:1329): avc: denied { write } for pid=9068 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.521252][ T5445] veth1_vlan: entered promiscuous mode [ 134.585743][ T43] audit: type=1400 audit(1789155223.428:1330): avc: denied { write } for pid=9074 comm="syz.1.746" name="/" dev="9p" ino=73941771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.594426][ T43] audit: type=1400 audit(1789155223.438:1331): avc: denied { map } for pid=9074 comm="syz.1.746" path="/217/file0/blkio.throttle.io_service_bytes" dev="9p" ino=73941823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.658593][ T9081] kernel read not supported for file /sg0 (pid: 9081 comm: syz.3.748) [ 134.778319][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.801762][ T9094] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.752'. [ 134.802359][ T9094] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.752'. [ 134.913057][ T9097] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 134.946961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.469769][ T9097] wg2: entered promiscuous mode [ 135.469900][ T9097] wg2: entered allmulticast mode [ 135.469914][ T9097] team0: Device wg2 is of different type [ 135.605831][ T9115] netlink: 'syz.5.756': attribute type 5 has an invalid length. [ 135.657934][ T1809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.787417][ T50] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 135.807341][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 135.835827][ T9129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.836140][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog #! ./mydev/ttyS0 [ 135.949388][ T9134] overlayfs: upper fs does not support tmpfile. [ 135.969985][ T50] usb 8-1: not running at top speed; connect to a high speed hub [ 135.970016][ T50] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 135.971144][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.971179][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.984323][ T50] cyberjack 8-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 135.990042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.007898][ T50] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 136.147117][ T5090] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.147156][ T5090] Bluetooth: hci5: command 0x0419 tx timeout [ 136.147215][ T9147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.147494][ T9147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.147683][ T9147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.147875][ T9147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 136.148060][ T9147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.148125][ T9147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.200552][ T9110] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 136.203427][ T50] usb 8-1: USB disconnect, device number 14 [ 136.225212][ T50] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 136.226372][ T50] cyberjack 8-1:1.0: device disconnected [ 136.325184][ T9167] printk: legacy console [ttyGS0] disabled [ 136.369550][ T9169] 9pnet_virtio: no channels available for device qY3aK [ 136.403288][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 136.403310][ T9171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.773'. [ 136.470085][ T9184] fuse: Unknown parameter '0x0000000000000003fd' [ 136.513166][ T9188] netlink: 'syz.0.778': attribute type 4 has an invalid length. [ 136.782503][ T9203] __nla_validate_parse: 194 callbacks suppressed [ 136.782522][ T9203] netlink: 14 bytes leftover after parsing attributes in process `syz.3.782'. [ 136.857619][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.865367][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.869293][ T5522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.005262][ T9220] binder: 9216:9220 ioctl c0306201 2000000003c0 returned -14 [ 137.006889][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 137.022858][ T9220] batadv0: entered promiscuous mode [ 137.022911][ T9220] macsec1: entered promiscuous mode [ 137.022991][ T9220] macsec1: entered allmulticast mode [ 137.022999][ T9220] batadv0: entered allmulticast mode [ 137.023580][ T9220] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 137.037218][ T9220] batadv0: left allmulticast mode [ 137.037331][ T9220] batadv0: left promiscuous mode [ 137.104367][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'. [ 137.288800][ T9230] netlink: 5 bytes leftover after parsing attributes in process `syz.1.789'. [ 137.294754][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9230 comm=syz.1.789 [ 137.687122][ T9248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.792'. [ 137.688450][ T9213] ceph: No mds server is up or the cluster is laggy [ 137.720196][ T9249] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 137.745812][ T9249] WARNING! power/level is deprecated; use power/control instead [ 137.808537][ T9258] x_tables: duplicate underflow at hook 1 [ 137.836198][ T25] logitech-hidpp-device 0003:046D:C082.0004: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 137.955087][ T9268] netlink: 'syz.3.800': attribute type 11 has an invalid length. [ 137.955108][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 137.988894][ T9268] netlink: 'syz.3.800': attribute type 11 has an invalid length. [ 137.988916][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 137.997929][ T5545] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.997969][ T5545] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.997997][ T5545] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.998027][ T5545] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.001749][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'. [ 138.085486][ T9272] fido_id[9272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.120359][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 138.120379][ T43] audit: type=1400 audit(1789155226.968:1358): avc: denied { read } for pid=9270 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.228794][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.228822][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.228837][ T5746] Bluetooth: hci1: command 0x0406 tx timeout [ 138.228870][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.228915][ T5090] Bluetooth: hci5: command 0x0419 tx timeout [ 138.279960][ T43] audit: type=1400 audit(1789155227.128:1359): avc: denied { write } for pid=9273 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.285176][ T9274] overlayfs: failed lookup in lower (newroot/240, name='bus', err=-40): overlapping layers [ 138.289732][ T9274] evm: overlay not supported [ 138.504951][ T43] audit: type=1400 audit(1789155227.348:1360): avc: denied { read } for pid=9286 comm="syz.3.807" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.504985][ T43] audit: type=1400 audit(1789155227.348:1361): avc: denied { open } for pid=9286 comm="syz.3.807" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.646687][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 138.652241][ T9293] syzkaller1: entered promiscuous mode [ 138.652262][ T9293] syzkaller1: entered allmulticast mode [ 138.660165][ T43] audit: type=1400 audit(1789155227.508:1362): avc: denied { shutdown } for pid=9292 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.791636][ T9295] ip6gretap0: entered promiscuous mode [ 138.806685][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 138.807454][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 138.807487][ T25] usb 5-1: no configurations [ 138.807498][ T25] usb 5-1: can't read configurations, error -22 [ 138.936935][ T7280] net_ratelimit: 7 callbacks suppressed [ 138.936952][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.954780][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 138.965401][ T9305] syzkaller0: entered promiscuous mode [ 138.965423][ T9305] syzkaller0: entered allmulticast mode [ 138.994778][ T43] audit: type=1400 audit(1789155227.838:1363): avc: denied { dac_read_search } for pid=9308 comm="modprobe" capability=2 scontext=system_u:system_r:kmod_t tcontext=system_u:system_r:kmod_t tclass=capability permissive=1 [ 139.106716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.120872][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 139.123813][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 139.123848][ T25] usb 5-1: no configurations [ 139.123859][ T25] usb 5-1: can't read configurations, error -22 [ 139.124130][ T25] usb usb5-port1: attempt power cycle [ 139.456290][ T43] audit: type=1400 audit(1789155228.298:1364): avc: denied { name_bind } for pid=9312 comm="syz.3.816" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.476650][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 139.497189][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 139.497662][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 139.497683][ T25] usb 5-1: no configurations [ 139.497690][ T25] usb 5-1: can't read configurations, error -22 [ 139.626722][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 139.658098][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 139.658599][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 139.658630][ T25] usb 5-1: no configurations [ 139.658641][ T25] usb 5-1: can't read configurations, error -22 [ 139.659136][ T25] usb usb5-port1: unable to enumerate USB device [ 139.834152][ T43] audit: type=1400 audit(1789155228.678:1365): avc: denied { read } for pid=9323 comm="syz.3.820" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 139.834401][ T43] audit: type=1400 audit(1789155228.678:1366): avc: denied { open } for pid=9323 comm="syz.3.820" path="/246/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 139.836329][ T43] audit: type=1400 audit(1789155228.678:1367): avc: denied { ioctl } for pid=9323 comm="syz.3.820" path="/246/proc/kmsg" dev="proc" ino=4026532047 ioctlcmd=0x4df9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 139.837036][ T9324] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.820'. [ 139.837597][ T9324] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.820'. [ 139.895741][ T9326] netlink: 'syz.3.821': attribute type 21 has an invalid length. [ 139.931774][ T9328] netlink: 'syz.3.822': attribute type 23 has an invalid length. [ 139.978151][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.995772][ T9330] [ 139.996615][ T9330] ====================================================== [ 139.999369][ T9330] WARNING: possible circular locking dependency detected [ 140.002181][ T9330] syzkaller #0 Tainted: G L [ 140.004811][ T9330] ------------------------------------------------------ [ 140.007370][ T9330] syz.3.823/9330 is trying to acquire lock: [ 140.009195][ T9330] ffff88802065db80 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 140.012736][ T9330] [ 140.012736][ T9330] but task is already holding lock: [ 140.015170][ T9330] ffffffff9047de20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 140.018388][ T9330] [ 140.018388][ T9330] which lock already depends on the new lock. [ 140.018388][ T9330] [ 140.021582][ T9330] [ 140.021582][ T9330] the existing dependency chain (in reverse order) is: [ 140.024402][ T9330] [ 140.024402][ T9330] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 140.026867][ T9330] lock_acquire+0x1d1/0x380 [ 140.028431][ T9330] __mutex_lock+0x1a4/0x1bd0 [ 140.030002][ T9330] tcm_alloc_inst+0x5f/0x1e0 [ 140.031575][ T9330] try_get_usb_function_instance+0x136/0x1f0 [ 140.033550][ T9330] usb_get_function_instance+0x16/0x70 [ 140.035446][ T9330] function_make+0x18c/0x3f0 [ 140.037079][ T9330] configfs_mkdir+0x525/0xd40 [ 140.038714][ T9330] vfs_mkdir+0x364/0x850 [ 140.040206][ T9330] filename_mkdirat+0x48b/0x5e0 [ 140.041847][ T9330] __x64_sys_mkdir+0x6b/0x90 [ 140.043474][ T9330] do_syscall_64+0x123/0x790 [ 140.045107][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.047118][ T9330] [ 140.047118][ T9330] -> #2 (func_lock){+.+.}-{4:4}: [ 140.049286][ T9330] lock_acquire+0x1d1/0x380 [ 140.050882][ T9330] __mutex_lock+0x1a4/0x1bd0 [ 140.052453][ T9330] try_get_usb_function_instance+0x26/0x1f0 [ 140.054422][ T9330] usb_get_function_instance+0x16/0x70 [ 140.056809][ T9330] function_make+0x18c/0x3f0 [ 140.059009][ T9330] configfs_mkdir+0x525/0xd40 [ 140.061188][ T9330] vfs_mkdir+0x364/0x850 [ 140.063118][ T9330] filename_mkdirat+0x48b/0x5e0 [ 140.064746][ T9330] __x64_sys_mkdirat+0x89/0xc0 [ 140.066400][ T9330] do_syscall_64+0x123/0x790 [ 140.068041][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.070037][ T9330] [ 140.070037][ T9330] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 140.072545][ T9330] lock_acquire+0x1d1/0x380 [ 140.074133][ T9330] __mutex_lock+0x1a4/0x1bd0 [ 140.075796][ T9330] configfs_rmdir+0x5ae/0x950 [ 140.077487][ T9330] vfs_rmdir+0x328/0x8a0 [ 140.079021][ T9330] filename_rmdir+0x31a/0x5c0 [ 140.080660][ T9330] __x64_sys_unlinkat+0xf5/0x130 [ 140.082435][ T9330] do_syscall_64+0x123/0x790 [ 140.084056][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.086091][ T9330] [ 140.086091][ T9330] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 140.088858][ T9330] check_prev_add+0xeb/0xe60 [ 140.090459][ T9330] __lock_acquire+0x1528/0x1f40 [ 140.092153][ T9330] lock_acquire+0x1d1/0x380 [ 140.093728][ T9330] down_write+0x8b/0x1f0 [ 140.095278][ T9330] configfs_depend_item_unlocked+0xf3/0x6a0 [ 140.097301][ T9330] usbg_make_tpg+0x251/0x610 [ 140.098917][ T9330] target_fabric_make_tpg+0xab/0x8c0 [ 140.100693][ T9330] configfs_mkdir+0x525/0xd40 [ 140.102285][ T9330] vfs_mkdir+0x364/0x850 [ 140.103804][ T9330] filename_mkdirat+0x48b/0x5e0 [ 140.105516][ T9330] __x64_sys_mkdir+0x6b/0x90 [ 140.107149][ T9330] do_syscall_64+0x123/0x790 [ 140.108745][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.110790][ T9330] [ 140.110790][ T9330] other info that might help us debug this: [ 140.110790][ T9330] [ 140.114081][ T9330] Chain exists of: [ 140.114081][ T9330] &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock [ 140.114081][ T9330] [ 140.118410][ T9330] Possible unsafe locking scenario: [ 140.118410][ T9330] [ 140.120717][ T9330] CPU0 CPU1 [ 140.122357][ T9330] ---- ---- [ 140.124031][ T9330] lock(tpg_instances_lock); [ 140.125566][ T9330] lock(func_lock); [ 140.127600][ T9330] lock(tpg_instances_lock); [ 140.129853][ T9330] lock(&sb->s_type->i_mutex_key#24); [ 140.131622][ T9330] [ 140.131622][ T9330] *** DEADLOCK *** [ 140.131622][ T9330] [ 140.134119][ T9330] locks held by syz.3.823/9330: 4, last CPU#2: [ 140.136250][ T9330] #0: ffff88802469a460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 140.136710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.141997][ T9330] #1: ffff88803a2b9dc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 140.145531][ T9330] #2: ffffffff8ffb0c48 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 140.149319][ T9330] #3: ffffffff9047de20 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 140.152919][ T9330] [ 140.152919][ T9330] stack backtrace: [ 140.154905][ T9330] CPU: 2 UID: 0 PID: 9330 Comm: syz.3.823 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.158648][ T9330] Tainted: [L]=SOFTLOCKUP [ 140.160157][ T9330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.163423][ T9330] Call Trace: [ 140.164497][ T9330] [ 140.165442][ T9330] dump_stack_lvl+0x100/0x190 [ 140.167022][ T9330] print_circular_bug.cold+0x178/0x1be [ 140.168751][ T9330] check_noncircular+0x146/0x160 [ 140.170377][ T9330] check_prev_add+0xeb/0xe60 [ 140.171905][ T9330] __lock_acquire+0x1528/0x1f40 [ 140.173448][ T9330] ? rcu_is_watching+0x13/0xc0 [ 140.175002][ T9330] lock_acquire+0x1d1/0x380 [ 140.176484][ T9330] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 140.178422][ T9330] ? __pfx___might_resched+0x10/0x10 [ 140.180154][ T9330] down_write+0x8b/0x1f0 [ 140.181528][ T9330] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 140.183487][ T9330] ? __pfx_down_write+0x10/0x10 [ 140.185041][ T9330] ? kstrtou16+0xde/0x130 [ 140.186462][ T9330] configfs_depend_item_unlocked+0xf3/0x6a0 [ 140.188415][ T9330] usbg_make_tpg+0x251/0x610 [ 140.189980][ T9330] ? __pfx_usbg_make_tpg+0x10/0x10 [ 140.191690][ T9330] ? find_held_lock+0x2b/0x80 [ 140.193276][ T9330] ? __pfx_usbg_make_tpg+0x10/0x10 [ 140.194930][ T9330] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 140.196873][ T9330] target_fabric_make_tpg+0xab/0x8c0 [ 140.198570][ T9330] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 140.200531][ T9330] configfs_mkdir+0x525/0xd40 [ 140.202021][ T9330] ? may_create+0x285/0x440 [ 140.203584][ T9330] ? __pfx_configfs_mkdir+0x10/0x10 [ 140.205239][ T9330] vfs_mkdir+0x364/0x850 [ 140.206626][ T9330] filename_mkdirat+0x48b/0x5e0 [ 140.208387][ T9330] ? __pfx_filename_mkdirat+0x10/0x10 [ 140.210226][ T9330] ? strncpy_from_user+0x19d/0x2d0 [ 140.211945][ T9330] ? do_getname+0x191/0x390 [ 140.213440][ T9330] __x64_sys_mkdir+0x6b/0x90 [ 140.214952][ T9330] do_syscall_64+0x123/0x790 [ 140.216469][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.218415][ T9330] RIP: 0033:0x7f24d759e159 [ 140.219907][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.226150][ T9330] RSP: 002b:00007f24d84cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 140.228870][ T9330] RAX: ffffffffffffffda RBX: 00007f24d7825fa0 RCX: 00007f24d759e159 [ 140.231395][ T9330] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 140.233901][ T9330] RBP: 00007f24d763503b R08: 0000000000000000 R09: 0000000000000000 [ 140.236452][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.239131][ T9330] R13: 00007f24d7826038 R14: 00007f24d7825fa0 R15: 00007ffd3179e2a8 [ 140.241804][ T9330] [ 140.296929][ T5090] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.016872][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.176813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.737049][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.058385][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.226739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.096957][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.137506][ T7280] net_ratelimit: 1 callbacks suppressed [ 144.137525][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.310883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.777002][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.186892][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.336693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.761383][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 145.761400][ T43] audit: type=1400 audit(1789155234.608:1372): avc: denied { write } for pid=9339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.802390][ T43] audit: type=1400 audit(1789155234.648:1373): avc: denied { write } for pid=9342 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.934084][ T43] audit: type=1400 audit(1789155234.778:1374): avc: denied { write } for pid=9345 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.975125][ T43] audit: type=1400 audit(1789155234.818:1375): avc: denied { write } for pid=9348 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.226979][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.376762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.786887][ T43] audit: type=1400 audit(1789155235.628:1376): avc: denied { write } for pid=9352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.823776][ T43] audit: type=1400 audit(1789155235.668:1377): avc: denied { write } for pid=9355 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.266985][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.416776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.817473][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.026768][ T43] audit: type=1400 audit(1789155236.868:1378): avc: denied { write } for pid=9360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.061176][ T43] audit: type=1400 audit(1789155236.908:1379): avc: denied { write } for pid=9363 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.346923][ T7280] net_ratelimit: 2 callbacks suppressed [ 149.346942][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.506700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog