last executing test programs: 5.204297912s ago: executing program 2 (id=807): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0xb, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9e7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0xf9, 0x6, 0x20}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xedc98966861d34f0, 0x55, 0xff, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x96, 0x6, 0x2}, @ptm_cap={0x3}]}, 0x4, [{0x98, &(0x7f0000000140)=@string={0x98, 0x3, "8b3bc30cab2f1ed1b42d7a4178fb1c038f2f61d0b781b5edf811641a9300540ef299a283d667e1b03816f580d7e476ea4a80a4818093cb62e21323ba808fa66ee46758eb433c81f97dd9e4ce58d805617ebfdd9aceac9df2aa2e0e7b54dc5078f481e61c400d107fe7edf3f00cf1f266dd73bf1933bb2df8656ecc86ff003f7e29c09045fe05e6abd6d2fbdf40c59115c1707d2200d9"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x411}}, {0x32, &(0x7f0000000280)=@string={0x32, 0x3, "1e4f89719a0f62e7845122f4b92e080e3cd3385f84f7c119013e3aa249cc99f184ebb8fc7107892a984ec07a8bfc4826"}}, {0x4e, &(0x7f00000002c0)=@string={0x4e, 0x3, "6b11f75531487b61bd1b3c70a6a91f1a9350c7a143e66bd942b1b956da1f3d4a5f05264801265a6f6b59db039c3ec517f887659ff9bb1ae0629ed9ce2d377ca476a1fe685b158e5a2a03b653"}}]}) 3.673059887s ago: executing program 1 (id=837): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) shutdown(r1, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x48, 0x80, 0x0, 0x2869f27e, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x14, 0x3, [{0x1, 0xe, "2dbbd57c4cc39ccd636452e1"}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x11, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x200}, {@local, 0x363}, {@broadcast, 0x1}, {@empty, 0x1}, {@broadcast, 0x5}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x7fff}, {@remote, 0x7ff}, {@multicast2, 0x3ff}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x48, 0x80, 0x0, 0x2869f27e, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x14, 0x3, [{0x1, 0xe, "2dbbd57c4cc39ccd636452e1"}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0x11, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x200}, {@local, 0x363}, {@broadcast, 0x1}, {@empty, 0x1}, {@broadcast, 0x5}, {@private=0xa010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x7fff}, {@remote, 0x7ff}, {@multicast2, 0x3ff}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x6c, 0x2e, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff2}, {0x5, 0xe}, {0xa, 0xffe0}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0xc00}, {0x8, 0xb, 0x8}]}, 0x6c}}, 0x4040000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x2c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000340)={0x4, 0x7f, 0x800a, 0xd60a, 0x101, 0x2, 0x3, 0xe, r4}, &(0x7f00000004c0)=0x20) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r5, 0x0, 0x7ffff000, 0x3) (async) splice(r1, 0x0, r5, 0x0, 0x7ffff000, 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) (async) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000017c00000400c2800c00018006000600000000000000d48004001980"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000040000000c000200810000000400000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.601674174s ago: executing program 1 (id=840): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='<', 0x1}], 0x1}}], 0x1, 0x4048484) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x2c3e, &(0x7f0000000040)={0x0, 0x68a2, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x8) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x4a, 0x7, &(0x7f0000000040)={0x8, "00bcffffff67bd1300eeffffff4100000010000000000000001f2a00"}}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.450247111s ago: executing program 0 (id=850): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000) close(0x3) 2.372521275s ago: executing program 0 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000774000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000658000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x2, 0x20002f7}) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000390426bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01980000000000004000128008000100736974003400028006000e000100000008000300ac1414"], 0x60}}, 0x0) sendto$packet(r3, &(0x7f0000000440)="a80320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77ba32b6d78839980700e666f8fe52f66b96e84000050016f37fe8c0295f5c42", 0x3e, 0xc881, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x10, 0x6, @random="0f95f89a2293"}, 0x14) (async) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000000)="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") syz_open_dev$sg(&(0x7f0000000200), 0xe6, 0x121100) r8 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, &(0x7f00000000c0)={0x1}) r9 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x6000001d}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 2.372163405s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010141, 0x0, 0x7}]}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x24000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.23474182s ago: executing program 0 (id=853): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002000010300c99526dea0985b0a00000000000000010000001400"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x3548265486ea485e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0xd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000003, 0x3, 0x5, 0x41, 0x40000000000007, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x2, 0x9, 0x4, 0x4], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.134687812s ago: executing program 2 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0x0, '\x00', @p_u8=0x0}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000379000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01725900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x65}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "88bc40b0868723"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, r7, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f12aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df68c74eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76ad4da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa29a3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vcan0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"/320], 0x140}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0xc, 0x8, 0x24, 0x0, 0xffffff56, 0x4, 0x0, 0xa, 0x5, 0xff, 0x0, 0xb6, 0x0, 0x7, 0x80002, 0x3, 0x7, 0x0, 0x1, '\x00', 0x8, 0x5}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0xa, 0x2010, r2, 0x87ed6000) 1.972948609s ago: executing program 0 (id=855): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7e, 0x400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa97d0000060a0b0400000000000000000200fffe34400480300001800e7201007461726765740000200002800c0001004e4651554555450006000300fbb4000008000240000000000900010073797a30000000000900020073b67a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) close_range(r0, r1, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xb}, {0xffff, 0xfff1}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40040) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x8, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0x12}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r9, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.972506885s ago: executing program 1 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x7d0, 0x30, 0x400, 0x0, 0x0, {}, [{0x680, 0x1, [@m_skbedit={0x94, 0x15, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1ff}]}, {0x57, 0x6, "d15bde6c60d239e80356a8eec38ea468e6376b408134199ae7520af106102d6ea74fb9e87a15368621144ce640d6bae04ab9ec1f8f9831516bb584feff5a4543873b5a3763559571969cd14f578acf928bff0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x188, 0x17, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xb, 0x8, 0x0, 0x80000001}, 0xe9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0xc1c8, 0x8d}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x7ff, 0x80}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x174, 0x9, 0x8, 0x3, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5e3d, 0x4, 0x6, 0x41bc7971, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x5, 0xffff8a4d}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x300, 0x0, 0x10000000, 0xfffffff7, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7a, 0x327, 0x10000000, 0x4, 0x4}, 0x200}}]}, {0x76, 0x6, "db233eefce2705e0daa8765e5fc36a8871930935aa37ab4780681eb7aef28ded33df34813cdc69a9bc68ee3772b42ba766f6cdde22e923d67b0f7414d859ba478310d9e429ca67261b64b7ea901238d570e4e86eaacd6a78b5ee3746412d81c6714a572f44eaeff934a9af938f26e885d730"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ife={0x15c, 0x15, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xac2e}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x10}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4bdb}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xf9, 0x6, "8718ef9ade200138d3226799d4ee5784a291e3ce8b9ba2b65b4907e658017f1f9a8e9f63fb1d22aeac8c84addc71d99f1ee8b14f75e9ba4e5ca189b53ac48db77f9fb47337f30e189e85b5802bc7fe64f2442d695f281b7c7699bac06929ec96ab8eed0522970210a7a94756eb9eb6eb75ce5118f54d77db2bae78cd6632945fd627dfe18d076a324cdb1df522b11b865d8d25b611e9a9b2195776968c4fc655eb794f9d843567d9f68e8ac3da3ec0746ea26b4eb12063e54ba494850409ee8b9d9266b5e1c511244fb2a1183959dcbb649518ef91a36f755d5da952e215fd30ef449ba362a1737a474a80b73057c81254bde0a7db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xc8, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff8, 0xf8, 0xfffffffffffffffb, 0x3, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1ffe1, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x69, 0x6, "e6018b823bb37c002249fe6cdeec08c7e8da650e0ae2fa0a429b3d1c3e1516534132119842a8fc180cd5f2026c01398e6aa4f0362a315abf56b7ec705030392d976e3c4ada76f86da7a938295dd9b18fdfa22a5695fcc4c9eef9e7bf4742fa4507ae96fc80"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x10c, 0xe, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_ZONE={0x6, 0x4, 0x7ff}]}, {0xb8, 0x6, "247755edf44ff284f74d82154a1111d305f5b36e6e07f7464caf9f28e8050767207f87084f1708604358be61bb487aeae9346684f2fa942242172212eb3723359d0a94030cd75f8130ab0fb1c85b10b700698895ad1706e88feedac268e71d2d62f18136370798bf1dbf98fa1adcd0b14d0a625ad1974ec3d4c41671c7372fd56162aae61b89f0eb9b83aced627a5d5553d02fa715e59130629724931e067a75cfff07baced9cf6263f65e4dcf0e9f28cf01af3a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x130, 0x15, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa2f, 0x8e, 0x1, 0xd, 0x1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfb0, 0xfa9, 0x5, 0x0, 0x8000}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x7ae8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001, 0x5, 0x20000000, 0x1c, 0xf}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x89, 0x6, "6ae8e416992839875b05778e630dbcb02e499ec8ad13383eb5619a7b2cb2795eb680a9bb39d1bb2a51980d3184e122fffcf3823cb7d96cc9d9bcc96ca5919b690e24b57c1034c1d23d1b178ea8e43f0e82230c37feb79b3f6336db1644c8894ab4eab178aae036607eba9a3bf691243503ef97fe46d8b8faf3b4a2bf5e82b4c8ae67832db0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x13c, 0x1, [@m_simple={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '{%\x00'}, @TCA_DEF_DATA={0x13, 0x3, 'z\xac]+\\\xbb[@-:).,#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xae, 0x0, 0x20000000, 0x9b7, 0xd}}, @TCA_DEF_DATA={0xc, 0x3, '$#--:*%\x00'}, @TCA_DEF_DATA={0x8, 0x3, ',!&\x00'}]}, {0xc2, 0x6, "ed11746199d989059fac783ac071bfde6a06582100f0dba519ac763d58846ee1e4d2252f4ed15fc2322b04a80a3e81a852f61cf1af1c325f8ab02bb079bf970601a692c95517981dac51c267d73785ddeae0e534687e25785d3cba31bac6d01642834aa2e10ead1eddbe33890c8006c46817e38a0c0362c1592d9ff5fa253d7111c1c0fe8702fa4785cd04c77608b24ebc6c9df1777ae803fccbbd5679d6b511eca13699913904135be8ac4bcaf69fc3481e101d2c6a25c5970b5fdc1455"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x7d0}}, 0x0) 1.902648595s ago: executing program 1 (id=857): syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="c87be6970899", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x94, 0x4, "f443"}, @end, @noop]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000005080)="0f10f52113a58d4b61f8e319a91ae945cd0c2ca4f58167a5680385379f334f71fc29f0e779fca3a4100990742e02fd4f9c6e5ace9d9f1113d5cff9ce6edcefce409735ef68f8c45392a10644b0e782844c00fccda642752a040892c61e38082995f97834b6cc8658e3e45a573238725012fdcb5a69d8be22ee1138263e0d3446b7e4ea40a0a4d6b8b698f71da7b12f861a0aabf01e8af95840f879f25c3c814307d7011ada0500"/181, 0xb5}], 0x2, &(0x7f00000017c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x18}}, {{&(0x7f0000001800)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001840)="f268769ed6cf8f7a9ede615f865a3ae21aced3a4174df327264b4c25f2bdb60921142cab6ddd1a8a711202f9c93e23271fc0e9f06b62f06657057a41b36b350eb2045085938c25b7e3c6d0bb171b660f993a8871f826805b25d79fd316192b8c783e36138fc8a503", 0x68}], 0x1, &(0x7f00000029c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xf7, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x62}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x39, 0x0, 0xd, [0x9, 0x8000]}, @ssrr={0x89, 0xb, 0xcc, [@multicast2, @empty]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x1, [{@broadcast, 0x3ff}]}, @lsrr={0x83, 0x1f, 0x95, [@remote, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100, @broadcast]}, @cipso={0x86, 0x54, 0x2, [{0x1, 0xf, "f9a0d8ba2d73983f9e4e802db7"}, {0x5, 0x10, "a222ec024e55bf096ee7600b1a4a"}, {0x2, 0xf, "43b18393c8d1ea3b0223e5adaf"}, {0x0, 0xd, "253cf979fa6e20ef0c8e55"}, {0x7, 0x4, "b1f3"}, {0x2, 0xf, "ad2294744e62f8c10a49d9ee40"}]}, @lsrr={0x83, 0x27, 0x5, [@private=0xa010101, @empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x75, [@broadcast, @remote]}, @end, @cipso={0x86, 0x17, 0x0, [{0x66aaafb1cfeb3e64, 0x5, '\b4,'}, {0x2, 0xc, "6167e232db8e75810e8d"}]}, @generic={0x94, 0x2}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4, 0x3}, @rr={0x7, 0x13, 0x20, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x3, 0xa9}, @rr={0x7, 0x17, 0xcc, [@empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @loopback]}]}}}], 0x1b8}}, {{0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000000380)=';', 0x1}, {&(0x7f0000002c00)="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", 0x1000}, {0xffffffffffffffff}, {&(0x7f0000003c00)="15", 0x1}, {&(0x7f0000003c40)="1d167ad8e829c161f73681253ad983fb31d4424ec41f7b6c20", 0x19}, {&(0x7f0000003c80)="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", 0x1000}, {&(0x7f0000004c80)="d0b3175ff9f478adfbb6901cadd41837cfcc2a7a18ce8ba6197a08bf611a4a3df7d705c51a8b9e2606ec108520e8ee5f9acf2fc27894df7cb3252cf355284bb64f339b1791f26b533de52659c4817a789a10d483b9e13dea92c948b5926f4299ee691cc08014e5546adc6f8a99fb25a7983b2f6fa9581fb7da37a47ffc56190647b0831fb6cdf579976448985e39c01b2c179aa9de5aa8c83f7b8d458699b710c30e79390db4cd05a982ae7ad60924bbd9378d923b8ef491a0ee9275801dcdd72ef328b18a89a9ce1c2d649e1e9f22e6e7ed1076289e5511b91b00f7e7730b", 0xdf}, {&(0x7f0000004d80)="6249f5047e6264ffa5faa956e8ecf988064038f5dae9ee8351092ca2b0380b4f66705216", 0x24}, {&(0x7f0000004dc0)="a7adf6639239879295f7aaeea280c36e1406f6966ea13cae1911a6b48b8f9cb5181795c5fff08eb4c2f1e94cad962f06bcadd8779dea2d6d8368b67f7e15313f826b8ec8a618539c32aa5524a025f78fdfbaffd2d99ba7438c7699672be9618fae8796782c8ed23c8083d497c708f3ad37727fff0d5821ab69d0e219993076401934fe8e9855d9d8cb782fc2d90bf9be48461b5c9d8972e303dfb84a8b7e959db1836a8686ab99113a9d705b4c1004a3719530650ff0f833bbd6374dac8311be7806d2233f1bf9157b99033aa815f067ebd45b03bc4df3a1ff28", 0xda}], 0x9, &(0x7f0000005640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@cipso={0x86, 0x4d, 0x1, [{0x0, 0x12, "124ca3a90d8aa1373ff2b1c5f1461362"}, {0x4, 0x5, "018d9d"}, {0x7, 0x12, "358b4318cfe0bb4ac228a8dc3fd7c7b9"}, {0x6, 0x4, "da52"}, {0x5, 0x2}, {0x2, 0xe, "1b7c5b14a01d8a91edcf0801"}, {0x7, 0xa, "54221932d00397d9"}]}, @generic={0x88, 0xe, "86e807b492a4499d4e21ad1f"}, @timestamp_prespec={0x44, 0x4, 0xca, 0x3, 0x7}, @ssrr={0x89, 0xf, 0xad, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6e}]}, @ssrr={0x89, 0x23, 0x8e, [@multicast1, @remote, @empty, @broadcast, @multicast1, @remote, @local, @local]}, @timestamp_addr={0x44, 0x24, 0x4a, 0x1, 0x7, [{@empty, 0x85}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x4}, {@rand_addr=0x64010101, 0x800}]}, @generic={0x82, 0x12, "e3094d5ec26a908e64ec3f3838a84e29"}, @rr={0x7, 0x17, 0xa, [@empty, @private=0xa010100, @remote, @remote, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x198}}, {{&(0x7f0000005180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000005400)=[{&(0x7f00000051c0)="bb1af88f881bf32e33e8a0511f489c2b914af665", 0x14}, {&(0x7f0000005200)="96332f521ada755991acc78d2a556507fbd5303f2decd7b7c807aa4825bc279ae474e4387e59b0f851edc484e804bfe67bde42689b5c1a850391e58d344eb15393fb3c83ab63f304464319bfe4a3777d60869c7d161e2f21c95d29dc29dff59bcbe1d01e36bc7deaf4f39142131528523d27348883096131e25ee8a5f630ee867a70cec135b7b5c4b28f545d3f", 0x8d}, {&(0x7f00000052c0)="825ec2c7643b26fcf1412e46cfc14b1a8f839737d8b190f2b9229f8f0c204f37b015f0b1e3bb331e6e897512a6d33937f033a0921b36be956f03ab3d700fb67e583f2993fa23b66e25d8ae5c348a1ca7adf15129dc24ef44b8c14a80becda8578f69c731e152da7bc0cd915e4613a74b0eaa8efd406fa9da89fb9a4befde8c7a0171598475330d465d288628d2df8e2bf5c132b72734a0695c12a4f869d3dc2302b95ff4a2f2c7b787bae09687c49c2dd02ca2acee459e602363c7", 0xbb}, {&(0x7f0000005380)="0c6ee5fbe9a9769c3e204dbe3c2fa38010830888", 0x14}, {&(0x7f00000053c0)="2392122bec8b562409c498a668b8e642b87304828e7a065473fa8e6817ef54238537", 0x22}], 0x5, &(0x7f0000004f80)=ANY=[@ANYBLOB="6c00000000000000000000000700000088054b691a01862c0000000206090dd5c14cc27150050e6fb1e3ed39f97d9f1705dcf3010c2d36ba047b028f981d440103004410655000007fd2dd9b27a84129a30f5600000000000800000009940400004414a083ac14140aff7ffff97f00000100000009000000000000140000000000000000000000010000000600000000000000efaea59e9d3bbee9ecc034249ad35df5175c7c0b0fd98ea338a905fff983c6eec775efb60e6375116bc68cb9490c55e0a314fc99c338913353f9533d1d4613357dce8bf0eec27863376d"], 0x88}}], 0x4, 0x24044000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x170, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x140, 0x2, [@TCA_FLOWER_ACT={0x13c, 0x3, [@m_vlan={0x138, 0x1d, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xf1, 0x6, "84e099b066e17381b51508364277d3d1ef74e0870cc5c3fa87c0b8c96f0a5b41a45890394d3fb77947eee24110139fa1692e8d42e79e06e9860bf6f0965c4e10bee93c99108034e34d9d0b4907c6f798df6c80f438b941dcbb73038d53f3f307a514352830339d3e39fde33c013f92d4aa5e0aecba314036bca35ea68f5cd96aeb637fbc19f36c1118dda3e7b102197ddb4b19f10beafac64bc5eb3193906e70c7ec8c4dbd73c4ecdd88f636c2755fb58501dc52998bc77d07b64c0a6a2ebcc5e7cebe5d625aada1e8bf204186ed7e4e0f387541924630048df02b962bac4db2ceb60ae02c49cd73ce4f1c5842"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x170}}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1031}}, 0x1006) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="0ed63d72b1c43c830359dc6f3fc58f35760571359a30470342769fc90360af461dd026a427f028a558c5f4c9d975910b5b44a9ad1cb6d33d0e470b12cfffe3eb090e9d0ee202d6c4fc30fc81b19dcb18c259f4e04613b5", 0x57}], 0x1, 0xf) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @remote, 0x9}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="016f00f801002700000027", @ANYBLOB], 0x101) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket(0x0, 0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x2, 0x1000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff7, 0x6, 0xe1d9, 0x4, 0x3}) read$hidraw(r3, &(0x7f0000000400)=""/23, 0x17) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000000)=""/111, 0x6f) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f00000000c0)=0x200, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.664292233s ago: executing program 3 (id=859): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) unshare(0x22020600) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="9f2c0569fa4d575294a51f21e5e218a0226694c74b7c2eabf2acec8f5f57a39d3c5f8c6488ea24aadd82", 0x2a}, {&(0x7f0000000140)="8471a17a3322e337e14c4d66a03abda65c79079687e9eef08c46a358a58d8112ec45739e6e170a4b59f2d1e662a5259804205b2350f0df1ec2eaae83456872ce5edf6af0d15bad7ba952a774289d8b72e2c8b4b5c6d934c3ce05f1e9c429f0271c4e688d991adddebe8a31db39b042f08cbe8a5599", 0x75}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="da058b313a7671629acba0ef9985d1e8dee1a0dfc56e4346cbdd37ddf4e51b4cdf95c288edc34963081975b91e030e692b8ba1a1d230a76ee1aa4aa10fc93586678e48f6ada1a922e077e7dd28c03f67fbf036c39f4fa90e196c204b377830fef9d9b71e1105e451e523968a0f0f908589202954", 0x74}, {&(0x7f0000000480)="f849ab40e1dd1732563bd387d0b999b8e6e95f0dda489a1fcf9ac9ddab055cee6f6a17c90ed4b2aa83", 0x29}, {&(0x7f0000000500)="34a29649201b73789090c9bf5c1fe5f31de9763fd2b430ac9fab4a0f6aac9a6a41d09a81d830364f6ac77ac36798f346a00bd3887b575a8b7dd49d7c420e114cc0b7f280950e956590dcf57f7a89ea40f1ea3965d8c68b04516964ec0ca8ee6c50f6023706f48b5196137de5af66abebeed65f0f7582f6eff0e078a394d38d64e648373ca12635ce0838a161c59f860aeb2579362b2bbdcf3c9353c6dd6e1c7566cac358c3bd4a38e3bbeca8f411996a81a6ef9236e06acc80ef40be938cc496538c6b682e2015b3dafa8abe428f00fd0b11949c0d27140bbe9e8e0ebd5a2d084b747a473a55bf21d128", 0xea}], 0x6, 0x8) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.626805417s ago: executing program 2 (id=860): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffff6f, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.562739693s ago: executing program 3 (id=861): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{\x00', 0x2, &(0x7f0000000040)={@_ha_fsid={[0xffffffff, 0x9]}, {0x0, 0x7, 0x4, 0xfffffffffffff41c}}, 0x275, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)={'pim6reg\x00'}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xb}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x1, 0x1cb, 0x4, 0x42, 0x6, {r1, @in={{0x2, 0x4e23, @multicast1}}, 0x7, 0x17, 0x4, 0x2, 0x7}}, &(0x7f00000002c0)=0xb0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000300)={0xc}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="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") ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f0000000440)='\x00', 0x340, &(0x7f0000000480)={@align=0x100, {0x7, 0x8001, 0x0, 0x696e7280}}, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x208}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7, 0x10, 0x101, 0x10001, {{0x3c, 0x4, 0x2, 0x2b, 0xf0, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x7, 0xd, "86858ae86a81a445244171"}, @end, @rr={0x7, 0x23, 0x57, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @private=0xa010100, @loopback, @remote, @multicast1]}, @timestamp={0x44, 0x10, 0x62, 0x0, 0x1, [0x5, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x54, 0x87, 0x3, 0x2, [{@broadcast, 0x3}, {@empty, 0x8}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x10001}, {@empty, 0x9}, {@loopback, 0x6}, {@private=0xa010100, 0x7}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @noop, @timestamp={0x44, 0xc, 0x66, 0x0, 0x8, [0x2, 0x5]}, @timestamp_addr={0x44, 0x1c, 0xf0, 0x1, 0x4, [{@private=0xa010100, 0x22}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x342b}, {@multicast1, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x2, [{@remote, 0x7}, {@private=0xa010101, 0x9}, {@loopback, 0x40}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000700)={@private0, 0x1e, r3}) getpeername$unix(r0, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e) write(r2, &(0x7f0000000800)="76eb2f605ebfec41dd9f5086b910ff094a2d35ed89e46a264dfd2a21b624b7b1323ce9a20381c64b4b2221deab55c65212b953c768e7d88e24cbe1a338d31742baff0efb58235746250c5c5e9596449826e8720406684bf4ec9c755f012f55fcf458e40e68b60b5274d7041f72c92cdb14c066491143e9b4b7cc4b84b64563fabdb0750d395d406d77125d1c", 0x8c) ioctl$DVB_DEMUX_DMX_GET_STC(r0, 0xc0106f32, &(0x7f00000008c0)={0xc1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000900)={0x80000000, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000940)={0x0, r4}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000980)=0x2, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x8}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@delneigh={0x68, 0x1d, 0x20, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x0, r3, 0x80, 0x35, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x3, 0xfffffa85, 0xf662, 0xc}}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @random="8dc256925d33"}, @NDA_LLADDR={0xa, 0x2, @random="ef8268892b66"}, @NDA_SRC_VNI={0x8, 0xb, 0xd58}]}, 0x68}, 0x1, 0x0, 0x0, 0x10040000}, 0x40090) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x801) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000d80), 0x200040, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000dc0)="11108e92d0ce0083513989e528912fd0", 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xcc, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40454}, 0x20000004) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000fc0)={0xffffffff, 0x0, {0xffffffffffffffff}, {0xee01}, 0x6, 0x7}) r9 = getpid() r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x80) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r10, &(0x7f0000001040)={0xffffffffffffffff, r7, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000001080)={0xdb, 0x4, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000010c0)={r11}) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x14, 0xf7f, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x800) 1.420680812s ago: executing program 3 (id=862): r0 = socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8e341d, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000100)='\x1a$\\\x00']}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001000fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617008006700028005000900fb000000afd6a87fa692a52f81082e204033ceb45798c42e567d7fab36004a927efceb52aa3155e007a00ddebf16c790410cdb6100352a06d224c8bbb23c83887f4a3a3a599e62ced0d10168a962f3af922048acde895f615a3a5a1271f0d3996a3057b35deba8609f8a5c809bec961c"], 0x3c}}, 0x804) 1.419748221s ago: executing program 3 (id=863): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002000010300c99526dea0985b0a00000000000000010000001400"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x3548265486ea485e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0xd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000003, 0x3, 0x5, 0x41, 0x40000000000007, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x2, 0x9, 0x4, 0x4], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 206.909006ms ago: executing program 2 (id=864): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e0, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x318}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x1e0}}, 0x8000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 203.195274ms ago: executing program 3 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x2000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r2}, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) io_setup(0x6, 0x0) r6 = userfaultfd(0x801) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405668, &(0x7f0000000100)={0x3, 0x3, 0x2}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004001}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0xd4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xd}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0xd4}}, 0x20000810) 135.286236ms ago: executing program 0 (id=866): r0 = userfaultfd(0x800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xfffffffffffffffb) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x1000004, 0x9}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r8 = epoll_create(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa0980, 0x0) epoll_wait(r8, 0x0, 0x0, 0x1ff) writev(r7, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) readv(r6, 0x0, 0x0) shutdown(r6, 0x1) sendmsg$sock(r6, &(0x7f00000016c0)={&(0x7f0000000080)=@isdn={0x22, 0x6, 0x7, 0x7, 0x9}, 0x80, &(0x7f0000001540), 0x0, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x46}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x52}}], 0xc0}, 0x8800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$nl_generic(r2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) 131.211127ms ago: executing program 3 (id=867): r0 = syz_usbip_server_init(0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20200, 0x80) close_range(r4, r4, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r7, 0x303, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8800) write$usbip_server(r0, &(0x7f0000000000)=ANY=[], 0x3696) 131.01633ms ago: executing program 2 (id=868): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0xfff8, 0x10, 0xa9, &(0x7f0000000040)="a0a3b71c5346b5ada875f6cc27604a789090fb43ddd3389456cd5b9ad4ad46a3117df18231f99c700d73b30071dd5f0a34c8932404c3da16dbd2b478ace917695f6f073187d69499f810383395e94f5823f819210dee2106296018367400692f15b46124d57a9b14dbcac6e75102b6735855a1b7ab8ae7ee94d497f2dca5a3ed910ca0b18eba18f3875caafafd2212c9ebfd83ecd8e409dd5feaaef43742a9124e9cc9354d3c09c625"}], 0x1}) 62.114025ms ago: executing program 1 (id=869): brk(0x8000000000000000) (async) brk(0x8000000000000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x400, 0xd}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={r2, 0x5, 0x9000000000000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000880)={0x9, 0x3, 0x6, 0x2, 0x16, "83d25933a6411d8c1ad5e566557d4925fa4919"}) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000880)={0x9, 0x3, 0x6, 0x2, 0x16, "83d25933a6411d8c1ad5e566557d4925fa4919"}) 60.87797ms ago: executing program 2 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x6c00) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65, 0x65]}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0x2, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40080c5}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r8}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r9, &(0x7f0000000100)=""/235, 0xeb, 0x1000, 0x0, 0x0) 0s ago: executing program 1 (id=871): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000067c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = dup2(r3, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) preadv(r0, &(0x7f00000080c0)=[{&(0x7f0000007f80)=""/206, 0xce}], 0x1, 0x10000, 0x47d) openat(r0, &(0x7f0000000100)='./file1\x00', 0xc0001, 0x100) r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) kernel console output (not intermixed with test programs): [ 43.861610][ T40] audit: type=1400 audit(1779569765.312:115): avc: denied { siginh } for pid=5633 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:13570' (ED25519) to the list of known hosts. [ 45.819875][ T40] audit: type=1400 audit(1779569767.292:116): avc: denied { name_bind } for pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.884266][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 46.884278][ T40] audit: type=1400 audit(1779569768.362:119): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.935872][ T40] audit: type=1400 audit(1779569768.412:120): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.011855][ T40] audit: type=1400 audit(1779569768.492:121): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.054250][ T40] audit: type=1400 audit(1779569768.532:122): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.705250][ T40] audit: type=1400 audit(1779569769.182:123): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.748026][ T40] audit: type=1400 audit(1779569769.222:124): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.979409][ T40] audit: type=1400 audit(1779569769.452:125): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.025011][ T40] audit: type=1400 audit(1779569769.502:126): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.066897][ T40] audit: type=1400 audit(1779569769.542:127): avc: denied { mounton } for pid=5641 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.078037][ T40] audit: type=1400 audit(1779569769.552:128): avc: denied { mount } for pid=5641 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.084080][ T5641] cgroup: Unknown subsys name 'net' [ 48.252121][ T5641] cgroup: Unknown subsys name 'cpuset' [ 48.257921][ T5641] cgroup: Unknown subsys name 'rlimit' [ 48.436453][ T5685] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.130868][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.569388][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 52.569401][ T40] audit: type=1400 audit(1779569774.042:161): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.758657][ T40] audit: type=1400 audit(1779569774.232:162): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.772290][ T40] audit: type=1400 audit(1779569774.232:163): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.780309][ T40] audit: type=1400 audit(1779569774.242:164): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.784502][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.787785][ T40] audit: type=1400 audit(1779569774.252:165): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[2028]" dev="sockfs" ino=2028 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.816220][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.820783][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.824965][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.826526][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.828215][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.828611][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.829185][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.829746][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.830290][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.835787][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.835950][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.836208][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.841285][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.844221][ T40] audit: type=1400 audit(1779569774.322:166): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.845299][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.848382][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.850259][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.851166][ T40] audit: type=1400 audit(1779569774.322:167): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.851224][ T40] audit: type=1400 audit(1779569774.322:168): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.853219][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.853757][ T40] audit: type=1400 audit(1779569774.332:169): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.858159][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.865927][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.871532][ T40] audit: type=1400 audit(1779569774.352:170): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.543265][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.547445][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.550980][ T5734] bridge_slave_0: entered allmulticast mode [ 53.555413][ T5734] bridge_slave_0: entered promiscuous mode [ 53.597351][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.600463][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.603422][ T5734] bridge_slave_1: entered allmulticast mode [ 53.607236][ T5734] bridge_slave_1: entered promiscuous mode [ 53.616850][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.619205][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.621799][ T5729] bridge_slave_0: entered allmulticast mode [ 53.625171][ T5729] bridge_slave_0: entered promiscuous mode [ 53.672859][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.676796][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.679829][ T5729] bridge_slave_1: entered allmulticast mode [ 53.683253][ T5729] bridge_slave_1: entered promiscuous mode [ 53.717499][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.724149][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.766009][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.774595][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.777601][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.780563][ T5742] bridge_slave_0: entered allmulticast mode [ 53.784349][ T5742] bridge_slave_0: entered promiscuous mode [ 53.788099][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.791334][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.794595][ T5742] bridge_slave_1: entered allmulticast mode [ 53.797834][ T5742] bridge_slave_1: entered promiscuous mode [ 53.811586][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.835442][ T5734] team0: Port device team_slave_0 added [ 53.855164][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.858899][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.862091][ T5733] bridge_slave_0: entered allmulticast mode [ 53.865777][ T5733] bridge_slave_0: entered promiscuous mode [ 53.877482][ T5734] team0: Port device team_slave_1 added [ 53.886622][ T5729] team0: Port device team_slave_0 added [ 53.888704][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.891496][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.893815][ T5733] bridge_slave_1: entered allmulticast mode [ 53.896539][ T5733] bridge_slave_1: entered promiscuous mode [ 53.906607][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.916059][ T5729] team0: Port device team_slave_1 added [ 53.938122][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.953349][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.956156][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.966296][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.973804][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.980135][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.984178][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.986983][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.997158][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.011223][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.013716][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.022051][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.033899][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.036157][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.045131][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.049923][ T5742] team0: Port device team_slave_0 added [ 54.071215][ T5742] team0: Port device team_slave_1 added [ 54.089272][ T5733] team0: Port device team_slave_0 added [ 54.092749][ T5733] team0: Port device team_slave_1 added [ 54.103606][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.106472][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.114633][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.124879][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.127116][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.135281][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.166148][ T5729] hsr_slave_0: entered promiscuous mode [ 54.169746][ T5729] hsr_slave_1: entered promiscuous mode [ 54.180151][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.182500][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.190603][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.195544][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.197809][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.205945][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.213355][ T5734] hsr_slave_0: entered promiscuous mode [ 54.215806][ T5734] hsr_slave_1: entered promiscuous mode [ 54.218656][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 54.221452][ T5734] Cannot create hsr debugfs directory [ 54.259776][ T5742] hsr_slave_0: entered promiscuous mode [ 54.262094][ T5742] hsr_slave_1: entered promiscuous mode [ 54.264173][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 54.265897][ T5742] Cannot create hsr debugfs directory [ 54.347771][ T5733] hsr_slave_0: entered promiscuous mode [ 54.350316][ T5733] hsr_slave_1: entered promiscuous mode [ 54.353163][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 54.355017][ T5733] Cannot create hsr debugfs directory [ 54.568805][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.576145][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.580039][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.586099][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.590921][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.596178][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.599586][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.604003][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.659963][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.665448][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.669187][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.676303][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.680300][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.686013][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.689889][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.695213][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.759501][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.768624][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.774267][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.778618][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.787972][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.793298][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.805551][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.810397][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.859917][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.864470][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.869567][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.870607][ T62] Bluetooth: hci1: command tx timeout [ 54.874960][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.880250][ T62] Bluetooth: hci0: command tx timeout [ 54.881311][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.886074][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.892705][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.895491][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.900466][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.929057][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.938333][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.941433][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.950198][ T62] Bluetooth: hci3: command tx timeout [ 54.950537][ T5739] Bluetooth: hci2: command tx timeout [ 54.966562][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.969086][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.993285][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.041341][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.059934][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.062676][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.084622][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.087708][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.097337][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.127715][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.145092][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.160418][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.162672][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.168549][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.170848][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.175803][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.192904][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.195230][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.208471][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.211593][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.261987][ T5734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.266299][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.404845][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.451435][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.463511][ T5729] veth0_vlan: entered promiscuous mode [ 55.471263][ T5729] veth1_vlan: entered promiscuous mode [ 55.505225][ T5742] veth0_vlan: entered promiscuous mode [ 55.511455][ T5742] veth1_vlan: entered promiscuous mode [ 55.519234][ T5729] veth0_macvtap: entered promiscuous mode [ 55.527615][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.537159][ T5729] veth1_macvtap: entered promiscuous mode [ 55.556664][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.565442][ T5742] veth0_macvtap: entered promiscuous mode [ 55.573054][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.583576][ T5742] veth1_macvtap: entered promiscuous mode [ 55.588979][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.604582][ T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.611339][ T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.616379][ T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.623620][ T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.629808][ T5734] veth0_vlan: entered promiscuous mode [ 55.643875][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.648131][ T5734] veth1_vlan: entered promiscuous mode [ 55.659668][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.680621][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.685173][ T5733] veth0_vlan: entered promiscuous mode [ 55.698389][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.704334][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.713552][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.716849][ T5733] veth1_vlan: entered promiscuous mode [ 55.741858][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.745674][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.775779][ T5734] veth0_macvtap: entered promiscuous mode [ 55.791693][ T5734] veth1_macvtap: entered promiscuous mode [ 55.797688][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.800823][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.805267][ T5733] veth0_macvtap: entered promiscuous mode [ 55.808804][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.811390][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.816767][ T5733] veth1_macvtap: entered promiscuous mode [ 55.837393][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.845383][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.855595][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.865923][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.867369][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.869372][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.875717][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.879720][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.881019][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.890795][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.893685][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.898818][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.907428][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.911412][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.925888][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.005267][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.007788][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.041834][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.045584][ T5878] Zero length message leads to an empty skb [ 56.056639][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.059189][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.064337][ T5880] process 'syz.0.1' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 56.065834][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.071041][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.131829][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.135218][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.147030][ T5882] Invalid source name [ 56.148772][ T5882] UBIFS error (pid: 5882): cannot open "./file0", error -22 [ 56.164106][ T5880] ªªªªªª“œW;±"+: renamed from lo (while UP) [ 56.243257][ T5880] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 56.284310][ T5891] syzkaller1: entered promiscuous mode [ 56.289355][ T5891] syzkaller1: entered allmulticast mode [ 56.321019][ T5897] tmpfs: Unknown parameter 'nr_in' [ 56.394411][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 56.457443][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 56.465838][ T5899] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9'. [ 56.475045][ T5912] input: syz1 as /devices/virtual/input/input5 [ 56.536767][ T5916] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 56.539898][ T5916] netlink: 'syz.3.15': attribute type 2 has an invalid length. [ 56.542461][ T5916] netlink: 'syz.3.15': attribute type 2 has an invalid length. [ 56.640597][ T5921] ======================================================= [ 56.640597][ T5921] WARNING: The mand mount option has been deprecated and [ 56.640597][ T5921] and is ignored by this kernel. Remove the mand [ 56.640597][ T5921] option from the mount to silence this warning. [ 56.640597][ T5921] ======================================================= [ 56.657155][ T5921] overlayfs: workdir and upperdir must reside under the same mount [ 56.949606][ T5739] Bluetooth: hci0: command tx timeout [ 56.952039][ T62] Bluetooth: hci1: command tx timeout [ 57.029685][ T62] Bluetooth: hci3: command tx timeout [ 57.030000][ T5739] Bluetooth: hci2: command tx timeout [ 57.334841][ T5943] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 57.541468][ T5952] fuse: Unknown parameter 'fl' [ 57.618395][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 57.618413][ T40] audit: type=1400 audit(1779569779.092:260): avc: denied { getopt } for pid=5961 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.637302][ T40] audit: type=1400 audit(1779569779.112:261): avc: denied { ioctl } for pid=5961 comm="syz.1.28" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 57.656027][ T40] audit: type=1400 audit(1779569779.112:262): avc: denied { write } for pid=5958 comm="syz.2.27" name="/" dev="9p" ino=79691831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.670730][ T40] audit: type=1400 audit(1779569779.122:263): avc: denied { add_name } for pid=5958 comm="syz.2.27" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.690122][ T40] audit: type=1400 audit(1779569779.122:264): avc: denied { create } for pid=5958 comm="syz.2.27" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.702766][ T40] audit: type=1400 audit(1779569779.122:265): avc: denied { associate } for pid=5958 comm="syz.2.27" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.711080][ T40] audit: type=1400 audit(1779569779.132:266): avc: denied { read append open } for pid=5958 comm="syz.2.27" path="/4/file0/cpuset.effective_cpus" dev="9p" ino=79691897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.719789][ T40] audit: type=1400 audit(1779569779.192:267): avc: denied { map } for pid=5970 comm="syz.1.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.727660][ T40] audit: type=1400 audit(1779569779.192:268): avc: denied { read write } for pid=5970 comm="syz.1.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.737301][ T40] audit: type=1400 audit(1779569779.192:269): avc: denied { ioctl } for pid=5970 comm="syz.1.29" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=11339 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.959627][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.073070][ T5991] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 58.075285][ T5991] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.078833][ T5991] vhci_hcd vhci_hcd.0: Device attached [ 58.082571][ T5998] vhci_hcd: connection closed [ 58.083781][ T223] vhci_hcd vhci_hcd.2: stop threads [ 58.087283][ T223] vhci_hcd vhci_hcd.2: release socket [ 58.090865][ T223] vhci_hcd vhci_hcd.2: disconnect device [ 58.094427][ T5997] loop4: detected capacity change from 0 to 2640 [ 58.098334][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.102330][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.105496][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.108013][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.111403][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.114320][ T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 58.114573][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.117398][ T9] usb 6-1: config 1 has no interface number 0 [ 58.120424][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.122625][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 58.122649][ T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 58.122667][ T9] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.126934][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 58.129869][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.133581][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.137345][ T5997] ldm_validate_partition_table(): Disk read failed. [ 58.140642][ T9] usb 6-1: Product: syz [ 58.140660][ T9] usb 6-1: Manufacturer: syz [ 58.140673][ T9] usb 6-1: SerialNumber: syz [ 58.149411][ T5972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.149798][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.153252][ T5972] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.153498][ T5997] Buffer I/O error on dev loop4, logical block 0, async page read [ 58.160349][ T9] usb 6-1: Expected 3 endpoints, found: 2 [ 58.161267][ T5997] Dev loop4: unable to read RDB block 0 [ 58.161613][ T5997] loop4: unable to read partition table [ 58.173774][ T5997] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 58.221485][ T6004] netlink: 80 bytes leftover after parsing attributes in process `syz.3.35'. [ 58.262415][ T6007] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 58.558794][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.614012][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 58.687536][ T6047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46'. [ 58.694123][ T6047] nbd: must specify at least one socket [ 58.696106][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 58.738794][ T6056] loop8: detected capacity change from 0 to 7 [ 58.745604][ T6056] loop8: [POWERTEC] p1 [ 58.747653][ T6056] loop8: p1 start 448 is beyond EOD, truncated [ 59.039953][ T5739] Bluetooth: hci0: command tx timeout [ 59.040343][ T62] Bluetooth: hci1: command tx timeout [ 59.045619][ T6075] vlan2: entered allmulticast mode [ 59.047519][ T6075] bond0: entered allmulticast mode [ 59.049626][ T6075] bond_slave_0: entered allmulticast mode [ 59.051570][ T6075] bond_slave_1: entered allmulticast mode [ 59.077819][ T5816] libceph: connect (1)[c::]:6789 error -22 [ 59.080245][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 59.083297][ T5816] libceph: connect (1)[c::]:6789 error -22 [ 59.085453][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 59.109858][ T62] Bluetooth: hci2: command tx timeout [ 59.110232][ T5739] Bluetooth: hci3: command tx timeout [ 59.135002][ T3260] libceph: connect (1)[c::]:6789 error -22 [ 59.137484][ T3260] libceph: mon0 (1)[c::]:6789 connect error [ 59.350775][ T5816] libceph: connect (1)[c::]:6789 error -22 [ 59.353743][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 59.392795][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.58'. [ 59.396859][ T6090] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 59.409879][ T3260] libceph: connect (1)[c::]:6789 error -22 [ 59.413439][ T3260] libceph: mon0 (1)[c::]:6789 connect error [ 59.568310][ T6096] tipc: Started in network mode [ 59.568326][ T6096] tipc: Node identity 4004, cluster identity 4711 [ 59.568358][ T6096] tipc: Node number set to 16388 [ 59.707030][ T6110] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 59.709769][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.714223][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 59.718511][ T6110] ªªªªªª: renamed from hsr0 (while UP) [ 59.726380][ T6111] vhci_hcd: connection closed [ 59.726697][ T13] vhci_hcd vhci_hcd.3: stop threads [ 59.730973][ T13] vhci_hcd vhci_hcd.3: release socket [ 59.733412][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 59.861547][ T5816] libceph: connect (1)[c::]:6789 error -22 [ 59.863569][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 59.929750][ T34] libceph: connect (1)[c::]:6789 error -22 [ 59.931855][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 59.944507][ T6119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.972157][ T6120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.035641][ T6079] ceph: No mds server is up or the cluster is laggy [ 60.035704][ T6082] ceph: No mds server is up or the cluster is laggy [ 60.104460][ T6127] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 60.110384][ T6127] netlink: 'syz.2.69': attribute type 64 has an invalid length. [ 60.113206][ T6127] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 60.160205][ T6135] No source specified [ 60.230494][ T6133] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 60.489231][ T6157] ip6t_srh: unknown srh invflags 51E8 [ 60.644071][ T6164] jfs: Unknown parameter 'discardP)k [ 60.644071][ T6164] À–¬â>ïÉÔ$mÑJû÷š"ƒ »~' [ 60.694436][ T5737] usb 6-1: USB disconnect, device number 2 [ 61.072988][ T6180] Bluetooth: MGMT ver 1.23 [ 61.076311][ T6180] Bluetooth: hci0: load_link_keys: too big key_count value 3840 [ 61.080874][ T6184] __nla_validate_parse: 6 callbacks suppressed [ 61.080886][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 61.087707][ T6184] netem: incorrect gi model size [ 61.091061][ T6184] netem: change failed [ 61.110679][ T62] Bluetooth: hci1: command tx timeout [ 61.119452][ T62] Bluetooth: hci0: command tx timeout [ 61.190183][ T62] Bluetooth: hci2: command tx timeout [ 61.199581][ T62] Bluetooth: hci3: command tx timeout [ 61.287969][ T6197] i2c i2c-1: dtv_property_process_set: SET cmd 0x73403efe undefined [ 61.408588][ T6210] trusted_key: encrypted_key: insufficient parameters specified [ 61.414943][ T6210] syz_tun: entered allmulticast mode [ 61.418382][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 61.427144][ T6210] bond0: entered promiscuous mode [ 61.430556][ T6210] bond_slave_0: entered promiscuous mode [ 61.433248][ T6210] bond_slave_1: entered promiscuous mode [ 61.557312][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 61.570166][ T6225] ªªªªªª“œW;±"+: renamed from lo (while UP) [ 61.793916][ T6248] xt_hl: Unknown TTL match mode: 255 [ 61.970362][ T6271] mmap: syz.0.112 (6271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.025630][ T6277] random: crng reseeded on system resumption qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 62.108092][ T6283] overlay: ./file0 is not a directory [ 62.326911][ T6290] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 62.639837][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.662760][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 62.662773][ T40] audit: type=1400 audit(1779569784.142:385): avc: denied { append } for pid=6318 comm="syz.2.129" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.708735][ T6321] ªªªªªª“œW;±"+: renamed from lo (while UP) [ 62.799584][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 62.804964][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.809872][ T5834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.813298][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.822255][ T5834] usb 6-1: config 0 descriptor?? [ 62.839352][ T40] audit: type=1400 audit(1779569784.312:386): avc: denied { ioctl } for pid=6328 comm="syz.0.132" path="socket:[11204]" dev="sockfs" ino=11204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.877993][ T40] audit: type=1400 audit(1779569784.352:387): avc: denied { connect } for pid=6334 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.975137][ T6343] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 62.983736][ T40] audit: type=1400 audit(1779569784.462:388): avc: denied { ioctl } for pid=6340 comm="syz.2.136" path="socket:[11221]" dev="sockfs" ino=11221 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.993239][ T40] audit: type=1400 audit(1779569784.472:389): avc: denied { read } for pid=6340 comm="syz.2.136" path="socket:[9983]" dev="sockfs" ino=9983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.037360][ T5834] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 63.073452][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.100802][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.128276][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.165132][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.200893][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.226353][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.252167][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'. [ 63.269601][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 63.458010][ T6371] loop4: detected capacity change from 0 to 7 [ 63.470500][ T6371] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 63.472347][ T6371] loop4: partition table partially beyond EOD, truncated [ 63.475068][ T6371] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 63.592636][ T6379] Cannot find del_set index 14804 as target [ 63.606135][ T40] audit: type=1400 audit(1779569785.082:390): avc: denied { read write } for pid=5729 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.615654][ T40] audit: type=1400 audit(1779569785.082:391): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.627456][ T40] audit: type=1400 audit(1779569785.082:392): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.726062][ T6388] EXT4-fs: Conflicting test_dummy_encryption options [ 63.736496][ T6388] overlayfs: failed to resolve './file0': -2 [ 63.922896][ T40] audit: type=1400 audit(1779569785.402:393): avc: denied { read } for pid=6401 comm="syz.2.142" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.940533][ T40] audit: type=1400 audit(1779569785.402:394): avc: denied { open } for pid=6401 comm="syz.2.142" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.062698][ T6414] nfs4: Unknown parameter 'ê' [ 64.167736][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.171470][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.175034][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.178738][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.182412][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.185941][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.189664][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.193419][ T6420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 64.558948][ T6433] xt_NFQUEUE: number of total queues is 0 [ 64.614579][ T6436] program syz.2.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.954146][ T6446] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 64.956968][ T6446] netlink: 'syz.3.153': attribute type 2 has an invalid length. [ 65.425469][ T6098] usb 6-1: USB disconnect, device number 3 [ 65.448735][ T6460] dlm: plock device version mismatch: kernel (1.2.0), user (4294967295.4294967295.4294967046) [ 67.247003][ T6424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.506430][ T6513] __nla_validate_parse: 27 callbacks suppressed [ 67.506443][ T6513] netlink: 88 bytes leftover after parsing attributes in process `syz.0.161'. [ 67.514183][ T6489] netlink: 88 bytes leftover after parsing attributes in process `syz.0.161'. [ 67.517916][ T6513] netlink: 88 bytes leftover after parsing attributes in process `syz.0.161'. [ 67.535641][ T6518] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!0x0000000000000004' [ 67.539596][ T6518] CPU: 3 UID: 0 PID: 6518 Comm: syz.3.169 Not tainted syzkaller #0 PREEMPT(full) [ 67.539620][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.539628][ T6518] Call Trace: [ 67.539664][ T6518] [ 67.539672][ T6518] dump_stack_lvl+0x100/0x190 [ 67.539798][ T6518] sysfs_warn_dup.cold+0x1c/0x28 [ 67.539842][ T6518] sysfs_do_create_link_sd+0x113/0x140 [ 67.539892][ T6518] sysfs_create_link+0x61/0xc0 [ 67.539916][ T6518] device_add+0x675/0x1950 [ 67.540006][ T6518] ? __pfx_device_add+0x10/0x10 [ 67.540027][ T6518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.540065][ T6518] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 67.540192][ T6518] wiphy_register+0x1edd/0x2d90 [ 67.540216][ T6518] ? __rtnl_unlock+0xb9/0xf0 [ 67.540263][ T6518] ? __pfx_wiphy_register+0x10/0x10 [ 67.540288][ T6518] ? __asan_memset+0x23/0x50 [ 67.540362][ T6518] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 67.540386][ T6518] ieee80211_register_hw+0x3055/0x4570 [ 67.540432][ T6518] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 67.540461][ T6518] ? __pfx___debug_object_init+0x10/0x10 [ 67.540534][ T6518] ? find_held_lock+0x2b/0x80 [ 67.540554][ T6518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.540577][ T6518] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 67.540644][ T6518] ? __hrtimer_setup+0x208/0x330 [ 67.540669][ T6518] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 67.540705][ T6518] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 67.540726][ T6518] ? __asan_memcpy+0x3c/0x60 [ 67.540753][ T6518] hwsim_new_radio_nl+0xc5f/0x1370 [ 67.540770][ T6518] ? rcu_is_watching+0x12/0xc0 [ 67.540794][ T6518] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 67.540817][ T6518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 67.540865][ T6518] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 67.540900][ T6518] genl_family_rcv_msg_doit+0x214/0x300 [ 67.540926][ T6518] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 67.540961][ T6518] ? bpf_lsm_capable+0x9/0x10 [ 67.540980][ T6518] ? security_capable+0x80/0x260 [ 67.541035][ T6518] ? ns_capable+0xd2/0xf0 [ 67.541063][ T6518] genl_rcv_msg+0x560/0x800 [ 67.541094][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.541122][ T6518] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 67.541143][ T6518] netlink_rcv_skb+0x159/0x420 [ 67.541166][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.541193][ T6518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.541227][ T6518] ? netlink_deliver_tap+0x1ae/0xcc0 [ 67.541253][ T6518] genl_rcv+0x28/0x40 [ 67.541272][ T6518] netlink_unicast+0x585/0x850 [ 67.541299][ T6518] ? __pfx_netlink_unicast+0x10/0x10 [ 67.541330][ T6518] netlink_sendmsg+0x8b0/0xda0 [ 67.541359][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.541381][ T6518] ? __might_fault+0x80/0x140 [ 67.541418][ T6518] ____sys_sendmsg+0x9e1/0xb70 [ 67.541441][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.541469][ T6518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.541487][ T6518] ? preempt_schedule_thunk+0x16/0x30 [ 67.541511][ T6518] ? try_to_wake_up+0x5f6/0x1900 [ 67.541533][ T6518] ___sys_sendmsg+0x190/0x1e0 [ 67.541559][ T6518] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.541578][ T6518] ? futex_private_hash_put+0x107/0x1c0 [ 67.541629][ T6518] __sys_sendmsg+0x170/0x220 [ 67.541649][ T6518] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.541667][ T6518] ? __x64_sys_futex+0x34f/0x4d0 [ 67.541695][ T6518] ? rcu_is_watching+0x12/0xc0 [ 67.541724][ T6518] do_syscall_64+0x10b/0xf80 [ 67.541774][ T6518] ? clear_bhb_loop+0x40/0x90 [ 67.541793][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.541811][ T6518] RIP: 0033:0x7fa4ba79ce59 [ 67.541829][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.541844][ T6518] RSP: 002b:00007fa4bb67d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.541860][ T6518] RAX: ffffffffffffffda RBX: 00007fa4baa15fa0 RCX: 00007fa4ba79ce59 [ 67.541871][ T6518] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 67.541880][ T6518] RBP: 00007fa4ba832d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.541890][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.541900][ T6518] R13: 00007fa4baa16038 R14: 00007fa4baa15fa0 R15: 00007fff4e8a24a8 [ 67.541919][ T6518] [ 67.748865][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 67.748877][ T40] audit: type=1400 audit(1779569789.222:409): avc: denied { ioctl } for pid=6527 comm="syz.1.171" path="socket:[13411]" dev="sockfs" ino=13411 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.813780][ T40] audit: type=1400 audit(1779569789.292:410): avc: denied { create } for pid=6535 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.825313][ T40] audit: type=1400 audit(1779569789.302:411): avc: denied { setopt } for pid=6535 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.955291][ T40] audit: type=1400 audit(1779569789.432:412): avc: denied { prog_load } for pid=6544 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.964997][ T40] audit: type=1400 audit(1779569789.432:413): avc: denied { prog_run } for pid=6544 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.016588][ T40] audit: type=1400 audit(1779569789.492:414): avc: denied { ioctl } for pid=6547 comm="syz.3.177" path="socket:[12887]" dev="sockfs" ino=12887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.031300][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 68.038503][ T6550] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.042745][ T40] audit: type=1400 audit(1779569789.522:415): avc: denied { bind } for pid=6547 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.100347][ T6552] 9pnet_virtio: no channels available for device 127.0.0.1 [ 68.128636][ T40] audit: type=1400 audit(1779569789.602:416): avc: denied { getopt } for pid=6555 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.137259][ T40] audit: type=1400 audit(1779569789.612:417): avc: denied { map_create } for pid=6555 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.167925][ T40] audit: type=1401 audit(1779569789.642:418): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 68.215236][ T6564] netlink: 'syz.1.182': attribute type 21 has an invalid length. [ 68.220698][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 68.224457][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 68.253397][ T168] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.257050][ T168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.262555][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 68.269489][ T168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.283696][ T168] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.289746][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 68.513011][ T6603] tmpfs: Unknown parameter 'tËnr_çb'Ainodes' [ 68.730398][ T1345] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.881564][ T1345] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.884814][ T1345] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.888955][ T1345] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.891925][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.101016][ T1345] usb 5-1: usb_control_msg returned -32 [ 69.102914][ T1345] usbtmc 5-1:16.0: can't read capabilities [ 69.243174][ T6634] tmpfs: Bad value for 'mpol' [ 69.274392][ T6636] overlayfs: workdir and upperdir must be separate subtrees [ 69.281672][ T6636] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.374924][ T6642] ªªªªªª“œW;±"+: renamed from lo (while UP) [ 69.629213][ T6656] overlayfs: missing 'lowerdir' [ 69.717989][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 69.887763][ T6670] nftables ruleset with unbound set [ 70.245888][ T6684] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.249158][ T6684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.252117][ T6684] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.254516][ T6684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 70.501888][ T6757] netlink: 6 bytes leftover after parsing attributes in process `syz.1.216'. [ 70.726668][ T6715] program syz.2.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.946311][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.954526][ T6778] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 71.110257][ T6790] net_ratelimit: 57 callbacks suppressed [ 71.110271][ T6790] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 71.191986][ T6795] process '/newroot/70/file0' started with executable stack [ 71.708300][ T6818] kvm: MWAIT instruction emulated as NOP! [ 72.527789][ T6840] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 72.554416][ T6840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.565190][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 72.569675][ T6841] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 72.575129][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 72.656283][ T6848] __nla_validate_parse: 2 callbacks suppressed [ 72.656301][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 72.664250][ T6848] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'. [ 72.676098][ T6841] bond2: (slave veth3): Enslaving as an active interface with a down link [ 72.721313][ T6843] bond2: (slave veth5): Enslaving as an active interface with a down link [ 72.726905][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 72.873402][ T6840] infiniband syz2: set active [ 72.877064][ T5816] vxcan1 speed is unknown, defaulting to 1000 [ 72.880608][ T6840] infiniband syz2: added vxcan1 [ 72.903541][ T6840] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 72.910003][ T6840] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 72.917922][ T6840] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 72.950569][ T6840] RDS/IB: syz2: added [ 72.958523][ T6840] smc: adding ib device syz2 with port count 1 [ 72.961892][ T6840] smc: ib device syz2 port 1 has no pnetid [ 72.966941][ T5816] vxcan1 speed is unknown, defaulting to 1000 [ 72.973792][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 73.104709][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 73.225619][ T6871] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.249'. [ 73.265191][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 73.357899][ T6840] vxcan1 speed is unknown, defaulting to 1000 [ 73.429346][ T6875] netlink: 84 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.433002][ T6875] netlink: 136 bytes leftover after parsing attributes in process `syz.3.251'. [ 73.490337][ T6850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.495645][ T6850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.511770][ T6850] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.519051][ T6850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.522059][ T6850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.526089][ T6850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.531341][ T6850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.534436][ T6850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.539068][ T6850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.542836][ T6850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.544836][ T6850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.550530][ T6850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.799957][ T5816] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.809944][ T6902] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 73.828463][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.850016][ T6902] vlan3: entered allmulticast mode [ 73.851782][ T6902] bond1: entered allmulticast mode [ 73.857239][ T6902] dlm: plock device version mismatch: kernel (1.2.0), user (10.0.0) [ 73.865332][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 73.865345][ T40] audit: type=1400 audit(1779569795.342:450): avc: denied { mount } for pid=6904 comm="syz.3.259" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 73.874792][ T40] audit: type=1400 audit(1779569795.342:451): avc: denied { unlink } for pid=6901 comm="syz.2.258" name="#5" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.881728][ T40] audit: type=1800 audit(1779569795.352:452): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.258" name="file1" dev="overlay" ino=403 res=0 errno=0 [ 73.928620][ T5739] Bluetooth: hci2: unexpected event for opcode 0x007f [ 73.950773][ T5816] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.954346][ T5816] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.957521][ T5816] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.962023][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.971870][ T6887] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.978355][ T5816] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.220596][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 74.236015][ T40] audit: type=1400 audit(5338709897.716:453): avc: denied { accept } for pid=6931 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.236920][ T6932] fuse: fd is not a fuse device [ 74.274288][ T5816] usb 6-1: USB disconnect, device number 4 [ 74.394098][ T6940] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 74.397991][ T40] audit: type=1400 audit(5338709897.876:454): avc: denied { relabelto } for pid=6939 comm="syz.3.270" name="98" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 74.410074][ T40] audit: type=1400 audit(5338709897.876:455): avc: denied { associate } for pid=6939 comm="syz.3.270" name="98" dev="tmpfs" ino=539 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 74.421705][ T40] audit: type=1400 audit(5338709897.896:456): avc: denied { write } for pid=5734 comm="syz-executor" name="98" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 74.432246][ T40] audit: type=1400 audit(5338709897.896:457): avc: denied { remove_name } for pid=5734 comm="syz-executor" name="binderfs" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 74.442012][ T40] audit: type=1400 audit(5338709897.896:458): avc: denied { write } for pid=5734 comm="syz-executor" name="98" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 74.451390][ T40] audit: type=1400 audit(5338709897.896:459): avc: denied { write } for pid=5734 comm="syz-executor" name="98" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 74.471265][ T6646] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 74.483286][ T24] usb 5-1: USB disconnect, device number 2 [ 74.556418][ T6959] overlayfs: failed to clone upperpath [ 74.645293][ T6966] overlayfs: failed to resolve './file2': -2 [ 74.645343][ T6965] overlayfs: failed to resolve './file2': -2 [ 74.761628][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 74.819727][ T6977] netlink: 830 bytes leftover after parsing attributes in process `syz.3.283'. [ 74.881244][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.884365][ T6948] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 74.915821][ T6984] program syz.1.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.137990][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 75.144994][ T7005] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 75.144994][ T7005] The task syz.3.291 (7005) triggered the difference, watch for misbehavior. [ 75.280549][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.409963][ T1345] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 75.455481][ T34] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 75.458462][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.461745][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.466870][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.469868][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.473188][ T34] usb 6-1: Product: syz [ 75.474531][ T34] usb 6-1: Manufacturer: syz [ 75.475995][ T34] usb 6-1: SerialNumber: syz [ 75.496758][ T34] usb 6-1: config 0 descriptor?? [ 75.500304][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 75.502232][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 75.506893][ T34] usb 6-1: selecting invalid altsetting 0 [ 75.581283][ T1345] usb 5-1: config index 0 descriptor too short (expected 8192, got 147) [ 75.589634][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.590247][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 75.594329][ T1345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.598982][ T1345] usb 5-1: config 0 has no interfaces? [ 75.603837][ T1345] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.606869][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.609585][ T1345] usb 5-1: Product: syz [ 75.610891][ T1345] usb 5-1: Manufacturer: syz [ 75.612332][ T1345] usb 5-1: SerialNumber: syz [ 75.616334][ T1345] usb 5-1: config 0 descriptor?? [ 75.810429][ T24] usb 6-1: USB disconnect, device number 5 [ 75.835206][ T1345] usb 5-1: USB disconnect, device number 3 [ 75.915047][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.917643][ T7023] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 75.918341][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.976339][ T7031] io-wq is not configured for unbound workers [ 76.093520][ T7037] bond2 (unregistering): Released all slaves [ 76.149462][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 76.224000][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.230290][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 76.252586][ T7040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7040 comm=syz.2.304 [ 76.301167][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 76.304663][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.308664][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 76.323912][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.327837][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 76.331473][ T9] usb 6-1: Product: syz [ 76.333254][ T9] usb 6-1: Manufacturer: о [ 76.339093][ T9] usb 6-1: config 0 descriptor?? [ 76.346212][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 76.355624][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 76.367081][ T9] usb 6-1: selecting invalid altsetting 0 [ 76.652731][ T5834] usb 6-1: USB disconnect, device number 6 [ 76.719542][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.723512][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.773901][ T7066] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 76.802559][ T7066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.814120][ T7066] bond2: (slave geneve2): making interface the new active one [ 76.818993][ T7066] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 76.827286][ T7069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.948770][ T7075] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 76.949465][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.958223][ T7077] tipc: Started in network mode [ 76.961663][ T7077] tipc: Node identity 4, cluster identity 4711 [ 76.967300][ T7077] tipc: Node number set to 4 [ 77.034485][ T7079] dummy0: entered allmulticast mode [ 77.065369][ T7086] nbd: couldn't find a device at index -2146435068 [ 77.093619][ T7092] raw_sendmsg: syz.3.322 forgot to set AF_INET. Fix it! [ 77.283004][ T7105] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 77.331082][ T7113] netlink: 'syz.3.329': attribute type 7 has an invalid length. [ 77.360826][ T7115] bridge_slave_0: left allmulticast mode [ 77.362656][ T7115] bridge_slave_0: left promiscuous mode [ 77.364589][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.378901][ T7117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14097 sclass=netlink_route_socket pid=7117 comm=syz.0.331 [ 77.390826][ T7115] bridge_slave_1: left allmulticast mode [ 77.392781][ T7115] bridge_slave_1: left promiscuous mode [ 77.394740][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.414638][ T7115] bond0: (slave bond_slave_0): Releasing backup interface [ 77.422906][ T7115] bond_slave_0: left promiscuous mode [ 77.427833][ T7115] bond_slave_0: left allmulticast mode [ 77.432322][ T7115] bond0: (slave bond_slave_1): Releasing backup interface [ 77.440187][ T7115] bond_slave_1: left promiscuous mode [ 77.442525][ T7115] bond_slave_1: left allmulticast mode [ 77.485886][ T7115] team0: Port device team_slave_0 removed [ 77.494746][ T7115] team0: Port device team_slave_1 removed [ 77.497415][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.501078][ T7115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.508433][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.512046][ T7115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.517160][ T7115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.549930][ T7118] ip6gre1: entered allmulticast mode [ 77.563599][ T7118] team0: Port device ip6gre1 added [ 77.600104][ T7126] syzkaller0: entered promiscuous mode [ 77.601763][ T7126] syzkaller0: entered allmulticast mode [ 77.671238][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.673779][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 77.949283][ T7144] cgroup: release_agent respecified [ 78.018830][ T7146] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 78.121673][ T7155] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 78.149077][ T7155] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 78.165171][ T7155] !: entered promiscuous mode [ 78.169990][ T7155] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 78.173236][ T7155] !: left promiscuous mode [ 78.271824][ T7161] syzkaller0: entered promiscuous mode [ 78.273651][ T7161] syzkaller0: entered allmulticast mode [ 78.679409][ T7170] ip6gretap1: entered promiscuous mode [ 78.682006][ T7170] ip6gretap1: entered allmulticast mode [ 78.717387][ T7172] __nla_validate_parse: 3 callbacks suppressed [ 78.717429][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 78.723797][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 78.782581][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 78.814569][ T7177] team1: entered promiscuous mode [ 78.817108][ T7177] team1: entered allmulticast mode [ 78.822014][ T7176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7176 comm=syz.2.352 [ 78.942779][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 78.942801][ T40] audit: type=1400 audit(5338709902.426:491): avc: denied { set_context_mgr } for pid=7184 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.964816][ T40] audit: type=1400 audit(5338709902.436:492): avc: denied { create } for pid=7182 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.980806][ T40] audit: type=1400 audit(5338709902.446:493): avc: denied { watch } for pid=7184 comm="syz.2.355" path="/101/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.990493][ T40] audit: type=1400 audit(5338709902.456:494): avc: denied { map } for pid=7184 comm="syz.2.355" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.029776][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.398617][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ab1c00: rx timeout, send abort [ 79.404680][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ab1c00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.411491][ T40] audit: type=1400 audit(5338709902.896:495): avc: denied { read } for pid=5122 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 79.419423][ T40] audit: type=1400 audit(5338709902.896:496): avc: denied { search } for pid=5122 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.427817][ T40] audit: type=1400 audit(5338709902.896:497): avc: denied { write search } for pid=5122 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.438120][ T40] audit: type=1400 audit(5338709902.896:498): avc: denied { add_name } for pid=5122 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.445627][ T40] audit: type=1400 audit(5338709902.896:499): avc: denied { create } for pid=5122 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.454893][ T40] audit: type=1400 audit(5338709902.896:500): avc: denied { append open } for pid=5122 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.628802][ T5739] Bluetooth: hci0: unexpected event for opcode 0x007f [ 79.749950][ T5739] Bluetooth: hci3: command 0x0405 tx timeout [ 79.750507][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.895691][ T7235] netlink: 14 bytes leftover after parsing attributes in process `syz.3.372'. [ 79.946216][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 79.959609][ T5816] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.119441][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 80.126468][ T5816] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 80.128968][ T5816] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.133945][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.139077][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.148071][ T5816] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.152007][ T5816] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.155650][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.358497][ T7250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7250 comm=syz.2.375 [ 80.364080][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.2.375 [ 80.366690][ T5816] usb 6-1: usb_control_msg returned -32 [ 80.370934][ T5816] usbtmc 6-1:16.0: can't read capabilities [ 80.401435][ T7253] overlayfs: upper fs does not support tmpfile. [ 80.483996][ T7265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=7265 comm=syz.2.377 [ 80.490650][ T7265] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.377'. [ 80.494366][ T7265] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 80.567248][ T7275] netlink: 'syz.3.381': attribute type 64 has an invalid length. [ 80.607512][ T7277] bond3: (slave bond_slave_1): Device is not bonding slave [ 80.612217][ T7277] bond3: option active_slave: invalid value (bond_slave_1) [ 80.633084][ T7277] bond3 (unregistering): Released all slaves [ 80.719062][ T7290] usbtmc 6-1:16.0: INITIATE_CLEAR returned c [ 80.733414][ T39] usb 6-1: USB disconnect, device number 7 [ 80.780799][ T7295] netlink: 'syz.1.385': attribute type 89 has an invalid length. [ 80.784148][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 80.879553][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 80.927281][ T7306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7306 comm=syz.3.389 [ 81.066541][ T7315] overlayfs: failed lookup in lower (newroot/109, name='bus', err=-40): overlapping layers [ 81.071517][ T7318] overlayfs: failed lookup in lower (newroot/109, name='bus', err=-40): overlapping layers [ 81.155282][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'. [ 81.640200][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.809751][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 81.822959][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.832722][ T5834] usb 5-1: config 0 has no interfaces? [ 81.845631][ T5834] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 81.861312][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.868443][ T5834] usb 5-1: Product: syz [ 81.870441][ T5834] usb 5-1: Manufacturer: syz [ 81.884674][ T5834] usb 5-1: SerialNumber: syz [ 81.906516][ T5834] usb 5-1: config 0 descriptor?? [ 82.117490][ T10] usb 5-1: USB disconnect, device number 4 [ 82.254398][ T7375] openvswitch: netlink: IP tunnel dst address not specified [ 82.406742][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.413'. [ 82.602641][ T7403] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.687192][ T7410] Cannot find add_set index 0 as target [ 82.737536][ T7409] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.874699][ T7421] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.184935][ T7427] @0Ù: renamed from bond_slave_1 [ 83.208037][ T5834] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 86.975483][ T1005] cfg80211: failed to load regulatory.db [ 100.664341][ T7462] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 100.762198][ T7467] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 100.771630][ T7467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.850628][ T7480] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 100.896229][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 100.896247][ T40] audit: type=1400 audit(5338709924.376:521): avc: denied { create } for pid=7488 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.919254][ T40] audit: type=1400 audit(5338709924.396:522): avc: denied { connect } for pid=7490 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.941151][ T40] audit: type=1400 audit(5338709924.426:523): avc: denied { append } for pid=7490 comm="syz.2.433" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.950398][ T7492] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 100.956725][ T40] audit: type=1400 audit(5338709924.426:524): avc: denied { ioctl } for pid=7490 comm="syz.2.433" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.995200][ T7498] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 101.243480][ T40] audit: type=1400 audit(5338709924.726:525): avc: denied { listen } for pid=7521 comm="syz.2.444" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.270205][ T62] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 101.285453][ T62] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 101.429220][ T40] audit: type=1400 audit(5338709924.906:526): avc: denied { connect } for pid=7529 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.490168][ T7538] tipc: Enabling of bearer rejected, failed to enable media [ 101.514844][ T7538] vxcan1 speed is unknown, defaulting to 1000 [ 101.605312][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 101.688440][ T7548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7548 comm=syz.3.453 [ 101.730093][ T40] audit: type=1400 audit(5338709925.216:527): avc: denied { read } for pid=7553 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.740739][ T40] audit: type=1400 audit(5338709925.226:528): avc: denied { setopt } for pid=7553 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.898395][ T7574] xt_hashlimit: max too large, truncated to 1048576 [ 101.905454][ T7574] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 101.913143][ T40] audit: type=1400 audit(5338709925.396:529): avc: denied { create } for pid=7573 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 102.001666][ T7583] xt_socket: unknown flags 0xc [ 102.105608][ T7588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.386515][ T7597] overlayfs: missing 'lowerdir' [ 102.416427][ T7597] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 102.456691][ T7601] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.465323][ T7601] CIFS mount error: No usable UNC path provided in device string! [ 102.465323][ T7601] [ 102.468797][ T7601] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 102.513710][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 102.677639][ T40] audit: type=1400 audit(5338709926.156:530): avc: denied { create } for pid=7609 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 102.836344][ T7618] fuse: fd is not a fuse device [ 102.888146][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.475'. [ 103.044453][ T7637] netlink: 68 bytes leftover after parsing attributes in process `syz.3.482'. [ 103.134411][ T7648] fuse: fd is not a fuse device [ 103.230177][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 103.230183][ T7658] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 103.342806][ T7658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.344944][ T7670] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 103.407828][ T7675] pim6reg1: entered promiscuous mode [ 103.413443][ T7675] pim6reg1: entered allmulticast mode [ 103.595998][ T7690] netlink: 'syz.0.495': attribute type 12 has an invalid length. [ 103.793809][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'. [ 103.907717][ T6717] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.931908][ T7716] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 103.938817][ T6716] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 103.945214][ T6716] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 104.005551][ T7732] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 104.032999][ T7734] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 104.082901][ T7734] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.087090][ T7734] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 104.210159][ T7763] nbd: couldn't find a device at index -2146435068 [ 104.666661][ T7805] netlink: 'syz.2.527': attribute type 39 has an invalid length. [ 104.839728][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 104.989874][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 105.000869][ T5816] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 105.004878][ T5816] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.009961][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.015023][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.024628][ T5816] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 105.026047][ T7827] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 105.028428][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.036810][ T5816] usb 6-1: Product: syz [ 105.038636][ T5816] usb 6-1: Manufacturer: syz [ 105.041149][ T5816] usb 6-1: SerialNumber: syz [ 105.053683][ T5816] usb 6-1: config 0 descriptor?? [ 105.056491][ T7799] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.057467][ T7827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.078797][ T7827] bond1: (slave geneve2): making interface the new active one [ 105.084375][ T7827] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 105.094857][ T7830] bridge4: entered promiscuous mode [ 105.164731][ T7827] gtp0: entered allmulticast mode [ 105.181823][ T7827] team0: Device gtp0 is of different type [ 105.262690][ T5816] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 105.273335][ T5816] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 105.351841][ T5739] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 105.356187][ T5739] Bluetooth: hci1: Injecting HCI hardware error event [ 105.361677][ T5739] Bluetooth: hci1: hardware error 0x00 [ 105.467242][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 105.471627][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 105.474988][ T7799] netlink: 'syz.1.525': attribute type 12 has an invalid length. [ 105.496471][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.503480][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.524357][ C0] powermate: config urb returned -71 [ 105.524895][ T6098] usb 6-1: USB disconnect, device number 8 [ 105.526694][ C0] powermate: usb_submit_urb(config) failed [ 105.529363][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 105.592584][ T7851] overlayfs: failed to clone upperpath [ 105.647868][ T5744] Bluetooth: hci2: ISO packet for unknown connection handle 48 [ 105.648936][ T7856] pimreg: entered allmulticast mode [ 105.717017][ T7867] overlayfs: workdir and upperdir must be separate subtrees [ 105.910681][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 105.911752][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.088210][ T62] Bluetooth: hci2: unexpected event for opcode 0x007f [ 106.113516][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 106.113530][ T40] audit: type=1400 audit(5338709929.596:549): avc: denied { write } for pid=7880 comm="syz.0.547" name="/" dev="9p" ino=79691831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.129658][ T7882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.470791][ T40] audit: type=1400 audit(5338709929.956:550): avc: denied { ioctl } for pid=7907 comm="syz.1.555" path="socket:[19863]" dev="sockfs" ino=19863 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 106.487571][ T40] audit: type=1400 audit(5338709929.966:551): avc: denied { read } for pid=7909 comm="syz.2.556" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.498922][ T40] audit: type=1400 audit(5338709929.976:552): avc: denied { open } for pid=7909 comm="syz.2.556" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.510140][ T40] audit: type=1400 audit(5338709929.976:553): avc: denied { ioctl } for pid=7909 comm="syz.2.556" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 106.521464][ T40] audit: type=1400 audit(5338709929.996:554): avc: denied { write } for pid=7911 comm="syz.0.550" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.547458][ T7912] sit0: entered promiscuous mode [ 106.552934][ T7912] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 106.555413][ T7912] netlink: 1 bytes leftover after parsing attributes in process `syz.0.550'. [ 106.562564][ T7914] syzkaller0: entered promiscuous mode [ 106.564730][ T7914] syzkaller0: entered allmulticast mode [ 106.735229][ T7924] vxcan1 speed is unknown, defaulting to 1000 [ 106.856251][ T40] audit: type=1800 audit(5338709930.336:555): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.563" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 106.863032][ T7938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'. [ 106.900882][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 106.921364][ T7938] veth7: entered promiscuous mode [ 106.926730][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 107.051386][ T7944] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.565'. [ 107.098827][ T40] audit: type=1326 audit(5338709930.576:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.1.564" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb77f9ce59 code=0x0 [ 107.106638][ T7951] openvswitch: netlink: IP tunnel dst address not specified [ 107.111807][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.130709][ T7949] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 107.409486][ T6098] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.429104][ T40] audit: type=1400 audit(5338709930.906:557): avc: denied { ioctl } for pid=7964 comm="syz.3.572" path="socket:[20001]" dev="sockfs" ino=20001 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.441493][ T5739] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 107.488278][ T7965] /dev/nullb0: Can't lookup blockdev [ 107.518806][ T7969] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.522212][ T7969] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.525739][ T7969] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 107.535682][ T7971] fuse: fd is not a fuse device [ 107.562336][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.570449][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.575307][ T6098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.593355][ T6098] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.595845][ T7973] syzkaller1: entered promiscuous mode [ 107.597307][ T6098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.598458][ T7973] syzkaller1: entered allmulticast mode [ 107.615933][ T6098] usb 5-1: config 0 descriptor?? [ 107.671054][ T40] audit: type=1400 audit(5338709931.156:558): avc: denied { create } for pid=7979 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 107.743537][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 108.050572][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.058824][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.061872][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.064850][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.068468][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.073938][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.076969][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.080437][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.084081][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.087972][ T6098] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 108.114619][ T6098] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.232364][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.585'. [ 108.244997][ T8007] program syz.1.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.374102][ T8018] bridge_slave_1: left allmulticast mode [ 108.376132][ T8018] bridge_slave_1: left promiscuous mode [ 108.378612][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.386862][ T8018] bridge_slave_0: left allmulticast mode [ 108.388695][ T8018] bridge_slave_0: left promiscuous mode [ 108.391059][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.392500][ T8022] new mount options do not match the existing superblock, will be ignored [ 108.425252][ T8023] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 108.428333][ T8023] netlink: 244 bytes leftover after parsing attributes in process `syz.1.589'. [ 108.848945][ T24] usb 5-1: USB disconnect, device number 5 [ 108.944282][ T8052] warning: `syz.2.599' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.006244][ T8062] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 109.010563][ T8062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.603'. [ 109.273018][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.284717][ T8096] capability: warning: `syz.1.608' uses 32-bit capabilities (legacy support in use) [ 109.358589][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 109.431148][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 109.433102][ T62] Bluetooth: hci3: unexpected event for opcode 0x007f [ 109.440985][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.446448][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.450287][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.455751][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.461350][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.465057][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.671436][ T24] usb 5-1: usb_control_msg returned -32 [ 109.673588][ T24] usbtmc 5-1:16.0: can't read capabilities [ 109.705931][ T24] usb 5-1: USB disconnect, device number 6 [ 109.785336][ T8110] netlink: 'syz.2.615': attribute type 32 has an invalid length. [ 109.817724][ T8110] bond3: Setting coupled_control to off (0) [ 109.820726][ T8110] bond3: entered promiscuous mode [ 109.957475][ T8116] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 110.045748][ T8125] syz.2.618 (8125): drop_caches: 0 [ 110.054672][ T8125] netlink: 'syz.2.618': attribute type 21 has an invalid length. [ 110.057935][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 110.070793][ T6716] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.070862][ T8125] netlink: 'syz.2.618': attribute type 21 has an invalid length. [ 110.075126][ T6716] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.081808][ T6716] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.085197][ T6716] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.146966][ T8129] fuse: fd is not a fuse device [ 110.376452][ T8145] No such timeout policy "syz1" [ 110.486829][ T8152] fuse: Unknown parameter 'Šroup޶x‚çbEÈÆ_id' [ 110.897553][ T8165] loop5: detected capacity change from 0 to 7 [ 110.906825][ T8165] Dev loop5: unable to read RDB block 7 [ 110.908992][ T8165] loop5: AHDI p2 p4 [ 110.910691][ T8165] loop5: partition table partially beyond EOD, truncated [ 110.916213][ T8165] loop5: p4 start 254 is beyond EOD, truncated [ 110.952325][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 110.957295][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.245111][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 111.245150][ T40] audit: type=1400 audit(5338709934.726:572): avc: denied { mount } for pid=8180 comm="syz.2.636" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.283267][ T8185] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.337016][ T8193] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 111.340162][ T8193] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 111.343199][ T8193] netlink: 'syz.2.639': attribute type 8 has an invalid length. [ 111.349706][ T40] audit: type=1400 audit(5338709934.826:573): avc: denied { getopt } for pid=8192 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.415413][ T8197] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 111.481366][ T8195] bond4: option xmit_hash_policy: invalid value (6) [ 111.481718][ T40] audit: type=1400 audit(5338709934.966:574): avc: denied { write } for pid=8210 comm="syz.0.644" name="tcp6" dev="proc" ino=4026533275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.501329][ T8195] bond4 (unregistering): Released all slaves [ 111.529610][ T8208] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 111.635610][ T40] audit: type=1400 audit(5338709935.116:575): avc: denied { setopt } for pid=8226 comm="syz.3.648" lport=48713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.648778][ T40] audit: type=1400 audit(5338709935.116:576): avc: denied { write } for pid=8226 comm="syz.3.648" path="socket:[22657]" dev="sockfs" ino=22657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.743195][ T40] audit: type=1400 audit(5338709935.226:577): avc: denied { mounton } for pid=8241 comm="syz.0.651" path="/proc/359/task" dev="proc" ino=21127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 111.768407][ T40] audit: type=1400 audit(5338709935.246:578): avc: denied { read } for pid=8253 comm="syz.2.652" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.778696][ T40] audit: type=1400 audit(5338709935.246:579): avc: denied { open } for pid=8253 comm="syz.2.652" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.918610][ T8270] nfs4: Unknown parameter '%@}' [ 112.129585][ T3260] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.210002][ T8286] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.291722][ T3260] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.294544][ T3260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.297760][ T3260] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.301191][ T3260] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.308307][ T3260] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.313009][ T3260] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.315532][ T3260] usb 5-1: Product: syz [ 112.316864][ T3260] usb 5-1: Manufacturer: syz [ 112.323541][ T3260] cdc_wdm 5-1:1.0: skipping garbage [ 112.325464][ T3260] cdc_wdm 5-1:1.0: skipping garbage [ 112.331356][ T3260] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 112.333289][ T3260] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.526162][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.530768][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.534089][ T10] usb 5-1: USB disconnect, device number 7 [ 112.747687][ T40] audit: type=1400 audit(5338709936.226:580): avc: denied { mounton } for pid=8307 comm="syz.1.667" path="/101/file1/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 113.009495][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.190410][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 113.193437][ T10] usb 5-1: config 0 has no interfaces? [ 113.195175][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.207691][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.216911][ T10] usb 5-1: config 0 descriptor?? [ 113.308822][ T8337] A link change request failed with some changes committed already. Interface ªªªªªª“œW;±"+ may have been left with an inconsistent configuration, please check. [ 113.317293][ T8337] A link change request failed with some changes committed already. Interface ªªªªªª“œW;±"+ may have been left with an inconsistent configuration, please check. [ 113.403752][ T8346] xt_bpf: check failed: parse error [ 113.435991][ T24] usb 5-1: USB disconnect, device number 8 [ 113.512803][ T8353] __nla_validate_parse: 10 callbacks suppressed [ 113.512819][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.518054][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.521711][ T8353] netlink: 6 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.527736][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.531020][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.534006][ T8353] netlink: 6 bytes leftover after parsing attributes in process `syz.3.680'. [ 113.565435][ T40] audit: type=1400 audit(5338709937.046:581): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 113.733070][ T8371] loop2: detected capacity change from 0 to 7 [ 113.738259][ T8371] Dev loop2: unable to read RDB block 7 [ 113.740229][ T8371] loop2: AHDI p1 p2 p3 [ 113.741627][ T8371] loop2: partition table partially beyond EOD, truncated [ 113.743958][ T8371] loop2: p1 start 1601398130 is beyond EOD, truncated [ 113.746130][ T8371] loop2: p2 start 1702059890 is beyond EOD, truncated [ 113.839758][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 114.114053][ T5739] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 114.125128][ T8400] openvswitch: netlink: Missing key (keys=40, expected=100) [ 114.304784][ T8410] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.700'. [ 114.313523][ T8414] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.701'. [ 114.328592][ T8416] 9p filesystem being mounted at /117/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 114.344022][ T8419] validate_nla: 1 callbacks suppressed [ 114.344035][ T8419] netlink: 'syz.3.703': attribute type 12 has an invalid length. [ 114.429741][ T8423] A link change request failed with some changes committed already. Interface ªªªªªª“œW;±"+ may have been left with an inconsistent configuration, please check. [ 114.455980][ T8426] ceph: No mds server is up or the cluster is laggy [ 114.462889][ T6098] libceph: connect (1)[c::]:6789 error -22 [ 114.473365][ T6098] libceph: mon0 (1)[c::]:6789 connect error [ 114.474205][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 114.478804][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 114.935485][ T5739] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 115.026321][ T8464] 9p filesystem being mounted at /121/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 115.401194][ T8503] syzkaller0: entered promiscuous mode [ 115.403025][ T8503] syzkaller0: entered allmulticast mode [ 115.620151][ T1005] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.949674][ T1005] usb 6-1: Using ep0 maxpacket: 8 [ 115.970878][ T1005] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 115.974052][ T1005] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.980739][ T1005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.984948][ T1005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.002433][ T1005] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 116.005812][ T1005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.009219][ T1005] usb 6-1: Product: syz [ 116.011314][ T1005] usb 6-1: Manufacturer: syz [ 116.013110][ T1005] usb 6-1: SerialNumber: syz [ 116.050177][ T1005] usb 6-1: config 0 descriptor?? [ 116.055110][ T8495] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.266583][ T1005] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 116.297061][ T1005] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 116.468664][ T8495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.478449][ T8495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.484177][ T8495] fuse: Bad value for 'fd' [ 116.670697][ C1] powermate: config urb returned -71 [ 116.671196][ T10] usb 6-1: USB disconnect, device number 9 [ 116.672521][ C1] powermate: usb_submit_urb(config) failed [ 116.672878][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 117.140507][ T8524] usb usb8: usbfs: process 8524 (syz.2.736) did not claim interface 0 before use [ 117.168504][ T5739] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 117.274322][ T8539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8539 comm=syz.3.741 [ 117.286330][ T8534] hugetlbfs: Unknown parameter 'uid0000000000000000' [ 117.297420][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 117.297434][ T40] audit: type=1400 audit(5338709940.776:593): avc: denied { shutdown } for pid=8533 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.308021][ T8545] netlink: 'syz.3.743': attribute type 21 has an invalid length. [ 117.341580][ T40] audit: type=1400 audit(5338709940.826:594): avc: denied { setopt } for pid=8549 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.351658][ T40] audit: type=1400 audit(5338709940.826:595): avc: denied { bind } for pid=8549 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.353889][ T8552] atomic_op ffff88803a936198 conn xmit_atomic 0000000000000000 [ 117.406710][ T8559] bond4: entered promiscuous mode [ 117.607797][ T40] audit: type=1400 audit(5338709941.086:596): avc: denied { bind } for pid=8579 comm="syz.3.752" lport=48714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.617416][ T40] audit: type=1400 audit(5338709941.096:597): avc: denied { name_bind } for pid=8579 comm="syz.3.752" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 117.624703][ T40] audit: type=1400 audit(5338709941.096:598): avc: denied { node_bind } for pid=8579 comm="syz.3.752" saddr=fe88::4 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 117.632084][ T40] audit: type=1400 audit(5338709941.106:599): avc: denied { module_request } for pid=8579 comm="syz.3.752" kmod="net-pf-10-proto-127-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.784654][ T40] audit: type=1400 audit(5338709941.266:600): avc: denied { bpf } for pid=8592 comm="syz.3.756" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.842259][ T40] audit: type=1400 audit(5338709941.326:601): avc: denied { perfmon } for pid=8594 comm="syz.3.757" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.899729][ T40] audit: type=1400 audit(5338709941.376:602): avc: denied { listen } for pid=8598 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.939452][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.975955][ T8601] 9p filesystem being mounted at /293/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 118.090656][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 118.100234][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.104999][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.110051][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.113422][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.118967][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.122950][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.334930][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 118.336936][ T24] usbtmc 6-1:16.0: can't read capabilities [ 118.536702][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 118.541839][ T24] usb 6-1: USB disconnect, device number 10 [ 118.941195][ T8645] __nla_validate_parse: 4 callbacks suppressed [ 118.941210][ T8645] netlink: 12476 bytes leftover after parsing attributes in process `syz.3.772'. [ 118.947213][ T8645] openvswitch: netlink: Flow key attr not present in new flow. [ 119.150828][ T8658] netlink: 'syz.1.778': attribute type 13 has an invalid length. [ 119.350899][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.784'. [ 119.682578][ T8692] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 120.150727][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 120.166692][ T8720] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 120.479850][ T8733] could not allocate digest TFM handle cryptd(blake2b-160) [ 120.589689][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 120.615675][ T8757] erspan1: entered allmulticast mode [ 120.646582][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 121.072878][ T8794] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 121.220670][ T8809] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 121.221612][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 121.338580][ T8796] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 121.359001][ T8809] bond1: entered promiscuous mode [ 121.363907][ T8809] bond1: entered allmulticast mode [ 121.366816][ T8809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.628204][ T8842] trusted_key: encrypted_key: insufficient parameters specified [ 121.650556][ T8844] IPv6: syztnl0: Disabled Multicast RS [ 121.695686][ T8848] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 121.727473][ T8852] 9pnet_virtio: no channels available for device syz [ 121.806478][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 121.811552][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 122.055982][ T8881] netlink: 'syz.0.832': attribute type 21 has an invalid length. [ 122.059009][ T8881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.832'. [ 122.084722][ T8881] loop5: detected capacity change from 0 to 127 [ 122.097633][ T8881] loop5: unable to read partition table [ 122.100747][ T8881] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.320079][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 122.323088][ T8890] team0: Device gtp0 is up. Set it down before adding it as a team port [ 122.323544][ T8899] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.362079][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 122.362092][ T40] audit: type=1400 audit(5338709945.846:644): avc: denied { append } for pid=8906 comm="syz.0.839" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.629448][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 122.779427][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 122.782558][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.786075][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.789243][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.792605][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.795759][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.801919][ T24] usb 6-1: config 0 descriptor?? [ 123.218556][ T24] hid_parser_main: 5 callbacks suppressed [ 123.218595][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 123.223348][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 123.225579][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 123.227791][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 123.230655][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 123.233628][ T24] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 123.421994][ T40] audit: type=1326 audit(5338709946.906:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.3.848" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ba79ce59 code=0x0 [ 123.473163][ T9] usb 6-1: USB disconnect, device number 11 [ 123.528602][ T8950] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 123.537021][ T8950] geneve1: entered promiscuous mode [ 123.554709][ T8950] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 123.927746][ T8968] kvm: kvm [8967]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 123.931817][ T8968] kvm: kvm [8967]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 123.976460][ T40] audit: type=1400 audit(5338709947.456:646): avc: denied { create } for pid=8967 comm="syz.2.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.987690][ T40] audit: type=1400 audit(5338709947.466:647): avc: denied { ioctl } for pid=8967 comm="syz.2.854" path="socket:[26250]" dev="sockfs" ino=26250 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.080791][ T40] audit: type=1400 audit(5338709947.566:648): avc: denied { create } for pid=8976 comm="syz.1.857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.118078][ T8972] syzkaller0: entered promiscuous mode [ 124.118098][ T8972] syzkaller0: entered allmulticast mode [ 124.125886][ T8972] netlink: 164 bytes leftover after parsing attributes in process `syz.0.855'. [ 124.282907][ T40] audit: type=1400 audit(5338709947.766:649): avc: denied { read write } for pid=8976 comm="syz.1.857" name="file0" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.290428][ T40] audit: type=1400 audit(5338709947.766:650): avc: denied { open } for pid=8976 comm="syz.1.857" path="/144/file0" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.782604][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 125.858086][ T40] audit: type=1400 audit(5338709949.336:651): avc: denied { read write } for pid=9007 comm="syz.0.866" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.880135][ T40] audit: type=1400 audit(5338709949.336:652): avc: denied { open } for pid=9007 comm="syz.0.866" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.890873][ T40] audit: type=1400 audit(5338709949.346:653): avc: denied { ioctl } for pid=9007 comm="syz.0.866" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.901499][ T9011] uprobe: syz.3.867:9011 failed to unregister, leaking uprobe [ 126.009104][ T9019] [ 126.010249][ T9019] ====================================================== [ 126.012436][ T9019] WARNING: possible circular locking dependency detected [ 126.014625][ T9019] syzkaller #0 Tainted: G L [ 126.017208][ T9019] ------------------------------------------------------ [ 126.020176][ T9019] syz.2.870/9019 is trying to acquire lock: [ 126.022433][ T9019] ffff888058ac0a68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 126.026112][ T9019] [ 126.026112][ T9019] but task is already holding lock: [ 126.028590][ T9019] ffff888058ac0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 126.031501][ T9019] [ 126.031501][ T9019] which lock already depends on the new lock. [ 126.031501][ T9019] [ 126.035563][ T9019] [ 126.035563][ T9019] the existing dependency chain (in reverse order) is: [ 126.039268][ T9019] [ 126.039268][ T9019] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 126.042199][ T9019] lock_sock_nested+0x41/0xf0 [ 126.044474][ T9019] smc_listen_out+0x1f5/0x4b0 [ 126.046750][ T9019] smc_listen_work+0x767/0x50e0 [ 126.048976][ T9019] process_one_work+0xa0e/0x1980 [ 126.050963][ T9019] worker_thread+0x5ef/0xe50 [ 126.053062][ T9019] kthread+0x370/0x450 [ 126.054990][ T9019] ret_from_fork+0x72b/0xd50 [ 126.056942][ T9019] ret_from_fork_asm+0x1a/0x30 [ 126.058924][ T9019] [ 126.058924][ T9019] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 126.062986][ T9019] __lock_acquire+0x14b8/0x2630 [ 126.064691][ T9019] lock_acquire+0x1b1/0x370 [ 126.066421][ T9019] __flush_work+0x4de/0xcb0 [ 126.068516][ T9019] cancel_work_sync+0xd1/0xf0 [ 126.070727][ T9019] smc_clcsock_release+0x5f/0xe0 [ 126.073008][ T9019] __smc_release+0x5c2/0x880 [ 126.075097][ T9019] smc_close_non_accepted+0xda/0x200 [ 126.077172][ T9019] smc_close_active+0x4ff/0x1070 [ 126.079458][ T9019] __smc_release+0x634/0x880 [ 126.081368][ T9019] smc_release+0x1fc/0x620 [ 126.082913][ T9019] __sock_release+0xb3/0x260 [ 126.084528][ T9019] sock_close+0x1c/0x30 [ 126.086132][ T9019] __fput+0x3ff/0xb50 [ 126.088076][ T9019] task_work_run+0x150/0x240 [ 126.090226][ T9019] exit_to_user_mode_loop+0x107/0x4f0 [ 126.092309][ T9019] do_syscall_64+0x706/0xf80 [ 126.094018][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.096667][ T9019] [ 126.096667][ T9019] other info that might help us debug this: [ 126.096667][ T9019] [ 126.100790][ T9019] Possible unsafe locking scenario: [ 126.100790][ T9019] [ 126.103672][ T9019] CPU0 CPU1 [ 126.105356][ T9019] ---- ---- [ 126.107459][ T9019] lock(sk_lock-AF_SMC/1); [ 126.109397][ T9019] lock((work_completion)(&new_smc->smc_listen_work)); [ 126.113210][ T9019] lock(sk_lock-AF_SMC/1); [ 126.116144][ T9019] lock((work_completion)(&new_smc->smc_listen_work)); [ 126.119041][ T9019] [ 126.119041][ T9019] *** DEADLOCK *** [ 126.119041][ T9019] [ 126.121880][ T9019] 3 locks held by syz.2.870/9019: [ 126.123909][ T9019] #0: ffff88805d886240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 126.128223][ T9019] #1: ffff888058ac0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 126.132068][ T9019] #2: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 126.135191][ T9019] [ 126.135191][ T9019] stack backtrace: [ 126.137110][ T9019] CPU: 2 UID: 0 PID: 9019 Comm: syz.2.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.137140][ T9019] Tainted: [L]=SOFTLOCKUP [ 126.137147][ T9019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.137160][ T9019] Call Trace: [ 126.137197][ T9019] [ 126.137205][ T9019] dump_stack_lvl+0x100/0x190 [ 126.137233][ T9019] print_circular_bug.cold+0x178/0x1c7 [ 126.137289][ T9019] check_noncircular+0x146/0x160 [ 126.137317][ T9019] __lock_acquire+0x14b8/0x2630 [ 126.137344][ T9019] lock_acquire+0x1b1/0x370 [ 126.137365][ T9019] ? __flush_work+0x4ca/0xcb0 [ 126.137391][ T9019] ? mark_held_locks+0x40/0x70 [ 126.137414][ T9019] ? __flush_work+0x4ca/0xcb0 [ 126.137435][ T9019] __flush_work+0x4de/0xcb0 [ 126.137451][ T9019] ? __flush_work+0x4ca/0xcb0 [ 126.137465][ T9019] ? __pfx___flush_work+0x10/0x10 [ 126.137480][ T9019] ? __pfx_wq_barrier_func+0x10/0x10 [ 126.137499][ T9019] ? __pfx___might_resched+0x10/0x10 [ 126.137516][ T9019] cancel_work_sync+0xd1/0xf0 [ 126.137532][ T9019] smc_clcsock_release+0x5f/0xe0 [ 126.137548][ T9019] __smc_release+0x5c2/0x880 [ 126.137562][ T9019] ? __pfx_sock_def_readable+0x10/0x10 [ 126.137572][ T9019] smc_close_non_accepted+0xda/0x200 [ 126.137586][ T9019] smc_close_active+0x4ff/0x1070 [ 126.137602][ T9019] __smc_release+0x634/0x880 [ 126.137615][ T9019] smc_release+0x1fc/0x620 [ 126.137629][ T9019] __sock_release+0xb3/0x260 [ 126.137641][ T9019] ? __pfx_sock_close+0x10/0x10 [ 126.137653][ T9019] sock_close+0x1c/0x30 [ 126.137663][ T9019] __fput+0x3ff/0xb50 [ 126.137680][ T9019] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.137695][ T9019] task_work_run+0x150/0x240 [ 126.137708][ T9019] ? __pfx_task_work_run+0x10/0x10 [ 126.137722][ T9019] ? rcu_is_watching+0x12/0xc0 [ 126.137739][ T9019] exit_to_user_mode_loop+0x107/0x4f0 [ 126.137753][ T9019] ? rcu_is_watching+0x12/0xc0 [ 126.137769][ T9019] do_syscall_64+0x706/0xf80 [ 126.137784][ T9019] ? clear_bhb_loop+0x40/0x90 [ 126.137796][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.137807][ T9019] RIP: 0033:0x7fe18299ce59 [ 126.137818][ T9019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.137830][ T9019] RSP: 002b:00007fe18389a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 126.137841][ T9019] RAX: 0000000000000000 RBX: 00007fe182c15fa0 RCX: 00007fe18299ce59 [ 126.137847][ T9019] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 126.137854][ T9019] RBP: 00007fe182a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.137861][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.137867][ T9019] R13: 00007fe182c16038 R14: 00007fe182c15fa0 R15: 00007fffb1184478 [ 126.137877][ T9019]