last executing test programs: 1m55.76944632s ago: executing program 1 (id=228): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002c40)={0x0, 0x0}) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0, 0x0}, &(0x7f0000002dc0)=0xc) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000004e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000006e80), 0x402000, 0x0) (async) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000006ec0), 0x321001, 0x0) r9 = fanotify_init(0x20, 0x8000) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006f00)=0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = syz_open_dev$ublk_bdev(&(0x7f0000006fc0), 0x0, 0x424002) r13 = accept$packet(0xffffffffffffffff, &(0x7f0000007000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007040)=0x14) r14 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000007080), 0x2000, 0x0) (async) r15 = syz_open_dev$usbfs(&(0x7f00000070c0), 0x8000000000000000, 0x20000) (async) r16 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r17 = accept4$tipc(0xffffffffffffffff, &(0x7f0000007100)=@id, &(0x7f0000007140)=0x10, 0x80000) (async, rerun: 32) r18 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$unix(r0, &(0x7f0000007240)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="507764ae5254396f2dac7d0a6418d7623d4606d70bd58d7569b57132226278e24e3b0d884ce2372eccea200f7cf8dc1f42bf2f24acfcd5ae1bee64fe78db851e7572a692dc54eac5c0984aa859ed8be26b55406ca63137c2cb59db984ce25723fbd01decc9593176b865a4b062411d336a79a880edd8854d446d4462af493a70e3717aa8c99b4f241bd9896177bb79705848a41b7c33e0e1e6f9387d0da2994d", 0xa0}, {&(0x7f0000000140)="d2297eaf86d187bf6d64824c2618453a07df6eede0c498ce81aba7a7431be22fa66151977a7fe9792fc97ed878f22d4152aedee09d07ae0bfd8006bc4a3ec583e82186d70bcffa8314d1b13f954699ff3e7ca0559278d7714fb16e3550a5f511b548af44ffe0c38d5e9032ecf1110aaa3d940048f042a28b5ea8f14c5d55689921b7c8c2e07a148582b5542006358480f80ab106ff1f0e0faa3e5ff9f3602589e02bc182578078ecdb4b4737ad8cd52c30e30f1194b237ff15e2610b52eeae5139728f", 0xc3}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="a4696f9ebe5ff56ab5760f307c6a513bd4806a96d63e3af4413881fb86ac842c37e56e234ea5e52b1f2812c44806e6b9f7a653a0583028b37144138177407436ba95d824a6f8c744f83bf84611f2c1cdb17e834d6283369f8f622f729b1c0a319b160c448d056ac3352ef03cd24548b76358b266cc7ca978cf69ffd5bde838c6d317679ffb6a28d59b83b6dc107abcb3cd1bade02dd3386d404fa2951bacb7f0fa2a68ba8afa69083ebd5ccb", 0xac}, {&(0x7f00000003c0)="2db0478e363b66ece4cbb3eaef44f2a04d585fc86cbde142fed91516a96b7fc3d7d07d98f46bae76e5a3ec5771ce4687e88724f0847f851c7f3e402f42642dbac44999f5855c0f00044a16", 0x4b}, {&(0x7f0000000440)="f9bdd28cc1133c63f49b", 0xa}], 0x3, 0x0, 0x0, 0x4001}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000540)}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="67361cabd2277acd1c7ec7482dd30dd022a8360528647273162f41d58cbec6c4667005bf263b5dc02ac9acf5b7750482f30c53bf162ce150f131342507ff023c386cabf2a622bde2c573cb0ab0c54bf18b0e20bccfd9c4ed9c4b68af27335bd47015df7358c7813529912705acc65efe9ce7f57b7a1983e11a83442040237f41072a1ff68f914f782ea6d176194c6d48bd", 0x91}, {&(0x7f0000001640)="a247acd69abb925a025973b48cc1f2d73cef0419a4102d23a70221fc43c0f4e829594bcb26078560ce9d1ebb2fad720b4f25b2da3cb67fbd404e7fbb84571838139c2d671b01b8942842af06e538425483174820d2f7dd611bc4cf20ba498f0946d651c26c8c558111b184d6875895cf5de67084488351c635218d7a6f34d0a9b261cdda5709d2b2a52fd8a90e459b1913ec3eb545b39c25d98385c4f60992416e1f2023e5b042d8dac2bbcb", 0xac}], 0x4, &(0x7f0000001740), 0x0, 0x40011}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001780)="2317b347f1b939bdd7978e1c96197b2c05fd09e5bd26e3755e44842601236dc8473ef6ec0ddeb858b4b2cccb6d964c814ea18323626163b030bbfe1577b8c1e25230cde90ea20788441f2c0f7924bbfbfda04af96115583cd44e13c8387cdfa8827f8dc6de2b49487e53c0701e26c19305d69ed1a703e5a3eec4a34c8c5072aa3b08175e4beede54a397bb2770a0e6787e05503d6b3ae89ac2571057c1e503e174826fdc7e0c109558396a443c6264445b44a0c5ed6c556d0b9e20c0d3e1956fee", 0xc1}, {&(0x7f0000001880)="dad9cb3c0e475d89a669d649782c57a802e2fd63d49ae7cbc3c2b29d13814e997492c67e5a32bdb51d48ada8a4e73a8236b0b09a75bff2ca529f16844b91cc2fd45ca55a498ca5c50d8e40283cf134320f39e60ccba7b937539b42e09e7914382693b3a13c23aaf52cc14aa9260868c09902962e5c37a6d81f2cad79639f92b457886862b36cf36bc06a5fe4a035f640b41952cdd436aa3a3035f3", 0x9b}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="b08af0e8fa6b09a31cee4205f3ff49e1b4015f8f44a20384f90162400c2425ab10f53085fa5bb98fbe032b1804a06e7149b81819d2a0d64812561b4802a88d60f91aa1b3db0739bffd3208fdd5d35b995bbe986744ffb11f16ac0df7a8e794f50b3e250f9143de1614becef84a728af473ac710de19277a9824bfc74802a9e72c27c042abe926e91318a709b87817f67347276b9f3ad7995714bef31b27afae1001e9d6dcbb9023b530e3bc08b14e7310d96b7bddedd8e80853b7e5cee124d5105e97a92e73bf4b4fb4d3a42090c511d7c7c2268451bbc9fb4ea17dfea920958ede0112a", 0xe4}, {&(0x7f0000002a40)="8f034cc86ead5cec3693bac41da903d60e577e071d983b993f9207d7e5f7151ba85f00684e7b9ddacbadde17f5d41a1e8f53a4b6d6488612d44d44c27f077b0d62f711db94007256", 0x48}, {&(0x7f0000002ac0)="c5707d5f18a0edc0d443a4ffb17ac612dcb42abfad3bc09650c056b03a8c00ad89232694803fbfa520ce24593a61cbdf78c976ca80253ce99a1aa489c91254d2f30f7d364c2b770a789b6327351f8092e6a7ce48f8cde67d8d1ebd67750eabb07abf452331d52e8cf4ac40c486c99849befd1bb6ee7482ac1dbc53a3634dcfadde302645154f0bdf8c4fa0d741efd32ad96f40bdfcefb746d24064ab778f4d60a9b1af3560c92f5598e8b604b7f5f45be75f2dabaae64bc1962d0a0b45dfe6f658d0eb72c21728e6e240444e6ecef2157dcedb240db1e3276ff1538ed88e4313", 0xe0}], 0x6, &(0x7f0000007180)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r9, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x30, 0x1, 0x1, [r12, r13, r14, r15, 0xffffffffffffffff, r16, r17, r18]}}], 0xb8, 0x4000}}], 0x4, 0x0) (async) setuid(r3) (async) syz_emit_ethernet(0x100e, &(0x7f0000007340)={@multicast, @remote, @void, {@generic={0x8917, "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"}}}, &(0x7f0000008380)={0x1, 0x1, [0xb9, 0xd4b, 0xa81, 0x24]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r14, 0x4010942a, &(0x7f00000083c0)={0x1, 0x6}) r19 = openat(r0, &(0x7f0000008400)='./file0\x00', 0x14d001, 0x60) write(r19, &(0x7f0000008440)="af1f0b4f8d0fefd35c508859ec397a676a6eca91276a8df2edde7df2fc69c02991ba8814305bf60954a96dafa48f89a96ad3f26231084e513e3112146299143088b575cd81d4b1fbe10520bc8d80255b6fedde94636fda469cc22e46ab2073d909329c2cb2e7c1b0", 0x68) utime(&(0x7f00000084c0)='./file0\x00', &(0x7f0000008500)={0x40, 0xffffffff}) (async) landlock_restrict_self(r7, 0x8) (async, rerun: 32) r20 = openat$cgroup_freezer_state(r19, &(0x7f0000008540), 0x2, 0x0) (rerun: 32) fgetxattr(r20, &(0x7f0000008580)=@random={'osx.', '/dev/dsp1\x00'}, &(0x7f00000085c0)=""/146, 0x92) accept4(r17, &(0x7f0000008680)=@x25, &(0x7f0000008700)=0x80, 0x100800) (async, rerun: 32) mount$9p_virtio(&(0x7f0000008740), &(0x7f0000008780)='./file0\x00', &(0x7f00000087c0), 0x10801, &(0x7f0000008800)={'trans=virtio,', {[{@fscache}, {@afid={'afid', 0x3d, 0x1}}, {@loose}, {@msize={'msize', 0x3d, 0x80}}, {@cachetag={'cachetag', 0x3d, '/dev/dsp\x00'}}, {@cache_fscache}], [{@obj_user}, {@subj_role={'subj_role', 0x3d, '\\\xbb\'*'}}]}}) (rerun: 32) 1m55.769124783s ago: executing program 1 (id=229): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x0, 0xb, [{0x6, 0xd37e}, {0xdc5, 0x45}, {0x0, 0x5}, {0x6, 0x1ff}, {0x1000, 0xcb}, {0x4605, 0x1000006}, {0x1496c345, 0x80000001}, {0x8003, 0x8000}], 0x7, 0xa, 0x2, 0x2, 0x6}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r1, 0xe, 0xffffffffffffffff) 1m55.710893127s ago: executing program 1 (id=230): mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 1m55.659701969s ago: executing program 1 (id=231): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r1, 0xaeb, 0x1) getdents64(r1, 0x0, 0x4f) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x7, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) syz_clone(0x28800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m55.600524179s ago: executing program 1 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) fsopen(&(0x7f0000000000)='ceph\x00', 0x1) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x6}, 0x2) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3}, 0x2) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfc, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x7, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x20000085, 0x5, 0x1, 0xb, 0x4, 0x7, 0x4009, 0xfffffffd, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x91f, 0x3f6, 0xffffffff, 0x6, 0x6, 0xc4c, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x7, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x2ffffffe, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x1004, 0x1f8, 0x1ff, 0xffffffff]}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000080)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0xc0844123, &(0x7f00000001c0)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvfrom$packet(r5, &(0x7f00000000c0), 0x0, 0x2, &(0x7f0000000100)={0x11, 0x17, 0x0, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="66b9600500000f32baf80c66b820b43c8266efbafc0ced0f01f50f799b030066b9800000c00f326635001000000f30f2ad0f01c20fe7b5f5ffb59b66b9de0b00000f32", 0x43}], 0x1, 0x15, 0x0, 0x0) 1m55.280854846s ago: executing program 1 (id=234): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x40000) openat(r0, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) 1m55.216940148s ago: executing program 32 (id=234): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x2, 0x40000) openat(r0, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) 1m25.377836479s ago: executing program 4 (id=599): syz_usb_connect(0x4, 0x63b, &(0x7f0000000000)={{0x12, 0x1, 0x10, 0xa0, 0xf1, 0xf9, 0x10, 0x16d8, 0x5553, 0x2fbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x629, 0x2, 0x7, 0x8, 0x20, 0x8, "", [{{0x9, 0x4, 0x83, 0x34, 0xa, 0xff, 0xff, 0x0, 0x9, [@hid_hid={0x9, 0x21, 0xb, 0x1, 0x1, {0x22, 0x3e0}}, @uac_as], [{{0x9, 0x5, 0xe, 0x8, 0x3ff, 0xa9, 0x81, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xe, 0x5, 0xfc, [@generic={0x94, 0x24, "4a19b5a36ed8e6b1c2ac742b01abd09960389b021576366c665df7126cbf27f997c8bcf2f272ed2dd49964b6bc8212fcd00da65a36341a5dddddb480ac3c6f8d3b8b97a7db9ad899d8610902d7b97af0a2a48046a1cdc43eac2d2e721c682d338ef28a0434fec2360dd2b997e1aa73fd641fe91eb56f87e58e92498021ba2ef8267cbd92341aa605ce2c0b00561ef1f0651d"}, @generic={0xda, 0x1, "84287b827257ecb1feaa501924d38c650d9db4724c598795c3df6ac3c46fe7cfa013f3510c0bcba471bebbd825f1b4af03d3f1714e878ed3de0fb15458f294b9234c417c85318c422c9c02752133f005ac53a0b4f9963fecf16c064b43aeca3f8509e6b485d5955c8b73b553f4ba771c13bf8ad3ddce87391b542f159d12b54e437b753e58814ac2cae5176eb274b5cea68cd61cd4479afe07a219059c1a5ec0adcdce785dcbfcc5401527ec9e25966b0c3082ed1930a1e446f3548190a42d1bc9a46c6c7301322626e203d133117a7c3ef959f67d8e14ed"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x86, 0x3}}, {{0x9, 0x5, 0x2, 0x94600e3b6adb913a, 0x3ff, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x5, 0xa7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x40}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x6, 0x6, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xb, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6}, @generic={0x53, 0xb, "037d4c0b7595f347bc616b3b4ad61b190f555de4480adcf50036f91487cede3ad706dbce722136261351ea876d4151dcae25dcea8a1e6fb909ea1cf0b36364495788b5cc3a335250a246cb503c06d33ace"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x9, 0xac, 0x6, [@generic={0x15, 0x24, "ffa2de08cb3bcf2bd75a20003aac9c131dc011"}, @generic={0x52, 0x0, "13ce9fb95815317872eb73d2e43929f8ccfa320e22ed17cd332cde48125a37af69150cf77617a071cc6c41e4051e20221a45f27c28e26eef888a493abaf5b839745a446f475463523441d0594e4c99a7"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x2, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xba, 0x5, 0xc, 0xff, 0xff, 0xff, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x4, 0x9, "931e"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "509505b440aa"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xd, 0x726, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x4d, 0x6, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x5, 0x80}]}], [{{0x9, 0x5, 0x80, 0xd, 0x8, 0x2, 0x5, 0xfd}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xc, 0xd, 0xed}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x7, 0xd, 0x8, [@generic={0x4c, 0x21, "29948a791d10fb81de254655652966a44b5c1760cff8933d7fcf8bf80ca2c539a24230cfbc2158cf063e649b201ee5606bb5e388bdebfe23b10a34a7d82f370b4f7781ee1bb2b72d605d"}, @generic={0x99, 0x10, "d75feb629888b4e8a4f39e0f13ed956c02631939416c6214ac6ec4ded6a4768c3e68f34edb49779369caa888d635f35c82c3a8cbea660f03f60a0f3108c63357087f3a7cd918239b1fa664fee352597e58b7b2bc3be1968c23ae3ca94fe6b26d3458e8fc0ea862ddedadf6b02213d5a854a30df8c64bf5c6ca9a608bd60d94bcd9f5297b88b4a95f41a3c51bd10ca67d4f223bb09149a8"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x2, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0xf6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @generic={0x3b, 0x4, "01ce3a485ebde3b9950202f4f88748015de6e4278b1603f4293ef45f014a531b958b0affaea5e81b8343221d0b43359d04b0ca474875bd210a"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x0, 0x8, 0x40}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x7, 0x4, 0x3c, [@generic={0x59, 0xa, "fe73dd8a486c3ba64aa8553258249c599378401a4c42c86ac239d477f15d8f3153eab85bdb46ce197508618a65dd3595ce97843b0e8c4fd11bb24a6a27d5d703a18ba831e8ef84e3cbda1f1bc15d0f836e357e6e9ce7de"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x4, 0x20, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x7, 0x7, [@generic={0x81, 0x2, "862f2c2b3532b5c9ffb9fa0bf286c89f2d88b4b7126ffccc3140dce06f28154933779aa4f1169e81b56d8fa9d6ea0dae5f633a73f45000f56791f2e8ac77705ce997cad5f89188f130c4c3b5f765cb28c81b38cc169a268ef7b2479da88982d21c755ce3d96fcc03dbce6b0aa244b9b75bdd1c47aaf06c175f2e135fc5f5d4"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xea, 0x7, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x6, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3e1}, @generic={0x5d, 0xe, "16f08beb2a24e2fd64a8e084f1a86440781e0f5d6d857b2ad1ad073a3e614d13809c18183cd869d3abdf3d6034147e876ace43e87312c7ea9704b5b255e04bb62ec3e47683b46587de53062087704d611213f86aa3da3cbd58ba85"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0xae, 0x6, 0xcc, [@generic={0x60, 0x7, "bfcd80da894e17a8ea410e69bf51061097ce60ed412482bc464c4d729d5560977aef1ca56a088b98b2521801dac2ff164befd051bfa5adb96ceac173b7fea0522c5efc74df81dbe5f783625a0d651271b775d2cd0253dc217190699e0c35"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x250, 0x2, 0xf, 0x9, 0x8, 0x1}, 0x12, &(0x7f0000000680)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x18, 0x3, 0x85, 0x3}]}, 0x6, [{0x9f, &(0x7f00000006c0)=@string={0x9f, 0x3, "ecdc466676eeb20ec2932e8848a78723e7d34ee79d0cf6420c8b5143cc02b9d876332c937c4605f531254ca821ccdd15c97797983daaac92cbae84088791ec81d6d6370ba6aafcc27890aac082bead197cb1e0591e17d0f18349d94249239a7109ad974806be2207cb2c1f8200622c6f6197a615ef0489908e9d5bd798346f9c60c6613efd730a9befc6b950979666e45b1e5c4fc8764abee7eea5a344"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x4001}}, {0x4a, &(0x7f0000000a00)=ANY=[@ANYBLOB="4a039b60c4b49b7ac9fa133bbb8192547960c687970353a40e31bc58569edf93419c08b9b8085efc02d39c97daea082ca721659c5091fac5e318bac2913d00ae0b00"/76]}, {0x27, &(0x7f0000000840)=@string={0x27, 0x3, "4d4fcdd5865335668ba0d688bba156c3e3d1fc8a5e6839dc2d9790cf5f37e483bf5b92e746"}}, {0x37, &(0x7f0000000880)=@string={0x37, 0x3, "bbb4302664d828f72166ee89b6ecad86ab80da74a4b18ca4737aad4f1d5628061c77178b173555c3e96a34812fe7c4f22096545da2"}}, {0x81, &(0x7f00000008c0)=@string={0x81, 0x3, "3f7a41c4387102f9c8670f1d028d53a5e8d1b8964f4322e1570ea95bfe28c6e207e9773c86ea3603adde74353ab00c6dcd15c744d171319df16cdfae3d5616c720bdf01cd2ddd03f851049e98744cb98703dbc4c2fd2ebc70ddb283a35ace740dd844671e2c6176db1911b190c439606308f239b06f7e400bddfb4176cfac5"}}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000004c0)={0x48, 0x8, r3, 0x0, 0x7, 0x1, &(0x7f0000000400)='U', 0x1}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1m24.82784857s ago: executing program 4 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) getdents64(r4, &(0x7f00000028c0)=""/4092, 0xffc) getdents64(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xd, 0x5}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}}}, &(0x7f0000000380)=0x84) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1m24.724691133s ago: executing program 4 (id=609): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @vsb}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000b141d0626bd7000fcdbdf25080001"], 0x20}}, 0x44) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000180)={0x28, 0x10000, 0x0, 0x0, 0x74330, 0xbac7, 0x0, 0x36683e}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="b9127df5f77a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @broadcast, @remote, @remote, @local, @broadcast]}) r4 = creat(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x42) write$cgroup_devices(r4, &(0x7f0000000200)={'b', ' *:* ', 'w\x00'}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x480, 0x3f4, 0x2, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x28, [0x0, 0x2, 0xe, 0xb36e, 0x5, 0x9, 0x1, 0x401, 0xff, 0x4, 0x5f5c, 0x7, 0x0, 0x43, 0x1, 0x0, 0x40, 0x8, 0x4, 0x63d, 0xcb21, 0x2, 0x8, 0xff, 0x6, 0x9, 0x6, 0x8, 0x3, 0x80000000, 0x2, 0x7, 0x5, 0xcf8, 0x9, 0x0, 0x6, 0xfffff1c5, 0x0, 0x100, 0x1d8, 0xfffffffd, 0xfffffff9, 0x2, 0x8ff, 0x6, 0x6, 0x0, 0xff, 0xbc, 0x81, 0x0, 0xc1, 0x616, 0x8, 0xd, 0x6, 0x0, 0x39, 0xfffffffb, 0x7952, 0x6, 0x9, 0x4], [0xffffef9b, 0x7, 0x9, 0xfffffff7, 0x8, 0x2, 0x6, 0xff, 0x103717c5, 0x0, 0x5, 0x10000, 0x3, 0x2, 0x0, 0xffffffff, 0x8001, 0x4, 0x2, 0x8, 0x1ff, 0xfffffffc, 0x4be, 0x9, 0x9, 0x2, 0x7f, 0x5, 0x6, 0x80000000, 0x4, 0x4, 0xce, 0x7ff, 0x5, 0x0, 0xf9, 0x0, 0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x2, 0xfffffffc, 0x341, 0x8001, 0xfffffffd, 0x7fff, 0x2, 0x10002, 0xfff, 0xfff, 0x7, 0x3e, 0x5, 0x3, 0x5, 0x3, 0x5, 0x5, 0x1, 0x3], [0x6, 0x3, 0x6, 0x9, 0x4, 0x1, 0x1, 0xffff, 0x2, 0x2, 0x7, 0x5, 0x0, 0x1, 0x8, 0x21ad, 0x7, 0x7f, 0xfffffffd, 0x1, 0x9, 0x80, 0x1000, 0xff, 0x6, 0xffffffc0, 0x2, 0x7, 0x5, 0x9, 0xfff, 0x9, 0x3, 0x7f, 0x8, 0xfffffc01, 0x8, 0x3, 0xc2d9, 0xfff, 0x7, 0x8, 0xb, 0x5, 0x8, 0x101, 0x800, 0x5, 0x4, 0x3, 0x2, 0x7d, 0x1, 0x8, 0x5b6, 0x9, 0x8, 0x6, 0x7fff, 0x2, 0x2, 0x101, 0x80000000, 0x7], [0x5, 0x5, 0x7, 0x18c, 0x34b, 0xb5, 0x2, 0x0, 0x9, 0x8, 0x8, 0x1, 0x1, 0x5, 0x3a, 0x5, 0xca, 0x7fffffff, 0x8, 0x7, 0xe0, 0x9, 0x80000000, 0x0, 0x5, 0x6, 0x480, 0x5, 0x5, 0x5, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x1, 0x2, 0x4, 0xfffffff8, 0xe, 0x2, 0x3, 0x2, 0x34, 0x8, 0xff, 0xc2e8, 0x1000, 0x4, 0xf3, 0x1, 0x6, 0x7, 0xffffff00, 0x5, 0x9, 0xffff, 0x6, 0x1ff, 0x8000, 0x0, 0xb, 0x3, 0x1], 0x60, ['rose0\x00', '\x00', '/dev/net/tun\x00', '$%\x00', '/dev/net/tun\x00', '+&@&#(#\\%\x00', '/d\xec\x13/iommu\x00\x89K6\xc48|G\x03;(\x84\xb2l\t\xe1\xcee\xddg\xc5\xc9\xed\x87\xcb\xf7\xcdj:\xd1.\xb9\x94\xd3d\xbc\xe5\xd9\xfc', '\x00']}, ["", "", "", "", "", "", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x5) 1m24.389183144s ago: executing program 4 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) mprotect(&(0x7f0000295000/0x1000)=nil, 0x1000, 0x0) setitimer(0x2, 0x0, &(0x7f0000000180)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r0}, 0x38) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x8880, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0x1, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x28}, 0x60) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="01400092c7edf3e0cdaa8e000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000140), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7ff, r5, 0x4}, 0x38) listen(r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 1m22.364027707s ago: executing program 4 (id=632): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$inet(0x2, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r9) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r10, 0x2b4ff1a3fb9eb2fb, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x8014) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r11, r11, 0x0, 0x6) bind$inet(r8, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r12, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 1m22.177645465s ago: executing program 4 (id=634): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x10000839, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x21, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') read$char_usb(r3, &(0x7f0000000080)=""/86, 0x56) 1m15.957434091s ago: executing program 0 (id=731): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x0, 0x208, 0xffffffff, 0x2f8, 0x2f8, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key=0xfffc}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x3d, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @port=0x4e20}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}, @gre_key=0x3, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') (async) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') (async) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0fcbeb03a62bed66fff589740f439feb0100180000000000000028000000280000000600000000000003000000000000080000000000000000"], 0x0, 0x46}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0fcbeb03a62bed66fff589740f439feb0100180000000000000028000000280000000600000000000003000000000000080000000000000000"], 0x0, 0x46}, 0x20) 1m15.765919302s ago: executing program 0 (id=733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0xc46, 0x2, 0x1}, {0x70bd, 0x7, 0xa3, 0x8}, {0x8, 0xe, 0x8, 0x9}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000280)={0x20, r2, 0x1, 0x0, &(0x7f0000000040)=[{}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000002180)) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = signalfd(r0, &(0x7f00000000c0)={[0x1]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0xc46, 0x2, 0x1}, {0x70bd, 0x7, 0xa3, 0x8}, {0x8, 0xe, 0x8, 0x9}]}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000280)={0x20, r2, 0x1, 0x0, &(0x7f0000000040)=[{}]}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) (async) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000002180)) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) (async) fsopen(0x0, 0x1) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) signalfd(r0, &(0x7f00000000c0)={[0x1]}, 0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)) (async) 1m15.584895343s ago: executing program 0 (id=735): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x1000000}, 0x0, [0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffd, 0xfffffffffffefffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7, 0xfffffffe, 0x0, 0x40, 0x0, 0x4, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x2, 0x0, 0x3, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x8, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x100000000008, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffff8, 0x1, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x5a76d9df, 0xfffffffffffffffd, 0x4, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffffd, 0xde4, 0x5, 0x0, 0x100000000]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x6d0082, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0xfffffffffffffffd, 0x10000, 0x8, 0x1, {0x1}}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x507e03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x204c028}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)=""/152, 0x98}], 0x2) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000004500)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2) (async) read$FUSE(r5, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) (async) r9 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x136) finit_module(r9, 0x0, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) (async) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x78, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x1, 0x0, 0x0, r5}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000340)) 1m15.509811191s ago: executing program 0 (id=737): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000002c0)={0x1, 0x2, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85d", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf2539", @ANYRES32, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f00000006c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/8, 0x8, 0x65de, 0x0, 0x1, 0x10, 0x2}}, 0x11c) readv(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) 1m15.259501494s ago: executing program 0 (id=738): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="3666450f6fe388442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x4e}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="3666450f6fe388442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x4e}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x2c) write(r3, &(0x7f0000000600)='100', 0x3) (async) write(r3, &(0x7f0000000600)='100', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2000000, 0x0, 0x81, 0xffffffff, 0x2}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2000000, 0x0, 0x81, 0xffffffff, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r6, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r6, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x2, 0x0) (async) ptrace$setregs(0xd, r7, 0x2, 0x0) ptrace$cont(0x21, r7, 0x80000001, 0x4) sendmsg$nl_xfrm(r5, 0x0, 0x0) (async) sendmsg$nl_xfrm(r5, 0x0, 0x0) 1m15.027320931s ago: executing program 0 (id=739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0xafd, 0x0, 0x3fc, 0x400000, 0x3e, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x9, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) close(0xffffffffffffffff) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m6.925460471s ago: executing program 33 (id=634): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x10000839, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x21, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') read$char_usb(r3, &(0x7f0000000080)=""/86, 0x56) 46.068217726s ago: executing program 34 (id=739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0xafd, 0x0, 0x3fc, 0x400000, 0x3e, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x9, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) close(0xffffffffffffffff) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3.418084941s ago: executing program 3 (id=1379): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) fanotify_mark(r0, 0x10, 0x1028, r1, &(0x7f0000000080)='./file0\x00') 3.391036867s ago: executing program 3 (id=1380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@unlock_all, 0xb) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x7b0825297ba7490d, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x4000, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r2}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="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", 0x132}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r4, &(0x7f0000000940)=[{&(0x7f0000000300)="398b0101a2cd81e5dd4d882b6f8ceaaf58cf3c6a1a", 0x15}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f99977c186c32df773c81e81f1543adb", 0x69}, {&(0x7f0000000840)="37f00163ee64590eddc69225a76b0c705b43d255bb682c28fc62b9d27da33e7dd1c9f3f87d729aca519c643a0c26e00455b5456afb57a36b83100e28affe312181753618c81414e3782b17457f6cca46a487c93f", 0x54}], 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r2, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r2, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb}) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x200088d8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r1}, 0x18) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x6, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 2.908754733s ago: executing program 2 (id=1387): getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = landlock_create_ruleset(&(0x7f0000000580)={0xc0d8, 0x1, 0x3}, 0x30, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) landlock_restrict_self(r2, 0xb) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x5ae2, 0xd78d, 0x5, 0x0, 0x200, 0x1000, 0x1000, r5, r6, 0x0, 0x20000002}}}, 0x78) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xf, 0x80000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f00000001c0)=0x80) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r7, 0x40044103, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x2953249a) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8100001}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6bdf75113b838a07b6c97538fe4a33d56612c86035be1b805810006c7ddb64e47b8846500ebc2e75e34094980c95c98d2a25e243ea006f7b945e3978", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x24040040) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x3001000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dffbfd, {0x0, 0x0, 0x0, 0x0, 0x6314a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_PROP_LIST={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 2.206850449s ago: executing program 3 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0xea}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x13, 0x3f, [@broadcast, @empty, @empty, @loopback]}, @cipso={0x86, 0x35, 0x3, [{0x0, 0xe, "e29cad28b9140f6eb1c2dbc0"}, {0x1, 0xe, "ec35b148ea6602368f144fcf"}, {0x2, 0x6, "8f728d09"}, {0x2, 0xd, "7f74979211369dbab1c98e"}]}, @end, @rr={0x7, 0x17, 0xb, [@empty, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @private=0xa010102, @remote]}, @noop]}}}], 0x78}}], 0x2, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0xb, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x2, r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x45, 0x0, &(0x7f0000cab000)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100050000000000000d489377e6ecb417fcd05800000000000007", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000000000"], 0x34}}, 0x0) 1.947401435s ago: executing program 2 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) close(0x3) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xa8, 0x3a, '#:', 0x3a, '\r\x90\xc5Y:Lp\xc3\x8a\x83p\x97(\f-\x95(\xa3\x112\xb5\t\xa1\xc0CR\x87{w\xaa\x02D\xd7\xcb\xb45L', 0x3a, './file0'}, 0x4e) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xffe, 0x0, 0xfffffffffffffffe}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4008840) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 1.784332321s ago: executing program 2 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4], 0xbc}}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000040)=0xffffffff) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x62666fe4d74687b2, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.668915356s ago: executing program 2 (id=1405): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x14014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0x0) getdents(r5, &(0x7f00000000c0)=""/124, 0x7c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b26e5f00d0b400c3e1a4af2808ac"]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r10, &(0x7f00000063c0)=""/1024, 0x400) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000001c0)={0xffffffffffffff01, 0x1}) syz_fuse_handle_req(r6, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="300000000000007db6f6590a17d0ef0000000000232c2c2d0000000000000000000000000000000000000000000000009381e8a05be2d8a5167c9dc2a458cfc5904c52ddc2a558d546db4c256ea643368cebb1a70ffbc5e88ca5c88023ff5e4357095b1518a586cc49e070be35e849b16b2c1aa108deb6592553080f409247ffcd47d3f449863ccddfd37d3685acb35c2b4d107a24"], 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) 800.150484ms ago: executing program 5 (id=1411): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0xf76b, 0x1000, 0xfffffffd, 0x2, 0x0, r5}) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f0000001780), 0x1) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async, rerun: 32) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (rerun: 32) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 748.437655ms ago: executing program 5 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) (async, rerun: 64) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x20000) (rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) setgroups(0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async, rerun: 32) getgroups(0x1, &(0x7f0000000280)=[0xee00]) (rerun: 32) setregid(r5, r5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, 0x0}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TUNSETLINK(r7, 0x400454cd, 0x5) (async) read$midi(r2, 0x0, 0x3b) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) (async) read$midi(r2, &(0x7f0000000240)=""/38, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000100000029bd7002067e8416a8356341eedc6825c10d724250db680d3ac9a7f62e9d5afc8594f436c0a4b33d2ac8b176dfdbb6181d5e329a93cafddae9fcd1532d19109cc0cbde179739b5a695754ab907d31e2d03e9c658aaa0c97457b23a48cbf8a9ba646fcab262e1ba938497fe71402e78312b819c3ce166c32e2ad1f4ad5377555d91f15cfe346ccc970a625e02940396936e8ac8f24dfcee2ce825148668e6a71d830f4063"], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 747.366555ms ago: executing program 6 (id=1413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) 670.148071ms ago: executing program 2 (id=1414): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000001c0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f00", 0x17) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0xfff, 0x40402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 669.85519ms ago: executing program 6 (id=1415): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory2/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='offline', 0x7) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000500)="7e447559d1"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000640)={[&(0x7f00000004c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80`\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf\x00@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 550.151364ms ago: executing program 5 (id=1416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000780)=0x5, 0x4) getdents(r1, &(0x7f0000000080)=""/72, 0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 541.386648ms ago: executing program 6 (id=1417): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xed5644ccda840ced, 0x5, 0x401) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 448.994035ms ago: executing program 5 (id=1418): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x28, 0x1, 0x70bd29, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="dadf05be03407c83e681a2476b34b7f9a2b58414780a9d1036f2d1ec29da650357690e7ac87fe193f7bd5e4bb08643661c66c3de287ca7fc534b8744a15eb97f8cfdda7c0d25d0dbdc10fb9cf04827e93eda3f782a42845e386b897efc3e138309e4672824", 0x65}], 0x1}, 0x40014) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 448.241101ms ago: executing program 6 (id=1419): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='openpromfs\x00', 0x0, 0x0) clock_gettime(0xf99cd02a85684025, 0x0) r0 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)={0x20000, 0x104, 0x28}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='/dev/iommu\x00', &(0x7f00000001c0)='./debug\x00', r1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) 329.437371ms ago: executing program 5 (id=1420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 259.697145ms ago: executing program 6 (id=1421): mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0bf0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e6"], 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x100, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 259.238318ms ago: executing program 5 (id=1422): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1cb982, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x202, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x10}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) sendfile(r1, r1, 0x0, 0x2000fb) 11.775043ms ago: executing program 3 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x32, 0x8210, 0x5, 0x2, 0x5775d27c, 0x6800000, 0xba5, r3}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000800000000000000fedbdf2508003d000500000008003d0002000000080001000000000008000100000000000800030002000000080003000000000008003d0005000000"], 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x4040040) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) read$rfkill(r6, &(0x7f0000000240), 0x16) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000b00)={&(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0), 0x9, r7}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x7c) fchdir(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r10}, 0x18) 342.616µs ago: executing program 2 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0xa, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x4100}], 0x1, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000024c0)={0x0, 0x99, "b777a10c5fe0c95a7230d5aee5f24424b1d2693c39772683650ee10d041b005990c16d63444e1aca339c1e68cf6099f478311c513e33bd924fb48f5d5e3751978cf3f04f2c5bd9c8f379fd55395d90012a5836577e108e8f14c0a12e421deee747efa3b39a575b6463443e96bba9380e5a934fb530c363e7c4f31a6206b11730b7511d6b22205231fcfd77af66960625c60638e692a70adee3"}, 0xfffffffffffffffd) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4b}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xda0, 0x0, 0x8}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r6, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.usb0/c_chmask\x00', 0x40001, 0x0) write(r7, &(0x7f0000000800), 0x0) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r8, &(0x7f0000000a00)='1\x00', 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 0s ago: executing program 6 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726fa20a3e58fd715bdf8a99acc7e99f0ad66f746d7e64653d303030", @ANYRESDEC, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r0 = syz_open_dev$video(&(0x7f0000000080), 0x10000007, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0201, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x5) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r4, &(0x7f0000002b00)=[{&(0x7f0000000240)='5', 0x1}, {&(0x7f0000000280)="9153ed", 0x3}], 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) syz_usbip_server_init(0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf7f0cbfd78128240, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffefe, 0x4, 0x9, 0xffffffffffffffff, 0x6a3f7d58, 0x9, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffc5e8ae79, 0xfffffbfffffffffc, 0x6, 0x5, 0x74, 0x8000000000000001], 0x200000, 0x13d351}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x62) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setns(0xc9, 0x0) kernel console output (not intermixed with test programs): 598 [ 101.161993][ T8047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.600'. [ 101.165555][ T8047] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.242374][ T42] audit: type=1400 audit(1787688708.491:4820): avc: denied { connect } for pid=8050 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.298591][ T8055] lo speed is unknown, defaulting to 1000 [ 101.305817][ T8052] xt_hashlimit: size too large, truncated to 1048576 [ 101.345288][ T8057] mmap: syz.0.602 (8057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.351334][ T42] audit: type=1400 audit(1787688708.601:4821): avc: denied { map } for pid=8054 comm="syz.0.602" path="socket:[24351]" dev="sockfs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 101.359065][ T42] audit: type=1400 audit(1787688708.601:4822): avc: denied { accept } for pid=8054 comm="syz.0.602" path="socket:[24351]" dev="sockfs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 101.385493][ T8059] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 101.478200][ T8057] Process accounting resumed [ 101.594298][ T8071] afs: Unknown parameter 'dynadv0' [ 101.599667][ T8067] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 101.618256][ T42] audit: type=1400 audit(1787688708.861:4823): avc: denied { write } for pid=8072 comm="syz.0.608" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.619791][ T8067] MINIX-fs: blocksize too small for device [ 101.626015][ T42] audit: type=1400 audit(1787688708.861:4824): avc: denied { open } for pid=8072 comm="syz.0.608" path="/161/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.639047][ T1359] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 101.640600][ T5728] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.646377][ T1359] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 101.677351][ T8078] comedi comedi1: comedi_config --init_data is deprecated [ 101.684949][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 101.722884][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 101.744499][ T8084] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 101.748678][ T8084] overlayfs: missing 'lowerdir' [ 101.791840][ T42] audit: type=1400 audit(1787688709.041:4825): avc: denied { create } for pid=8086 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.823946][ T8087] syzkaller1: entered promiscuous mode [ 101.825715][ T8087] syzkaller1: entered allmulticast mode [ 101.828947][ T42] audit: type=1400 audit(1787688709.071:4826): avc: denied { write } for pid=8086 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.882385][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.886593][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.892860][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.896684][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.900439][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.904348][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.908103][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.914166][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.918701][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.924578][ T8089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8089 comm=syz.3.613 [ 101.951322][ T8092] syz.4.614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.006983][ T42] audit: type=1400 audit(1787688709.251:4827): avc: denied { bind } for pid=8091 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.247283][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 102.280052][ T8114] 9p: Bad value for 'version' [ 102.328760][ T8116] lo speed is unknown, defaulting to 1000 [ 102.747695][ T8126] loop4: detected capacity change from 0 to 2640 [ 102.754842][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.757999][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.761328][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.764554][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.767619][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.771119][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.774248][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.777291][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.782012][ T8126] ldm_validate_partition_table(): Disk read failed. [ 102.784572][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.787588][ T8126] Buffer I/O error on dev loop4, logical block 0, async page read [ 102.790772][ T8126] Dev loop4: unable to read RDB block 0 [ 102.793120][ T8126] loop4: unable to read partition table [ 102.795521][ T8126] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 102.981703][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 102.984490][ T8129] netlink: 'syz.3.622': attribute type 30 has an invalid length. [ 102.987648][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 102.993799][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 102.997345][ T8129] netlink: 'syz.3.622': attribute type 30 has an invalid length. [ 103.086694][ T8134] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 103.089522][ T8135] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 103.106757][ T8134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.246847][ T8141] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 103.870066][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.870755][ T1359] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 103.876428][ T1359] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 103.942042][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.946429][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.010535][ T8155] binfmt_misc: register: failed to install interpreter ./file1 [ 104.052034][ T8158] lo speed is unknown, defaulting to 1000 [ 104.091949][ T8160] syzkaller0: entered promiscuous mode [ 104.093889][ T8160] syzkaller0: entered allmulticast mode [ 104.131364][ T8158] nbd: must specify a device to reconfigure [ 104.149007][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 104.149026][ T42] audit: type=1400 audit(1787688711.391:4832): avc: denied { setopt } for pid=8163 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.174632][ T42] audit: type=1400 audit(1787688711.401:4833): avc: denied { write } for pid=8163 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.639773][ T8181] tmpfs: Bad value for 'mpol' [ 104.709801][ T8186] XFS (nbd2): SB validate failed with error -5. [ 104.739250][ T42] audit: type=1400 audit(1787688711.981:4834): avc: denied { ioctl } for pid=8192 comm="syz.0.641" path="socket:[25627]" dev="sockfs" ino=25627 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.764293][ T42] audit: type=1400 audit(1787688712.001:4835): avc: denied { read } for pid=8192 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.966516][ T8210] veth0_vlan: entered allmulticast mode [ 105.077572][ T42] audit: type=1400 audit(1787688712.321:4836): avc: denied { create } for pid=8217 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.083479][ T8218] binder: 8217:8218 ioctl c018620c 200000000040 returned -22 [ 105.087792][ T42] audit: type=1400 audit(1787688712.321:4837): avc: denied { read } for pid=8217 comm="syz.2.649" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 105.105749][ T42] audit: type=1400 audit(1787688712.321:4838): avc: denied { open } for pid=8217 comm="syz.2.649" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 105.140326][ T42] audit: type=1400 audit(1787688712.391:4839): avc: denied { mount } for pid=8223 comm="syz.2.652" name="/" dev="rpc_pipefs" ino=25746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 105.182962][ T8220] bridge0: port 3(syz_tun) entered blocking state [ 105.185526][ T8220] bridge0: port 3(syz_tun) entered disabled state [ 105.187596][ T8220] syz_tun: entered allmulticast mode [ 105.190357][ T8220] syz_tun: entered promiscuous mode [ 105.192796][ T8220] bridge0: port 3(syz_tun) entered blocking state [ 105.195218][ T8220] bridge0: port 3(syz_tun) entered forwarding state [ 105.254622][ T42] audit: type=1400 audit(1787688712.501:4840): avc: denied { mount } for pid=8235 comm="syz.0.654" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 105.279941][ T42] audit: type=1400 audit(1787688712.501:4841): avc: denied { search } for pid=8235 comm="syz.0.654" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 105.877010][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.226517][ T8278] __nla_validate_parse: 3 callbacks suppressed [ 106.226529][ T8278] netlink: 92 bytes leftover after parsing attributes in process `syz.0.667'. [ 106.297464][ T8285] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.314378][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.317729][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.349982][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.480137][ T7110] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.525339][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.531381][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.543442][ T8300] lo speed is unknown, defaulting to 1000 [ 106.651352][ T7110] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 106.660627][ T7110] usb 5-1: Dual-Role OTG device on HNP port [ 106.662838][ T7110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.672554][ T7110] gspca_main: spca501-2.14.0 probing 0000:0000 [ 106.675369][ T7110] gspca_spca501: reg write: error -32 [ 106.677061][ T7110] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 106.679106][ T7110] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 106.932811][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.677'. [ 107.308622][ T8330] /dev/sg0: Can't lookup blockdev [ 107.360585][ T8333] 9p: Unknown access argument 18446744073709551615: -34 [ 107.722714][ T8357] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 107.722714][ T8357] program syz.0.688 not setting count and/or reply_len properly [ 107.830989][ T8366] affs: No valid root block on device nullb0 [ 107.835020][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 107.846763][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 107.887104][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 107.905396][ T8380] usb usb9: usbfs: process 8380 (syz.2.696) did not claim interface 0 before use [ 107.910450][ T8382] usb usb9: usbfs: process 8382 (syz.2.696) did not claim interface 0 before use [ 107.939046][ T8384] netlink: 64 bytes leftover after parsing attributes in process `syz.3.695'. [ 107.959237][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 107.999827][ T8391] echo interval is out of bounds [ 107.999827][ T8391] [ 108.004203][ T8391] CIFS: VFS: echo interval is out of bounds [ 108.008012][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.697'. [ 108.008158][ T8391] tmpfs: Unknown parameter '0000000000000000000000018446744073709551615' [ 108.014633][ T8394] xt_hashlimit: size too large, truncated to 1048576 [ 108.082130][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.092433][ T8395] bridge_slave_0 (unregistering): left allmulticast mode [ 108.095452][ T8395] bridge_slave_0 (unregistering): left promiscuous mode [ 108.100869][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.125684][ T8399] XFS (nullb0): Invalid superblock magic number [ 108.217236][ T8406] lo speed is unknown, defaulting to 1000 [ 108.814080][ T8424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.825711][ T8424] program syz.2.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.829211][ T8424] ata1.00: non-matching transfer count (50332928/0) [ 108.834218][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.838137][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.933381][ T8426] netlink: 'syz.0.709': attribute type 11 has an invalid length. [ 109.161010][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 109.161023][ T42] audit: type=1400 audit(1787688716.411:4861): avc: denied { map } for pid=8430 comm="syz.0.710" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.170477][ T42] audit: type=1400 audit(1787688716.411:4862): avc: denied { execute } for pid=8430 comm="syz.0.710" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.187091][ T8432] geneve1: entered allmulticast mode [ 109.509787][ T42] audit: type=1400 audit(1787688716.751:4863): avc: denied { mount } for pid=8441 comm="syz.2.714" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.523410][ T42] audit: type=1400 audit(1787688716.771:4864): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 109.655899][ T8451] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.665406][ T8451] CIFS: Attempting to mount //127.0.0.1/share [ 109.728394][ T42] audit: type=1400 audit(1787688716.971:4865): avc: denied { bind } for pid=8453 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 109.837355][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 110.081550][ T8481] selinux_netlink_send: 2554 callbacks suppressed [ 110.081568][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8481 comm=syz.0.727 [ 110.401273][ T8495] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 110.429405][ T42] audit: type=1400 audit(1787688717.671:4866): avc: denied { write } for pid=8494 comm="syz.0.731" name="functions" dev="configfs" ino=11929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.487863][ T42] audit: type=1400 audit(1787688717.731:4867): avc: denied { write } for pid=8494 comm="syz.0.731" name="header" dev="configfs" ino=25196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.499700][ T42] audit: type=1400 audit(1787688717.741:4868): avc: denied { write } for pid=8494 comm="syz.0.731" name="ss" dev="configfs" ino=25205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.507223][ T42] audit: type=1400 audit(1787688717.741:4869): avc: denied { write } for pid=8494 comm="syz.0.731" name="ss" dev="configfs" ino=25205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.511059][ T8451] CIFS: VFS: Error connecting to socket. Aborting operation. [ 110.514195][ T42] audit: type=1400 audit(1787688717.741:4870): avc: denied { write } for pid=8494 comm="syz.0.731" name="ss" dev="configfs" ino=25205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.539355][ T8451] CIFS: VFS: cifs_mount failed w/return code = -4 [ 110.591671][ T8500] jffs2: notice: (8500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 110.606030][ T8502] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.974132][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 110.981725][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 110.991342][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 110.997587][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 111.010431][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 111.012845][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 111.015265][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 111.017622][ T7110] hid-generic 65DE:0000:0001.0007: unknown main item tag 0x0 [ 111.022110][ T7110] hid-generic 65DE:0000:0001.0007: hidraw1: HID v0.10 Device [syz1] on syz1 [ 111.141174][ T8522] fido_id[8522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.468999][ T8531] ima: policy update completed [ 111.578065][ T8536] netlink: 'syz.2.742': attribute type 3 has an invalid length. [ 111.581382][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 111.608567][ T1161] Bluetooth: hci4: Frame reassembly failed (-84) [ 111.623878][ T1161] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 111.931992][ T5814] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.082320][ T5814] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 112.088221][ T5814] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.093203][ T5814] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.096176][ T5814] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.101867][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.104408][ T5814] usb 8-1: Product: syz [ 112.105706][ T5814] usb 8-1: Manufacturer: syz [ 112.107145][ T5814] usb 8-1: SerialNumber: syz [ 112.334849][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.743'. [ 112.340352][ T1359] usb 8-1: USB disconnect, device number 9 [ 112.909073][ T8541] fuse: Bad value for 'fd' [ 113.037790][ T8547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8547 comm=syz.3.747 [ 113.256211][ T8552] netlink: 'syz.3.749': attribute type 23 has an invalid length. [ 113.630793][ T5728] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.633276][ T5731] Bluetooth: hci4: command 0x1003 tx timeout [ 113.717547][ T8559] program syz.2.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.904950][ T8573] input: syz0 as /devices/virtual/input/input16 [ 113.952773][ T8574] loop5: detected capacity change from 0 to 7 [ 113.961459][ T8574] loop5: p1 p3 p4 [ 113.963084][ T8574] loop5: partition table partially beyond EOD, truncated [ 113.971105][ T8574] loop5: p1 size 128 extends beyond EOD, truncated [ 113.983297][ T8574] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 114.257853][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 114.257869][ T42] audit: type=1400 audit(1787688721.501:4888): avc: denied { mounton } for pid=8583 comm="syz.2.761" path="/222/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.475242][ T42] audit: type=1400 audit(1787688721.721:4889): avc: denied { mounton } for pid=8592 comm="syz.2.764" path="/225/file0" dev="9p" ino=78395867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.475325][ T8594] 9pnet_virtio: no channels available for device syz [ 114.485704][ T8594] 9pnet_virtio: no channels available for device syz [ 114.488426][ T8594] 9pnet_virtio: no channels available for device syz [ 114.491287][ T8594] 9pnet_virtio: no channels available for device syz [ 114.493571][ T8594] 9pnet_virtio: no channels available for device syz [ 114.496280][ T8594] 9pnet_virtio: no channels available for device syz [ 114.498627][ T8594] 9pnet_virtio: no channels available for device syz [ 114.502841][ T8594] 9pnet_virtio: no channels available for device syz [ 114.505483][ T8594] 9pnet_virtio: no channels available for device syz [ 114.507964][ T8594] 9pnet_virtio: no channels available for device syz [ 114.510372][ T8594] 9pnet_virtio: no channels available for device syz [ 114.512706][ T8594] 9pnet_virtio: no channels available for device syz [ 114.514228][ T42] audit: type=1400 audit(1787688721.761:4890): avc: denied { write } for pid=8592 comm="syz.2.764" name="/" dev="9p" ino=78395867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.534026][ T42] audit: type=1400 audit(1787688721.781:4891): avc: denied { mounton } for pid=8592 comm="syz.2.764" path="/225/file0/file0" dev="9p" ino=78396029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 114.534111][ T8594] 9pnet_virtio: no channels available for device syz [ 114.921905][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.767'. [ 115.176392][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 115.183301][ T8616] openvswitch: netlink: Key type 12806 is out of range max 32 [ 116.952853][ T42] audit: type=1400 audit(1787688724.201:4892): avc: denied { read } for pid=8624 comm="syz.3.772" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.967743][ T42] audit: type=1400 audit(1787688724.211:4893): avc: denied { open } for pid=8624 comm="syz.3.772" path="/dev/usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.977012][ T42] audit: type=1400 audit(1787688724.211:4894): avc: denied { ioctl } for pid=8624 comm="syz.3.772" path="/dev/usbmon3" dev="devtmpfs" ino=745 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.223602][ T42] audit: type=1400 audit(1787688724.471:4895): avc: denied { read } for pid=8628 comm="syz.3.773" name="file0" dev="fuse" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.235626][ T42] audit: type=1400 audit(1787688724.471:4896): avc: denied { open } for pid=8628 comm="syz.3.773" path="/204/file0/file0" dev="fuse" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.265362][ T8631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.271943][ T8631] block device autoloading is deprecated and will be removed. [ 117.894781][ T8644] smpboot: CPU 1 is now offline [ 118.305106][ T8654] jffs2: notice: (8654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 118.361356][ T8662] netlink: 244 bytes leftover after parsing attributes in process `syz.3.782'. [ 118.385839][ T42] audit: type=1400 audit(1787688725.631:4897): avc: denied { write } for pid=8653 comm="syz.2.780" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 118.724986][ T8674] bond3 (unregistering): Released all slaves [ 119.182187][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.188700][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.505160][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 119.505172][ T42] audit: type=1400 audit(1787688726.751:4900): avc: denied { setattr } for pid=8690 comm="syz.3.793" name="video6" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 119.661327][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.672874][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.678280][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.687218][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.693227][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.730861][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.734564][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.739295][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.745681][ T5731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.749220][ T5731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.813953][ T6916] vivid-000: reconnect [ 119.868770][ T5798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.958390][ T8695] lo speed is unknown, defaulting to 1000 [ 120.002277][ T5798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.087485][ T5798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.200014][ T5798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.244313][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.246647][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.250581][ T8695] bridge_slave_0: entered allmulticast mode [ 120.253529][ T8695] bridge_slave_0: entered promiscuous mode [ 120.257350][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.260019][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.262982][ T8695] bridge_slave_1: entered allmulticast mode [ 120.266253][ T8695] bridge_slave_1: entered promiscuous mode [ 120.296759][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.301645][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.348568][ T8695] team0: Port device team_slave_0 added [ 120.354002][ T8695] team0: Port device team_slave_1 added [ 120.416035][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.418986][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.431642][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.438008][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.441792][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.451249][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.493284][ T5798] bridge_slave_1: left allmulticast mode [ 120.495169][ T5798] bridge_slave_1: left promiscuous mode [ 120.497679][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.502504][ T5798] bridge_slave_0: left allmulticast mode [ 120.504600][ T5798] bridge_slave_0: left promiscuous mode [ 120.506609][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.638831][ T5798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.646186][ T5798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.649994][ T5798] bond0 (unregistering): Released all slaves [ 120.678947][ T8695] hsr_slave_0: entered promiscuous mode [ 120.681997][ T8695] hsr_slave_1: entered promiscuous mode [ 120.684572][ T8695] debugfs: 'hsr0' already exists in 'hsr' [ 120.686612][ T8695] Cannot create hsr debugfs directory [ 120.769797][ T42] audit: type=1400 audit(1787688728.011:4901): avc: denied { write } for pid=8717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.780253][ T5798] IPVS: stopping backup sync thread 6913 ... [ 120.814283][ T42] audit: type=1400 audit(1787688728.061:4902): avc: denied { write } for pid=8720 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.853606][ T5433] 8021q: adding VLAN 0 to HW filter on device eth6 [ 120.953164][ T42] audit: type=1400 audit(1787688728.191:4903): avc: denied { write } for pid=8723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.010564][ T42] audit: type=1400 audit(1787688728.251:4904): avc: denied { write } for pid=8726 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.018617][ T8695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.028349][ T8695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.032394][ T8695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.038170][ T8695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.041567][ T8695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.047738][ T8695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.059269][ T5798] hsr_slave_0: left promiscuous mode [ 121.063244][ T5798] hsr_slave_1: left promiscuous mode [ 121.066675][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.069784][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.073818][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.076158][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.082933][ T5798] veth1_macvtap: left promiscuous mode [ 121.084702][ T5798] veth0_macvtap: left promiscuous mode [ 121.086506][ T5798] veth1_vlan: left promiscuous mode [ 121.088270][ T5798] veth0_vlan: left promiscuous mode [ 121.277239][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 121.297008][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 121.437135][ T8695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.447930][ T8695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.456464][ T5433] 8021q: adding VLAN 0 to HW filter on device eth7 [ 121.583148][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.597015][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.621708][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.623182][ T42] audit: type=1400 audit(1787688728.861:4905): avc: denied { write } for pid=8735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.625321][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.641825][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 121.646245][ T5728] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.659571][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.662603][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.726342][ T42] audit: type=1400 audit(1787688728.971:4906): avc: denied { write } for pid=8738 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.793203][ T5728] Bluetooth: hci3: command tx timeout [ 121.823918][ T5433] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.936500][ T42] audit: type=1400 audit(1787688729.181:4907): avc: denied { write } for pid=8743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.036301][ T42] audit: type=1400 audit(1787688729.281:4908): avc: denied { write } for pid=8748 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.136301][ T5433] 8021q: adding VLAN 0 to HW filter on device eth9 [ 122.306956][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.356620][ T82] rpcbind: server 127.0.0.1 not responding, timed out [ 122.559455][ T8695] veth0_vlan: entered promiscuous mode [ 122.571712][ T8695] veth1_vlan: entered promiscuous mode [ 122.601334][ T8695] veth0_macvtap: entered promiscuous mode [ 122.609347][ T8695] veth1_macvtap: entered promiscuous mode [ 122.622914][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.638510][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.701058][ T5570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.710979][ T5570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.748702][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.752803][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.773992][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.776614][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.787383][ T42] audit: type=1400 audit(1787688730.031:4909): avc: denied { mounton } for pid=8695 comm="syz-executor" path="/syzkaller.3cNyBn/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 122.794622][ T5798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.797275][ T5798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.882347][ T8777] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 122.942110][ T8769] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 123.100883][ T8782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 123.106430][ T8786] jffs2: notice: (8786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 123.115688][ T8782] overlayfs: failed to set xattr on upper [ 123.125044][ T8782] overlayfs: ...falling back to redirect_dir=nofollow. [ 123.127971][ T8782] overlayfs: ...falling back to index=off. [ 123.131803][ T8782] overlayfs: ...falling back to uuid=null. [ 123.870528][ T5728] Bluetooth: hci3: command tx timeout [ 124.579829][ T8831] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 124.603996][ T8831] SELinux: failed to load policy [ 124.609462][ T8831] netlink: 17 bytes leftover after parsing attributes in process `syz.2.810'. [ 124.751657][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.776279][ T8834] gretap1: entered promiscuous mode [ 124.786794][ T8834] batman_adv: batadv0: Adding interface: gretap1 [ 124.796460][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.800481][ T8834] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.822927][ T8834] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 124.926429][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 124.926446][ T42] audit: type=1400 audit(1787688732.171:4914): avc: denied { mount } for pid=8842 comm="syz.2.815" name="/" dev="autofs" ino=30871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.990335][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 125.014506][ T42] audit: type=1400 audit(1787688732.261:4915): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 125.142351][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.145882][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.151095][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.152314][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.155906][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.164798][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.181918][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.186043][ T10] usb 10-1: Product: syz [ 125.187420][ T10] usb 10-1: Manufacturer: syz [ 125.200114][ T10] usb 10-1: SerialNumber: syz [ 125.498193][ T42] audit: type=1400 audit(1787688732.741:4916): avc: denied { bind } for pid=8871 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.944452][ T10] e1000 0000:00:06.0 eth0: Reset adapter [ 125.961984][ T5728] Bluetooth: hci3: command tx timeout [ 125.999139][ T42] audit: type=1400 audit(1787688733.241:4917): avc: denied { write } for pid=8887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.076735][ T42] audit: type=1400 audit(1787688733.321:4918): avc: denied { write } for pid=8892 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.125441][ T8884] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 126.396831][ T42] audit: type=1400 audit(1787688733.641:4919): avc: denied { write } for pid=8902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.436499][ T42] audit: type=1400 audit(1787688733.681:4920): avc: denied { name_bind } for pid=8907 comm="syz.2.830" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.500270][ T42] audit: type=1400 audit(1787688733.741:4921): avc: denied { write } for pid=8909 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.540531][ T5735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.546394][ T5735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.551022][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 126.552978][ T5735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.567531][ T5735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.573982][ T5735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.649663][ T42] audit: type=1400 audit(1787688733.891:4922): avc: denied { write } for pid=8915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.736824][ T42] audit: type=1400 audit(1787688733.981:4923): avc: denied { write } for pid=8924 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.764077][ T8928] vlan2: entered allmulticast mode [ 126.765808][ T8928] bond0: entered allmulticast mode [ 126.767629][ T8928] bond_slave_0: entered allmulticast mode [ 126.769415][ T8928] bond_slave_1: entered allmulticast mode [ 126.979452][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.015936][ T8911] lo speed is unknown, defaulting to 1000 [ 127.111898][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.188941][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.265206][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.267641][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.269958][ T8911] bridge_slave_0: entered allmulticast mode [ 127.272706][ T8911] bridge_slave_0: entered promiscuous mode [ 127.297157][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.307193][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.310681][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.313827][ T8911] bridge_slave_1: entered allmulticast mode [ 127.317075][ T8911] bridge_slave_1: entered promiscuous mode [ 127.352080][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.358157][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.396148][ T8911] team0: Port device team_slave_0 added [ 127.401027][ T8911] team0: Port device team_slave_1 added [ 127.423413][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.425607][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.434737][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.439441][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.441719][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.449490][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.483204][ T10] usb 10-1: USB disconnect, device number 2 [ 127.553767][ T8911] hsr_slave_0: entered promiscuous mode [ 127.556071][ T8911] hsr_slave_1: entered promiscuous mode [ 127.558051][ T8911] debugfs: 'hsr0' already exists in 'hsr' [ 127.559776][ T8911] Cannot create hsr debugfs directory [ 127.624797][ T13] vlan2: left allmulticast mode [ 127.626384][ T13] geneve0: left allmulticast mode [ 127.627988][ T13] vlan2: left promiscuous mode [ 127.629553][ T13] geneve0: left promiscuous mode [ 127.631743][ T13] bridge0: port 3(vlan2) entered disabled state [ 127.635313][ T13] bridge_slave_1: left allmulticast mode [ 127.637101][ T13] bridge_slave_1: left promiscuous mode [ 127.638919][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.644654][ T13] bridge_slave_0: left allmulticast mode [ 127.646470][ T13] bridge_slave_0: left promiscuous mode [ 127.649960][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.669534][ T13] bond_slave_0: left promiscuous mode [ 127.671868][ T13] bond_slave_1: left promiscuous mode [ 127.710379][ T13] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 127.713562][ T13] ip6gre2 (unregistering): left promiscuous mode [ 127.726198][ T13] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 127.791542][ T13] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 127.803410][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.808400][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.812715][ T13] bond0 (unregistering): Released all slaves [ 127.819990][ T13] bond1 (unregistering): Released all slaves [ 127.827732][ T13] bond2 (unregistering): (slave bond3): Releasing backup interface [ 127.832788][ T13] bond2 (unregistering): Released all slaves [ 127.839521][ T13] bond3 (unregistering): Released all slaves [ 127.846532][ T13] bond4 (unregistering): Released all slaves [ 127.854760][ T13] bond5 (unregistering): Released all slaves [ 128.025969][ T13] tipc: Disabling bearer [ 128.035287][ T13] tipc: Left network mode [ 128.040203][ T5728] Bluetooth: hci3: command tx timeout [ 128.100485][ T8911] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.105675][ T8911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.108427][ T8911] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.113996][ T8911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.116903][ T8911] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.125492][ T8911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.129009][ T5433] 8021q: adding VLAN 0 to HW filter on device eth10 [ 128.131864][ T8911] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.143166][ T8911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.256171][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.279063][ T8911] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.286420][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.288722][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.297559][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.299928][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.337412][ T13] hsr_slave_0: left promiscuous mode [ 128.342875][ T13] hsr_slave_1: left promiscuous mode [ 128.345305][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.347624][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.351509][ T5771] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 128.351843][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.357387][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.371055][ T13] veth1_macvtap: left promiscuous mode [ 128.372894][ T13] veth0_macvtap: left promiscuous mode [ 128.374696][ T13] veth1_vlan: left promiscuous mode [ 128.376724][ T13] veth0_vlan: left promiscuous mode [ 128.578166][ T13] team0 (unregistering): Port device team_slave_1 removed [ 128.598739][ T13] team0 (unregistering): Port device team_slave_0 removed [ 128.670103][ T5728] Bluetooth: hci4: command tx timeout [ 128.728614][ T5433] 8021q: adding VLAN 0 to HW filter on device eth11 [ 128.764956][ T1161] smbdirect: ib_dev[syz0] removed [ 128.966961][ T13] IPVS: stop unused estimator thread 0... [ 129.018823][ T5433] 8021q: adding VLAN 0 to HW filter on device eth12 [ 129.040280][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.222233][ T8911] veth0_vlan: entered promiscuous mode [ 129.232703][ T5433] 8021q: adding VLAN 0 to HW filter on device eth13 [ 129.240670][ T8911] veth1_vlan: entered promiscuous mode [ 129.255574][ T8911] veth0_macvtap: entered promiscuous mode [ 129.260642][ T8911] veth1_macvtap: entered promiscuous mode [ 129.282259][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.294301][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.348435][ T5570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.361605][ T5570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.378550][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.382314][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.414599][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.419196][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.460020][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.463262][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.750053][ T5728] Bluetooth: hci4: command tx timeout [ 132.247479][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 132.247490][ T42] audit: type=1400 audit(1787688739.491:4942): avc: denied { write } for pid=9040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.325232][ T42] audit: type=1400 audit(1787688739.571:4943): avc: denied { write } for pid=9043 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.830347][ T5728] Bluetooth: hci4: command tx timeout [ 132.955500][ T42] audit: type=1400 audit(1787688740.201:4944): avc: denied { write } for pid=9046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.020096][ T42] audit: type=1400 audit(1787688740.271:4945): avc: denied { write } for pid=9049 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.121916][ T42] audit: type=1400 audit(1787688740.371:4946): avc: denied { write } for pid=9051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.196525][ T42] audit: type=1400 audit(1787688740.441:4947): avc: denied { write } for pid=9054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.233272][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.954050][ T42] audit: type=1400 audit(1787688741.201:4948): avc: denied { write } for pid=9057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.025649][ T42] audit: type=1400 audit(1787688741.271:4949): avc: denied { write } for pid=9060 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.125559][ T42] audit: type=1400 audit(1787688741.371:4950): avc: denied { write } for pid=9063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.184104][ T42] audit: type=1400 audit(1787688741.431:4951): avc: denied { write } for pid=9066 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.910245][ T5728] Bluetooth: hci4: command tx timeout [ 139.467598][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 139.467610][ T42] audit: type=1400 audit(1787688746.711:4954): avc: denied { write } for pid=9082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.541348][ T42] audit: type=1400 audit(1787688746.791:4955): avc: denied { write } for pid=9085 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.005380][ T42] audit: type=1400 audit(1787688747.251:4956): avc: denied { write } for pid=9088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.069452][ T42] audit: type=1400 audit(1787688747.311:4957): avc: denied { write } for pid=9091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.175852][ T42] audit: type=1400 audit(1787688747.421:4958): avc: denied { write } for pid=9094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.244898][ T42] audit: type=1400 audit(1787688747.491:4959): avc: denied { write } for pid=9097 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.361367][ T9108] overlay: Unknown parameter 'subj_role' [ 140.362348][ T42] audit: type=1400 audit(1787688747.611:4960): avc: denied { cmd } for pid=9102 comm="syz.5.836" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 140.386373][ T9103] ublk1: read batch cmd buffer failed [ 140.389003][ T42] audit: type=1400 audit(1787688747.631:4961): avc: denied { write } for pid=9104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.404525][ T9103] ublk1: read batch cmd buffer failed [ 140.462237][ T42] audit: type=1400 audit(1787688747.711:4962): avc: denied { write } for pid=9121 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.479076][ T1359] libceph: connect (1)[c::]:6789 error -101 [ 140.481244][ T1359] libceph: mon0 (1)[c::]:6789 connect error [ 140.578891][ T9137] netlink: 'syz.5.842': attribute type 2 has an invalid length. [ 140.611061][ T9143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13039 sclass=netlink_route_socket pid=9143 comm=syz.3.844 [ 140.619545][ T9143] tc_dump_action: action bad kind [ 140.690872][ T42] audit: type=1400 audit(1787688747.931:4963): avc: denied { write } for pid=9147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.752571][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 140.756813][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 140.851538][ T9157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 140.931457][ T9159] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 140.934907][ T9159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.010397][ T9162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'. [ 141.198385][ T9164] No source specified [ 141.260931][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 141.263810][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 141.273586][ T9120] ceph: No mds server is up or the cluster is laggy [ 141.544085][ T112] IPVS: starting estimator thread 0... [ 141.571068][ T9182] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 141.630198][ T9180] IPVS: using max 41 ests per chain, 98400 per kthread [ 141.763915][ T9196] xt_hashlimit: size too large, truncated to 1048576 [ 142.152503][ T9216] bond1: Removing last arp target with arp_interval on [ 142.790309][ T9239] overlayfs: failed to resolve './file1/file0': -2 [ 142.793367][ T9239] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20004 [ 142.921905][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 142.925596][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.874'. [ 143.204677][ T9262] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.211602][ T9262] block device autoloading is deprecated and will be removed. [ 143.221193][ T9273] netlink: 236 bytes leftover after parsing attributes in process `syz.2.881'. [ 143.462738][ T5570] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 144.117509][ T9277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.357799][ T9321] dlm: no locking on control device [ 144.468944][ T9315] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 144.471497][ T9315] UDF-fs: Scanning with blocksize 2048 failed [ 144.475780][ T9315] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 144.478872][ T9315] UDF-fs: Scanning with blocksize 4096 failed [ 144.569425][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 144.569440][ T42] audit: type=1400 audit(2000000003.089:4978): avc: denied { getopt } for pid=9331 comm="syz.6.896" lport=51415 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.656843][ T9337] /dev/nullb0: Can't open blockdev [ 144.737538][ T42] audit: type=1400 audit(2000000003.259:4979): avc: denied { setattr } for pid=9340 comm="syz.2.899" name="NETLINK" dev="sockfs" ino=33819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.744371][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.753358][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.923161][ T9351] netlink: 68 bytes leftover after parsing attributes in process `syz.6.901'. [ 144.933489][ T42] audit: type=1400 audit(2000000003.459:4980): avc: denied { getopt } for pid=9350 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.965397][ T9309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.002728][ T42] audit: type=1400 audit(2000000003.529:4981): avc: denied { bind } for pid=9356 comm="syz.6.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.018786][ T42] audit: type=1400 audit(2000000003.529:4982): avc: denied { listen } for pid=9356 comm="syz.6.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.035807][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.904'. [ 145.039077][ T9357] openvswitch: netlink: Missing key (keys=40, expected=80) [ 145.114404][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.127757][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.131006][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.133317][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.136173][ T42] audit: type=1400 audit(2000000003.659:4983): avc: denied { ioctl } for pid=9367 comm="syz.3.908" path="socket:[33242]" dev="sockfs" ino=33242 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.136248][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.148418][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.151617][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.154019][ T5870] hid-generic 65DE:0000:0001.0008: unknown main item tag 0x0 [ 145.163562][ T5870] hid-generic 65DE:0000:0001.0008: hidraw1: HID v0.10 Device [syz1] on syz1 [ 145.201823][ T9369] fido_id[9369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.357740][ T42] audit: type=1400 audit(2000000003.879:4984): avc: denied { setattr } for pid=9375 comm="syz.2.911" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 145.479979][ T5870] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 145.631044][ T5870] usb 11-1: New USB device found, idVendor=1e2d, idProduct=0055, bcdDevice=e4.1c [ 145.635343][ T5870] usb 11-1: config 9 has an invalid interface number: 171 but max is 3 [ 145.637815][ T5870] usb 11-1: config 9 has an invalid interface number: 221 but max is 3 [ 145.649965][ T5870] usb 11-1: config 9 has an invalid interface number: 78 but max is 3 [ 145.652886][ T5870] usb 11-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 145.655415][ T5870] usb 11-1: config 9 has an invalid interface number: 167 but max is 3 [ 145.657885][ T5870] usb 11-1: config 9 has no interface number 0 [ 145.669917][ T5870] usb 11-1: config 9 has no interface number 1 [ 145.673584][ T5870] usb 11-1: config 9 has no interface number 2 [ 145.675498][ T5870] usb 11-1: config 9 has no interface number 3 [ 145.677499][ T5870] usb 11-1: config 9 interface 171 altsetting 129 endpoint 0xE has invalid maxpacket 471, setting to 64 [ 145.690038][ T5840] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 145.695799][ T5870] usb 11-1: config 9 interface 171 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 145.699808][ T5870] usb 11-1: config 9 interface 171 altsetting 129 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 145.703392][ T5870] usb 11-1: config 9 interface 221 altsetting 16 endpoint 0x6 has invalid maxpacket 1104, setting to 64 [ 145.706630][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 145.709827][ T5870] usb 11-1: config 9 interface 221 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 145.713335][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 145.716963][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has a duplicate endpoint with address 0x6, skipping [ 145.726154][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 145.729431][ T5870] usb 11-1: config 9 interface 221 altsetting 16 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 145.730286][ T42] audit: type=1400 audit(2000000004.249:4985): avc: denied { watch } for pid=9385 comm="syz.2.914" path="/282/bus" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.732655][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 145.742535][ T42] audit: type=1400 audit(2000000004.249:4986): avc: denied { watch_sb } for pid=9385 comm="syz.2.914" path="/282/bus" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.745408][ T5870] usb 11-1: config 9 interface 221 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 145.760142][ T5870] usb 11-1: config 9 interface 221 altsetting 16 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 145.763505][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0xA, skipping [ 145.766812][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0x3, skipping [ 145.770308][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 145.773658][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 145.776847][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0xA, skipping [ 145.780800][ T5870] usb 11-1: config 9 interface 78 altsetting 84 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 145.784750][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has an invalid descriptor for endpoint zero, skipping [ 145.788264][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0x3, skipping [ 145.791695][ T5870] usb 11-1: config 9 interface 78 altsetting 84 has a duplicate endpoint with address 0x2, skipping [ 145.795216][ T5870] usb 11-1: config 9 interface 167 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 145.798367][ T5870] usb 11-1: config 9 interface 167 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 145.801612][ T5870] usb 11-1: config 9 interface 167 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 145.804738][ T5870] usb 11-1: config 9 interface 167 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 145.807886][ T5870] usb 11-1: config 9 interface 167 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 145.813053][ T5870] usb 11-1: config 9 interface 171 has no altsetting 0 [ 145.815642][ T5870] usb 11-1: config 9 interface 221 has no altsetting 0 [ 145.817697][ T5870] usb 11-1: config 9 interface 78 has no altsetting 0 [ 145.829626][ T5870] usb 11-1: Dual-Role OTG device on HNP port [ 145.831787][ T5870] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.834198][ T5870] usb 11-1: Product: 톆럫縞淢뮞̉ᒯቲힱê¥å¡Šîœ³ì„²é’Œä¶¹â¼‘敉☕㺾ã¢å€ä›§ã„©â知㷆ì î‹‡ä–¸ç¯•æ»•ã¬­ê±åš¯ì‰„ൔ愿䅘 [ 145.838436][ T5870] usb 11-1: Manufacturer: à § [ 145.842323][ T5870] usb 11-1: SerialNumber: syz [ 145.844774][ T5840] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.856481][ T9388] xt_hashlimit: size too large, truncated to 1048576 [ 145.859274][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.870161][ T5840] usb 8-1: Product: syz [ 145.872194][ T5840] usb 8-1: Manufacturer: syz [ 145.880116][ T5840] usb 8-1: SerialNumber: syz [ 146.159411][ T9398] input: syz0 as /devices/virtual/input/input17 [ 146.326855][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.919'. [ 146.355733][ T9404] NILFS (nullb0): couldn't find nilfs on the device [ 146.492833][ T9407] netlink: 'syz.5.920': attribute type 16 has an invalid length. [ 146.495981][ T9407] netlink: 'syz.5.920': attribute type 17 has an invalid length. [ 146.529310][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.537138][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.577947][ T9407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 146.957585][ T9413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.922'. [ 146.993097][ T9427] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 146.993585][ T42] audit: type=1400 audit(2000000005.519:4987): avc: denied { read append } for pid=9426 comm="syz.5.925" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 147.023688][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.922'. [ 147.175931][ T9436] netlink: NAT attribute has 4 unknown bytes [ 147.177827][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.192939][ T9436] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 147.197808][ T9436] netlink: 80 bytes leftover after parsing attributes in process `syz.2.928'. [ 147.245531][ T9440] kvm: kvm [9439]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 147.248599][ T9440] xt_l2tp: v2 doesn't support IP mode [ 147.436104][ T9449] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.933'. [ 147.444400][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 148.191290][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.196200][ T5870] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 148.201956][ T5870] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 148.234474][ T10] usb 11-1: USB disconnect, device number 2 [ 148.449353][ T9455] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 148.453445][ T5840] usb 8-1: USB disconnect, device number 10 [ 148.633102][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 148.648888][ T9466] hugetlbfs: syz.3.938 (9466): Using mlock ulimits for SHM_HUGETLB is obsolete [ 148.768991][ T9479] device-mapper: ioctl: Unable to rename non-existent device, t to uuid j [ 148.869429][ T9492] tipc: Enabled bearer , priority 0 [ 148.875855][ T9491] syzkaller0: MTU too low for tipc bearer [ 148.892591][ T9491] tipc: Disabling bearer [ 148.908604][ T9496] netlink: Setting conntrack mark requires 'commit' flag. [ 148.914369][ T9496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.976786][ T9499] binder: 9498:9499 ioctl 5457 200000000040 returned -22 [ 148.979115][ T9500] binder: 9498:9500 ioctl 5457 200000000040 returned -22 [ 149.042060][ T9505] program syz.3.950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.055376][ T9505] /dev/sg0: Can't lookup blockdev [ 149.077240][ T9505] bridge0: port 1(vlan3) entered blocking state [ 149.079109][ T9505] bridge0: port 1(vlan3) entered disabled state [ 149.083811][ T9505] vlan3: entered allmulticast mode [ 149.085527][ T9505] geneve0: entered allmulticast mode [ 149.093820][ T9505] vlan3: entered promiscuous mode [ 149.095340][ T9505] geneve0: entered promiscuous mode [ 149.600963][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 149.600979][ T42] audit: type=1400 audit(2000000008.129:4998): avc: denied { bind } for pid=9554 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.617045][ T42] audit: type=1400 audit(2000000008.129:4999): avc: denied { ioctl } for pid=9554 comm="syz.5.960" path="socket:[35087]" dev="sockfs" ino=35087 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.636384][ T42] audit: type=1400 audit(2000000008.129:5000): avc: denied { setopt } for pid=9554 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.644399][ T9557] team0: Device vlan0 is up. Set it down before adding it as a team port [ 149.656388][ T42] audit: type=1400 audit(2000000008.129:5001): avc: denied { accept } for pid=9554 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.680973][ T42] audit: type=1400 audit(2000000008.129:5002): avc: denied { write } for pid=9554 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.956382][ T9574] vlan2: entered promiscuous mode [ 149.958342][ T9574] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 150.034335][ T42] audit: type=1400 audit(2000000008.559:5003): avc: denied { write } for pid=9580 comm="syz.5.968" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 150.158852][ T42] audit: type=1400 audit(2000000008.679:5004): avc: denied { write } for pid=9590 comm="syz.2.971" name="target" dev="configfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.346044][ T9601] jffs2: notice: (9601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 150.442966][ T42] audit: type=1400 audit(2000000008.969:5005): avc: denied { write } for pid=9599 comm="syz.6.973" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 150.451461][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 150.470019][ T42] audit: type=1400 audit(2000000008.989:5006): avc: denied { append } for pid=9599 comm="syz.6.973" path="/30/file0/blkio.bfq.io_wait_time_recursive" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.552839][ T42] audit: type=1400 audit(2000000009.079:5007): avc: denied { map } for pid=9599 comm="syz.6.973" path="/30/file0/blkio.bfq.io_wait_time_recursive" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.750203][ T5728] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.751069][ T5870] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 150.760933][ T5870] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 150.768207][ T9620] vim2m vim2m.0: Removing vim2m [ 150.900762][ T9618] netlink: 76 bytes leftover after parsing attributes in process `syz.3.978'. [ 151.060580][ T9637] tmpfs: Bad value for 'mpol' [ 151.071008][ T9623] netlink: 52 bytes leftover after parsing attributes in process `syz.5.979'. [ 151.194086][ T9640] xt_hashlimit: size too large, truncated to 1048576 [ 151.253597][ T5870] usb 5-1: USB disconnect, device number 7 [ 151.307391][ T9646] /dev/sg0: Can't lookup blockdev [ 151.728152][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.5.986'. [ 152.107948][ T9679] 9pnet_fd: Insufficient options for proto=fd [ 152.137192][ T9681] netlink: 4428 bytes leftover after parsing attributes in process `syz.3.991'. [ 152.167453][ T9683] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.994'. [ 152.187821][ T9685] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 152.220829][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.335487][ T9697] capability: warning: `syz.5.999' uses 32-bit capabilities (legacy support in use) [ 152.371368][ T5870] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 152.380979][ T5870] usb 5-1: Dual-Role OTG device on HNP port [ 152.387180][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.543424][ T9722] syzkaller0: entered allmulticast mode [ 152.545521][ T9715] xt_hashlimit: size too large, truncated to 1048576 [ 152.596213][ T9728] ¾x9ÿ: renamed from bridge_slave_0 [ 152.737094][ T9733] /dev/sg0: Can't lookup blockdev [ 152.862392][ T9737] gfs2: error -5 reading superblock [ 152.883197][ T848] libceph: connect (1)[c::]:6789 error -101 [ 152.888749][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 153.154015][ T848] libceph: connect (1)[c::]:6789 error -101 [ 153.163556][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 153.213722][ T9756] lo speed is unknown, defaulting to 1000 [ 153.227214][ T9756] lo speed is unknown, defaulting to 1000 [ 153.237021][ T9756] lo speed is unknown, defaulting to 1000 [ 153.262256][ T9756] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 153.267379][ T9758] program syz.6.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.299235][ T9756] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 153.306899][ T9763] binder: 9761:9763 ioctl c0306201 2000000004c0 returned -11 [ 153.330284][ T9756] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 153.411593][ T9756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 153.431260][ T9768] syzkaller0: entered promiscuous mode [ 153.433824][ T9768] syzkaller0: entered allmulticast mode [ 153.477858][ T9772] libceph: secret too big 3051 [ 153.487317][ T9756] lo speed is unknown, defaulting to 1000 [ 153.517844][ T9731] ceph: No mds server is up or the cluster is laggy [ 153.565925][ T9756] lo speed is unknown, defaulting to 1000 [ 153.571873][ T9756] lo speed is unknown, defaulting to 1000 [ 153.578347][ T9756] lo speed is unknown, defaulting to 1000 [ 153.705388][ T9778] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1021'. [ 154.863000][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.946567][ T9854] »»»»»»: renamed from vlan0 (while UP) [ 155.198031][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 155.198047][ T42] audit: type=1400 audit(2000000013.719:5020): avc: denied { write } for pid=9864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.398154][ T42] audit: type=1400 audit(2000000013.919:5021): avc: denied { write } for pid=9879 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.451915][ T9881] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1048'. [ 155.468313][ T9881] netlink: 'syz.6.1048': attribute type 1 has an invalid length. [ 155.474380][ T9881] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1048'. [ 155.478446][ T9881] netlink: 'syz.6.1048': attribute type 1 has an invalid length. [ 155.481974][ T9881] netlink: 2016 bytes leftover after parsing attributes in process `syz.6.1048'. [ 155.496459][ T9885] loop3: detected capacity change from 0 to 7 [ 155.521469][ T9885] Dev loop3: unable to read RDB block 7 [ 155.537960][ T42] audit: type=1400 audit(2000000014.059:5022): avc: denied { write } for pid=9886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.538737][ T9885] loop3: unable to read partition table [ 155.568985][ T9885] loop3: partition table beyond EOD, truncated [ 155.572235][ T9885] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.643936][ T42] audit: type=1400 audit(2000000014.169:5023): avc: denied { write } for pid=9895 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.665769][ T9898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.149844][ T42] audit: type=1400 audit(2000000014.669:5024): avc: denied { call } for pid=9924 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.170204][ T42] audit: type=1400 audit(2000000014.669:5025): avc: denied { transfer } for pid=9924 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.195247][ T9925] pimreg9: entered allmulticast mode [ 156.222304][ T42] audit: type=1400 audit(2000000014.749:5026): avc: denied { getopt } for pid=9928 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.259792][ T9933] tipc: Trying to set illegal importance in message [ 156.343663][ T9937] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.494602][ T42] audit: type=1400 audit(2000000015.019:5027): avc: denied { write } for pid=9946 comm="syz.5.1068" name="midi2.usb0" dev="configfs" ino=26743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.532815][ T42] audit: type=1400 audit(2000000015.059:5028): avc: denied { write } for pid=9946 comm="syz.5.1068" name="midi2.usb0" dev="configfs" ino=26743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.585772][ T9930] could not allocate digest TFM handle ghash-generic [ 156.672136][ T42] audit: type=1400 audit(2000000015.199:5029): avc: denied { read } for pid=9953 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.748373][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1072'. [ 156.964962][ T9968] netlink: 'syz.2.1075': attribute type 23 has an invalid length. [ 157.066083][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1076'. [ 157.076758][ T9973] FAULT_INJECTION: forcing a failure. [ 157.076758][ T9973] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.085064][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz.6.1076 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.085100][ T9973] Tainted: [L]=SOFTLOCKUP [ 157.085108][ T9973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.085121][ T9973] Call Trace: [ 157.085129][ T9973] [ 157.085137][ T9973] dump_stack_lvl+0x100/0x190 [ 157.085187][ T9973] should_fail_ex.cold+0x5/0xa [ 157.085224][ T9973] get_futex_key+0x1d0/0x14f0 [ 157.085253][ T9973] ? __pfx_get_futex_key+0x10/0x10 [ 157.085286][ T9973] futex_wait_setup+0x91/0x540 [ 157.085323][ T9973] __futex_wait+0x19f/0x300 [ 157.085355][ T9973] ? __pfx___futex_wait+0x10/0x10 [ 157.085381][ T9973] ? __pfx_try_to_wake_up+0x10/0x10 [ 157.085403][ T9973] ? futex_hash+0x311/0x400 [ 157.085426][ T9973] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.085459][ T9973] ? find_held_lock+0x2b/0x80 [ 157.085485][ T9973] ? futex_wake+0x4ea/0x5e0 [ 157.085521][ T9973] futex_wait+0xe6/0x370 [ 157.085551][ T9973] ? __pfx_futex_wait+0x10/0x10 [ 157.085586][ T9973] ? rcu_read_lock_any_held+0x6a/0x90 [ 157.085613][ T9973] ? find_held_lock+0x2b/0x80 [ 157.085638][ T9973] ? ksys_write+0x190/0x250 [ 157.085671][ T9973] ? ksys_write+0x190/0x250 [ 157.085700][ T9973] do_futex+0x265/0x440 [ 157.085725][ T9973] ? __pfx_do_futex+0x10/0x10 [ 157.085751][ T9973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.085788][ T9973] __x64_sys_futex+0x34f/0x4d0 [ 157.085814][ T9973] ? fput+0x7c/0x100 [ 157.085847][ T9973] ? __pfx___x64_sys_futex+0x10/0x10 [ 157.085870][ T9973] ? ksys_write+0x1ac/0x250 [ 157.085897][ T9973] ? __pfx_ksys_write+0x10/0x10 [ 157.085935][ T9973] do_syscall_64+0x123/0x790 [ 157.085962][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.085985][ T9973] RIP: 0033:0x7fa7a5d9e0d9 [ 157.086003][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.086024][ T9973] RSP: 002b:00007fa7a6ca00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.086067][ T9973] RAX: ffffffffffffffda RBX: 00007fa7a6025fa8 RCX: 00007fa7a5d9e0d9 [ 157.086083][ T9973] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7a6025fa8 [ 157.086098][ T9973] RBP: 00007fa7a6025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.086111][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.086125][ T9973] R13: 00007fa7a6026038 R14: 00007ffcde0ef330 R15: 00007ffcde0ef418 [ 157.086156][ T9973] [ 157.180060][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 157.182051][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 157.443381][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 157.445650][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 157.488434][ T9992] netlink: 'syz.2.1082': attribute type 15 has an invalid length. [ 157.536748][ T9990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9990 comm=syz.3.1081 [ 157.878268][ T9973] ceph: No mds server is up or the cluster is laggy [ 158.397223][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 158.401076][ T5806] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 158.550864][ T5806] usb 11-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 158.556208][ T5806] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.562440][ T5806] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.567764][ T5806] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.608521][T10041] kvm: pic: non byte write [ 160.018926][T10056] lo speed is unknown, defaulting to 1000 [ 160.230013][ T1359] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 160.371805][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 160.380090][ T1359] usb 8-1: Using ep0 maxpacket: 8 [ 160.390503][ T1359] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 160.397843][ T1359] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 160.409942][ T1359] usb 8-1: config 0 has no interface number 0 [ 160.412713][ T1359] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.417231][ T1359] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.429949][ T1359] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 160.439940][ T1359] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 160.450013][ T1359] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.472174][ T1359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.475837][ T1359] usb 8-1: Product: syz [ 160.477744][ T1359] usb 8-1: Manufacturer: syz [ 160.479667][ T1359] usb 8-1: SerialNumber: syz [ 160.907474][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 160.907490][ T42] audit: type=1400 audit(2000000019.429:5035): avc: denied { bind } for pid=10080 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.131877][T10091] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1107'. [ 161.149792][ T5806] usb 11-1: USB disconnect, device number 3 [ 161.761971][T10123] bad cache= option: nonenr_mlock 0 [ 161.761971][T10123] nr_zspages 225 [ 161.761971][T10123] nr_free_cma 0 [ 161.761971][T10123] numa_hit 950412 [ 161.761971][T10123] numa_miss 23259 [ 161.761971][T10123] numa_foreign 23259 [ 161.761971][T10123] numa_interleave 7061 [ 161.761971][T10123] numa_local 946221 [ 161.761971][T10123] numa_other 27450 [ 161.761971][T10123] nr_inactive_anon 0 [ 161.761971][T10123] nr_active_anon 26498 [ 161.761971][T10123] nr_inactive_file 63020 [ 161.761971][T10123] nr_active_file 267 [ 161.761971][T10123] nr_unevictable 1000 [ 161.761971][T10123] nr_slab_reclaimable 12664 [ 161.761971][T10123] nr_slab_unreclaimable 73187 [ 161.761971][T10123] nr_isolated_anon 0 [ 161.761971][T10123] nr_isolated_file 0 [ 161.761971][T10123] workingset_nodes 0 [ 161.761971][T10123] workingset_refault_anon 138 [ 161.761971][T10123] workingset_refault_file 6142 [ 161.761971][T10123] workingset_activate_anon 6 [ 161.761971][T10123] workingset_activate_file 0 [ 161.761971][T10123] workingset_restore_anon 6 [ 161.761971][T10123] workingset_restore_file 0 [ 161.761971][T10123] workingset_nodereclaim 0 [ 161.761971][T10123] nr_anon_pages 9491 [ 161.761971][T10123] nr_mapped 24789 [ 161.761971][T10123] nr_file_pages 81316 [ 161.761971][T10123] nr_dirty 116 [ 161.761971][T10123] nr_writeback 0 [ 161.761971][T10123] nr_shmem 18031 [ 161.761971][T10123] nr_shmem_hugepages 0 [ 161.761971][T10123] nr_shmem_pmdmapped 0 [ 161.761971][T10123] nr_file_hugepages 0 [ 161.761971][T10123] nr_file_pmdmapped 0 [ 161.761971][T10123] nr_anon_transparent_hugepages 0 [ 161.761971][T10123] nr_vmscan_write 4843 [ 161.761971][T10123] nr_vmscan_immediate_reclaim 8 [ 161.761971][T10123] nr_dirtied 2658 [ 161.761971][T10123] nr_written 2589 [ 161.761971][T10123] nr_throttled_written 97 [ 161.761971][T10123] nr_kernel_misc_reclaimable 0 [ 161.761971][T10123] nr_foll_pin_acquired 8433 [ 161.761971][T10123] nr_foll_pin_released 8433 [ 161.761971][T10123] nr_vmalloc 85862 [ 161.762399][T10123] CIFS: VFS: bad cache= option: nonenr_mlock 0 [ 161.762399][T10123] nr_zspages 225 [ 161.762399][T10123] nr_free_cma 0 [ 161.762399][T10123] numa_hit 950412 [ 161.762399][T10123] numa_miss 23259 [ 161.762399][T10123] numa_foreign 23259 [ 161.762399][T10123] numa_interleave 7061 [ 161.762399][T10123] numa_local 946221 [ 161.762399][T10123] numa_other 27450 [ 161.762399][T10123] nr_inactive_anon 0 [ 161.762399][T10123] nr_active_anon 26498 [ 161.762399][T10123] nr_inactive_file 63020 [ 161.762399][T10123] nr_active_file 267 [ 161.762399][T10123] nr_unevictable 1000 [ 161.762399][T10123] nr_slab_reclaimable 12664 [ 161.762399][T10123] nr_slab_unreclaimable 73187 [ 161.762399][T10123] nr_isolated_anon 0 [ 161.762399][T10123] nr_isolated_file 0 [ 161.762399][T10123] workingset_nodes 0 [ 161.762399][T10123] workingset_refault_anon 138 [ 161.762399][T10123] workingset_refault_file 6142 [ 161.762399][T10123] workingset_activate_anon 6 [ 161.762399][T10123] workingset_activate_file 0 [ 161.762399][T10123] workingset_restore_anon 6 [ 161.762399][T10123] workingset_restore_file 0 [ 161.762399][T10123] workingset_nodereclaim 0 [ 161.762399][T10123] nr_anon_pages 9491 [ 161.762399][T10123] nr_mapped 24789 [ 161.762399][T10123] nr_file_pages 81316 [ 161.762399][T10123] nr_dirty 116 [ 161.762399][T10123] nr_writeback 0 [ 161.762399][T10123] nr_shmem 18031 [ 161.762399][T10123] nr_shmem_hugepages 0 [ 161.762399][T10123] nr_shmem_pmdmapped 0 [ 161.762399][T10123] nr_file_hugepages 0 [ 161.762399][T10123] nr_file_pmdmapped 0 [ 161.762399][T10123] nr_anon_transparent_hugepages 0 [ 161.762399][T10123] nr_vmscan_write 4843 [ 161.762399][T10123] nr_vmscan_immediate_reclaim 8 [ 161.762399][T10123] nr_dirtied 2658 [ 161.762399][T10123] nr_written 2589 [ 161.762399][T10123] nr_throttled_written 97 [ 161.762399][T10123] nr_kernel_misc_reclaimable 0 [ 161.762399][T10123] nr_foll_pin_acquired 8433 [ 161.762399][T10123] nr_foll_pin_released 8433 [ 161.951060][T10123] netlink: 'syz.2.1118': attribute type 5 has an invalid length. [ 162.033072][T10129] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 162.038388][T10129] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 162.045172][T10129] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.313984][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'. [ 162.318211][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1125'. [ 162.329051][T10149] geneve3: entered promiscuous mode [ 162.332834][T10149] geneve3: entered allmulticast mode [ 162.448786][T10085] nvmet: connect request for invalid subsystem testsubsys! [ 162.460087][T10146] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 162.912227][T10171] all: renamed from macvtap0 (while UP) [ 162.949275][T10170] lo speed is unknown, defaulting to 1000 [ 162.975679][T10176] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 162.979782][T10176] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1136'. [ 163.033574][ T5771] usb 8-1: USB disconnect, device number 11 [ 163.534263][T10184] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 163.583242][T10184] veth0_to_bond: entered allmulticast mode [ 163.624802][T10184] veth0_to_bond: entered promiscuous mode [ 163.663676][T10184] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 163.929745][T10206] syzkaller0: entered promiscuous mode [ 163.937212][T10206] syzkaller0: entered allmulticast mode [ 164.176105][ T42] audit: type=1400 audit(2000000022.699:5036): avc: denied { read } for pid=10216 comm="syz.6.1146" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.204365][T10218] deleting an unspecified loop device is not supported. [ 164.209598][ T42] audit: type=1400 audit(2000000022.719:5037): avc: denied { open } for pid=10216 comm="syz.6.1146" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.209641][ T42] audit: type=1400 audit(2000000022.729:5038): avc: denied { ioctl } for pid=10216 comm="syz.6.1146" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 164.448887][ T42] audit: type=1807 audit(2000000022.969:5039): action=measure func=FILE_CHECK res=1 [ 164.463196][T10230] ima: policy update completed [ 164.466785][ T42] audit: type=1802 audit(2000000022.989:5040): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.6.1150" res=1 errno=0 [ 164.514958][ T42] audit: type=1800 audit(2000000023.039:5041): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 164.545477][ T42] audit: type=1800 audit(2000000023.069:5042): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 164.633842][ T42] audit: type=1800 audit(2000000023.159:5043): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5100 res=0 errno=0 [ 164.695605][ T42] audit: type=1800 audit(2000000023.219:5044): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 164.856524][T10237] syzkaller0: entered promiscuous mode [ 164.864579][T10237] syzkaller0: entered allmulticast mode [ 166.057198][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 166.057209][ T42] audit: type=1800 audit(2000000024.579:5059): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 166.157208][ T42] audit: type=1800 audit(2000000024.679:5060): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 166.218709][T10271] netlink: 'syz.6.1161': attribute type 2 has an invalid length. [ 166.292195][T10271] : entered promiscuous mode [ 166.348388][ T42] audit: type=1800 audit(2000000024.869:5061): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 166.446822][ T42] audit: type=1800 audit(2000000024.969:5062): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1162" name="UDC" dev="configfs" ino=37856 res=0 errno=0 [ 166.544403][ T42] audit: type=1800 audit(2000000025.059:5063): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 166.592269][ T42] audit: type=1800 audit(2000000025.069:5064): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 166.629915][ T42] audit: type=1800 audit(2000000025.139:5065): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 166.662328][ T42] audit: type=1800 audit(2000000025.189:5066): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 166.719600][ T42] audit: type=1800 audit(2000000025.239:5067): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 166.765135][ T42] audit: type=1800 audit(2000000025.289:5068): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 166.826184][T10290] block device autoloading is deprecated and will be removed. [ 167.224666][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'. [ 167.578524][T10333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1179'. [ 167.654438][T10339] binder: BINDER_SET_CONTEXT_MGR already set [ 167.658331][T10339] binder: 10337:10339 ioctl 4018620d 200000002540 returned -16 [ 167.863759][T10347] CIFS: Invalid mount helper version specified [ 167.904985][T10346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10346 comm=syz.2.1182 [ 168.114260][T10354] gadgetfs: bound to dummy_udc driver [ 168.162967][T10355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.188568][T10355] netlink: Unknown conntrack attr (type=254, max=9) [ 168.203374][T10355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.455235][T10369] syz_tun: entered allmulticast mode [ 168.478867][T10367] xt_hl: Unknown TTL match mode: 255 [ 168.486009][T10368] syz_tun: left allmulticast mode [ 168.730614][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 168.744456][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 168.904088][T10391] XFS (mtdblock0): Invalid superblock magic number [ 169.331605][T10412] netfs: Cache "CacheFiles" added (type cachefiles) [ 169.334901][T10412] CacheFiles: File cache on CacheFiles registered [ 169.338651][T10410] CacheFiles: File cache on CacheFiles unregistering [ 169.349898][T10410] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 169.463520][T10422] syz_tun: entered allmulticast mode [ 169.503197][T10422] pim6reg: entered allmulticast mode [ 169.531532][T10422] syz_tun (unregistering): left allmulticast mode [ 169.793885][T10429] lo speed is unknown, defaulting to 1000 [ 169.966365][T10439] sd 0:0:0:0: PR command failed: 1026 [ 169.973366][T10439] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 169.979008][T10439] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 170.046342][T10437] kvm: kvm [10436]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 170.073578][T10437] kvm: kvm [10436]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 170.289056][T10452] lo speed is unknown, defaulting to 1000 [ 170.557220][T10463] program syz.5.1218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.125585][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 171.125602][ T42] audit: type=1800 audit(2000000029.649:5163): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 171.194621][T10471] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 171.275124][ T42] audit: type=1800 audit(2000000029.799:5164): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 171.318561][ T42] audit: type=1400 audit(2000000029.839:5165): avc: denied { read } for pid=10480 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.351577][ T42] audit: type=1800 audit(2000000029.869:5166): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 171.406348][ T42] audit: type=1800 audit(2000000029.929:5167): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 171.444713][ T42] audit: type=1800 audit(2000000029.959:5168): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 171.465502][ T42] audit: type=1800 audit(2000000029.979:5169): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 171.477795][ T42] audit: type=1800 audit(2000000029.989:5170): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1224" name="carrier" dev="sysfs" ino=151143 res=0 errno=0 [ 171.525767][ T42] audit: type=1800 audit(2000000030.049:5171): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 171.545355][ T42] audit: type=1400 audit(2000000030.069:5172): avc: denied { mounton } for pid=10488 comm="syz.5.1227" path="/proc/361/net/netfilter" dev="proc" ino=4026532234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 171.566159][T10497] genirq: Flags mismatch irq 2. 00200000 (pcl818) vs. 00200000 (pcmmio) [ 171.761587][T10510] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 171.764755][T10510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.975099][T10522] SELinux: ebitmap: map size 1088 does not match my size 64 (high bit was 8192) [ 171.997227][T10522] SELinux: failed to load policy [ 172.014834][T10526] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 172.209695][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 172.213771][T10544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1244'. [ 172.233680][T10544] geneve2: entered promiscuous mode [ 172.240878][T10544] geneve2: entered allmulticast mode [ 172.427328][T10561] befs: (md0): No write support. Marking filesystem read-only [ 172.448730][T10561] befs: (md0): unable to read superblock [ 173.234190][T10591] Invalid argument reading file caps for ./file0 [ 173.405420][T10608] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 173.405873][T10611] CIFS mount error: No usable UNC path provided in device string! [ 173.405873][T10611] [ 173.421914][T10611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.692429][T10626] netlink: 'syz.6.1258': attribute type 1 has an invalid length. [ 173.732830][T10626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.743524][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 173.763009][T10626] netlink: 'syz.6.1258': attribute type 10 has an invalid length. [ 173.772818][T10626] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1258'. [ 173.778938][T10626] dummy0: entered promiscuous mode [ 173.979497][T10642] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 174.010590][T10642] flags: 0xfff10000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 174.020048][T10642] raw: 00fff10000000004 ffffea00013f8008 ffffea00013f8008 0000000000000000 [ 174.030044][T10642] raw: 0000000000000000 0000000000000000 0000000900000007 0000000000000000 [ 174.035617][T10642] page dumped because: unmovable page [ 174.037334][T10642] page_owner tracks the page as allocated [ 174.070162][T10642] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5716, tgid 5716 (syz-executor), ts 53447299069 [ 174.090107][T10642] post_alloc_hook+0xfd/0x120 [ 174.091862][T10642] get_page_from_freelist+0x110d/0x35b0 [ 174.100788][T10642] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 174.102658][T10642] alloc_pages_mpol+0x201/0x550 [ 174.114013][T10642] alloc_pages_noprof+0x1a/0x160 [ 174.115708][T10642] __vmalloc_node_range_noprof+0xdcc/0x1460 [ 174.125005][T10642] vmalloc_user_noprof+0x9e/0xe0 [ 174.128802][T10642] kcov_ioctl+0x4d/0x760 [ 174.130496][T10642] __x64_sys_ioctl+0x18e/0x210 [ 174.136361][T10642] do_syscall_64+0x123/0x790 [ 174.137940][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.150447][T10642] page_owner free stack trace missing [ 174.308497][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1236'. [ 174.329735][T10651] netlink: 'syz.6.1264': attribute type 1 has an invalid length. [ 174.333849][T10651] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1264'. [ 174.398925][T10653] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 175.113754][T10687] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1272'. [ 175.710638][T10711] binder: 10710:10711 ioctl c0a85352 200000000440 returned -22 [ 175.828447][T10713] fuse: Bad value for 'group_id' [ 175.834728][T10713] fuse: Bad value for 'group_id' [ 175.938056][T10719] pim6reg: entered allmulticast mode [ 176.139103][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 176.139115][ T42] audit: type=1800 audit(2000000034.659:5267): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 176.149737][T10732] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1288'. [ 176.220497][ T42] audit: type=1400 audit(2000000034.739:5268): avc: denied { write } for pid=10728 comm="syz.6.1287" lport=51826 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 176.270721][ T42] audit: type=1800 audit(2000000034.799:5269): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 176.345495][ T42] audit: type=1800 audit(2000000034.869:5270): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 176.434757][ T42] audit: type=1800 audit(2000000034.959:5271): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 176.455852][ T42] audit: type=1800 audit(2000000034.969:5272): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35064 res=0 errno=0 [ 176.465785][ T42] audit: type=1800 audit(2000000034.969:5273): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35087 res=0 errno=0 [ 176.526096][ T42] audit: type=1800 audit(2000000035.049:5274): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 176.594064][T10750] netlink: 'syz.5.1293': attribute type 2 has an invalid length. [ 176.595326][ T42] audit: type=1400 audit(2000000035.119:5275): avc: denied { setopt } for pid=10749 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.605445][T10750] : entered promiscuous mode [ 176.685966][ T42] audit: type=1800 audit(2000000035.209:5276): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 176.987004][T10756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10756 comm=syz.2.1295 [ 177.028406][T10756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10756 comm=syz.2.1295 [ 177.167849][T10767] fuse: Unknown parameter '²ê' [ 177.363875][T10777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10777 comm=syz.2.1304 [ 177.521030][T10785] binder: Bad value for 'max' [ 177.581899][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1301'. [ 177.938114][T10804] netlink: 'syz.5.1310': attribute type 11 has an invalid length. [ 177.942531][T10804] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1310'. [ 177.954721][T10804] Bluetooth: Invalid esc byte 0x04 [ 178.051037][T10810] tipc: Started in network mode [ 178.052759][T10810] tipc: Node identity 1000001, cluster identity 4369 [ 178.057463][T10810] tipc: Node number set to 16777217 [ 178.059358][T10810] tipc: Cannot configure node identity twice [ 178.068321][T10810] tipc: New replicast peer: 127.0.0.1 [ 178.075979][T10810] tipc: Enabled bearer , priority 10 [ 178.183588][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1314'. [ 178.187619][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.201622][T10814] netlink: 'syz.6.1314': attribute type 12 has an invalid length. [ 178.208597][T10814] netlink: 'syz.6.1314': attribute type 29 has an invalid length. [ 178.214917][T10814] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1314'. [ 178.848429][T10839] nfs: Unknown parameter './file0' [ 179.112187][T10850] gfs2: error -5 reading superblock [ 179.187693][T10853] kernel read not supported for file /policy (pid: 10853 comm: syz.6.1325) [ 179.233256][T10853] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.236402][T10853] SELinux: failed to load policy [ 179.283527][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.653262][T10874] nfs: Deprecated parameter 'nointr' [ 179.666709][T10874] i2c i2c-0: new_device: Missing parameters [ 179.984487][T10891] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 179.988096][T10891] ipvlan0: entered allmulticast mode [ 179.993703][T10891] veth0_vlan: entered allmulticast mode [ 180.003103][T10891] team0: Device ipvlan0 failed to register rx_handler [ 180.124179][T10895] __nla_validate_parse: 1 callbacks suppressed [ 180.124197][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1338'. [ 180.273368][T10897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.510631][T10904] overlayfs: invalid redirect ((null)) [ 180.725324][T10913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1345'. [ 180.848479][T10919] xt_hashlimit: size too large, truncated to 1048576 [ 180.943789][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1348'. [ 180.956969][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'. [ 181.018359][T10927] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 181.023814][T10927] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 181.028488][T10927] overlayfs: failed to set uuid (338/file2, err=-13); falling back to uuid=null. [ 181.036618][T10929] overlay: filesystem on ./file2 not supported as upperdir [ 181.153134][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 181.153152][ T42] audit: type=1800 audit(2000000039.679:5357): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 181.238094][ T42] audit: type=1400 audit(2000000039.759:5358): avc: denied { create } for pid=10932 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.246969][ T42] audit: type=1400 audit(2000000039.769:5359): avc: denied { connect } for pid=10932 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.262162][ T42] audit: type=1800 audit(2000000039.779:5360): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170993 res=0 errno=0 [ 181.274080][ T42] audit: type=1800 audit(2000000039.799:5361): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171008 res=0 errno=0 [ 181.284198][T10933] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 181.288306][T10933] CIFS: VFS: Malformed UNC in devname [ 181.290595][ T42] audit: type=1400 audit(2000000039.819:5362): avc: denied { read } for pid=10932 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.320698][ T42] audit: type=1800 audit(2000000039.849:5363): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 181.346189][ T42] audit: type=1800 audit(2000000039.869:5364): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 181.363519][T10940] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 181.364618][ T42] audit: type=1800 audit(2000000039.889:5365): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1353" name="attach" dev="sysfs" ino=36510 res=0 errno=0 [ 181.365856][T10940] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.378379][T10940] vhci_hcd vhci_hcd.0: Device attached [ 181.383955][T10941] vhci_hcd: cannot find the pending unlink 1 [ 181.384566][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1353'. [ 181.391686][T10940] netlink: 'syz.6.1353': attribute type 21 has an invalid length. [ 181.395016][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 181.413732][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1353'. [ 181.417558][T10940] netlink: 'syz.6.1353': attribute type 21 has an invalid length. [ 181.421265][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 181.427986][ T42] audit: type=1800 audit(2000000039.949:5366): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 181.437525][ T5797] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.450546][ T5797] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.455081][ T5797] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.458709][ T5797] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.468997][T10941] vhci_hcd: connection closed [ 181.472550][ T5797] vhci_hcd vhci_hcd.6: stop threads [ 181.477901][ T5797] vhci_hcd vhci_hcd.6: release socket [ 181.480829][ T5797] vhci_hcd vhci_hcd.6: disconnect device [ 181.558190][T10954] netlink: 'syz.5.1358': attribute type 28 has an invalid length. [ 181.653585][T10956] Mass Storage Function, version: 2009/09/11 [ 181.658547][T10956] LUN: removable file: (no medium) [ 181.708679][T10959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58146 sclass=netlink_route_socket pid=10959 comm=syz.6.1360 [ 181.718873][T10959] CIFS: Attempting to mount //127.0.0.1/share [ 181.972541][T10963] cramfs: checking physical address 0x000000002a680000 for linear cramfs image [ 182.014543][T10963] cramfs: wrong magic [ 182.018678][T10963] cramfs: wrong magic [ 182.143227][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.143557][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.317965][T10976] jffs2: notice: (10976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 182.544414][T10959] CIFS: VFS: Error connecting to socket. Aborting operation. [ 182.549124][T10959] CIFS: VFS: cifs_mount failed w/return code = -4 [ 182.655531][T10994] program syz.6.1372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.684447][T10994] affs: No valid root block on device nullb0 [ 182.767061][T10999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.481353][T11045] CUSE: unknown device info "" [ 183.488011][T11045] CUSE: unknown device info "" [ 183.495999][T11045] CUSE: unknown device info "" [ 183.500346][T11045] CUSE: unknown device info "" [ 183.502403][T11045] CUSE: zero length info key specified [ 183.671217][T11056] netlink: 'syz.6.1392': attribute type 10 has an invalid length. [ 183.688729][T11056] team0 (unregistering): Port device team_slave_0 removed [ 183.700033][T11056] team0 (unregistering): Port device team_slave_1 removed [ 183.745927][T11059] pim6reg: entered allmulticast mode [ 183.936596][T11068] netlink: 'syz.3.1395': attribute type 21 has an invalid length. [ 183.939156][T11068] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1395'. [ 183.976322][T11073] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 184.033328][T11073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.051350][T11073] bond4: entered promiscuous mode [ 184.057184][T11073] bond4 (unregistering): Released all slaves [ 184.254526][T11083] SELinux: ebitmap: map size 1088 does not match my size 64 (high bit was 8192) [ 184.270066][T11083] SELinux: failed to load policy [ 184.413490][T11086] XFS (nbd5): SB validate failed with error -5. [ 184.430301][T11092] XFS (nullb0): Invalid superblock magic number [ 184.609725][T11103] xt_recent: Unsupported userspace flags (000000b2) [ 184.787517][T11112] fuse: Bad value for 'group_id' [ 184.792318][T11112] fuse: Bad value for 'group_id' [ 185.000129][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1407'. [ 185.371836][T11122] devpts: Bad value for 'gid' [ 185.378265][T11122] devpts: Bad value for 'gid' [ 185.702923][T11142] 9pnet_virtio: no channels available for device 127.0.0.1 [ 185.726203][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.734159][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.050071][T11156] netlink: 'syz.5.1420': attribute type 1 has an invalid length. [ 186.056325][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 186.062471][T11156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11156 comm=syz.5.1420 [ 186.361853][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 186.361871][ T42] audit: type=1800 audit(2000000044.889:5452): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16129 res=0 errno=0 [ 186.375428][T11167] fuse: Bad value for 'fd' [ 186.387280][ T42] audit: type=1800 audit(2000000044.889:5453): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16000 res=0 errno=0 [ 186.401658][ T42] audit: type=1800 audit(2000000044.909:5454): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16516 res=0 errno=0 [ 186.447423][ T42] audit: type=1404 audit(2000000044.969:5455): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 186.481940][ T42] audit: type=1800 audit(2000000045.009:5456): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1425" name="attach" dev="sysfs" ino=36510 res=0 errno=0 [ 186.488905][ T42] audit: type=1400 audit(2000000045.009:5457): avc: denied { write } for pid=11169 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 186.498550][ T42] audit: type=1400 audit(2000000045.009:5458): avc: denied { write } for pid=11169 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 186.505467][T11167] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 186.507489][T11167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.511044][T11167] vhci_hcd vhci_hcd.0: Device attached [ 186.515839][ T42] audit: type=1400 audit(2000000045.019:5459): avc: denied { module_request } for pid=11169 comm="syz.3.1423" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 186.526158][T11174] vhci_hcd: connection closed [ 186.530648][ T5797] vhci_hcd vhci_hcd.6: stop threads [ 186.533952][ T42] audit: type=1400 audit(2000000045.019:5460): avc: denied { prog_load } for pid=11169 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.539766][ T5797] vhci_hcd vhci_hcd.6: release socket [ 186.544389][ T5797] vhci_hcd vhci_hcd.6: disconnect device [ 186.546308][ T42] audit: type=1400 audit(2000000045.029:5461): avc: denied { mounton } for pid=11164 comm="syz.2.1424" path="/414/config" dev="tmpfs" ino=2300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 188.074800][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1432'. [ 193.790654][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 193.790671][ T42] audit: type=1400 audit(2000000052.319:5517): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=47760 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 193.846685][ T42] audit: type=1400 audit(2000000052.369:5518): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 194.671345][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.879810][ T42] audit: type=1400 audit(2000000055.399:5519): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 201.070753][ T42] audit: type=1400 audit(2000000059.599:5520): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=47760 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 202.289597][ T42] audit: type=1400 audit(2000000060.809:5521): avc: denied { execute } for pid=11195 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=0 [ 202.299984][ T42] audit: type=1400 audit(2000000060.809:5522): avc: denied { write } for pid=5632 comm="syz-executor" path="pipe:[6643]" dev="pipefs" ino=6643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 202.319827][ T42] audit: type=1400 audit(2000000060.809:5523): avc: denied { write } for pid=5632 comm="syz-executor" path="pipe:[6643]" dev="pipefs" ino=6643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 202.341384][ T42] audit: type=1400 audit(2000000060.839:5524): avc: denied { recv } for pid=5631 comm="sshd-session" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 202.355920][ T5799] usb 7-1: USB disconnect, device number 8 [ 202.368904][ T42] audit: type=1400 audit(2000000060.839:5525): avc: denied { recv } for pid=5631 comm="sshd-session" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 202.370066][ T5799] metro-usb ttyUSB1: Metrologic USB to Serial converter now disconnected from ttyUSB1 [ 202.403259][ T5799] metro_usb 7-1:100.173: device disconnected [ 202.415357][ T42] audit: type=1800 audit(2000000060.939:5526): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34864 res=0 errno=0 [ 202.442163][ T42] audit: type=1800 audit(2000000060.959:5527): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34887 res=0 errno=0 [ 202.532353][ T42] audit: type=1400 audit(2000000061.059:5528): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 202.604765][ T6063] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 202.608416][ T6063] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 202.611010][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.2.55 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.614425][ T6063] Tainted: [L]=SOFTLOCKUP [ 202.615939][ T6063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.619538][ T6063] RIP: 0010:media_request_release+0xb1/0x1b0 [ 202.621464][ T6063] Code: 48 c1 ea 03 80 3c 02 00 0f 85 f5 00 00 00 48 8b 9d 10 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e6 00 00 00 48 8b 5b 10 48 85 db 0f 84 94 00 00 [ 202.627252][ T6063] RSP: 0018:ffffc900032efa28 EFLAGS: 00010202 [ 202.629142][ T6063] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 202.631548][ T6063] RDX: 0000000000000002 RSI: ffffffff8e3d3fc0 RDI: 0000000000000010 [ 202.633958][ T6063] RBP: ffff88802aa71708 R08: 0000000000000001 R09: 0000000000000000 [ 202.636380][ T6063] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803793a000 [ 202.638785][ T6063] R13: ffff8880205b1300 R14: ffff88803998a748 R15: 0000000000000000 [ 202.641198][ T6063] FS: 0000000000000000(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 202.643939][ T6063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.646023][ T6063] CR2: 00007ffc2e6e17f0 CR3: 0000000035825000 CR4: 0000000000352ef0 [ 202.648628][ T6063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 202.651156][ T6063] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 202.653684][ T6063] Call Trace: [ 202.654751][ T6063] [ 202.655688][ T6063] media_request_close+0x7e/0xc0 [ 202.657221][ T6063] ? __pfx_media_request_close+0x10/0x10 [ 202.658981][ T6063] __fput+0x3ff/0xb50 [ 202.660304][ T6063] task_work_run+0x150/0x240 [ 202.661729][ T6063] ? __pfx_task_work_run+0x10/0x10 [ 202.663294][ T6063] ? free_uts_ns+0x16e/0x330 [ 202.664740][ T6063] do_exit+0x951/0x2ae0 [ 202.666026][ T6063] ? __pfx_do_exit+0x10/0x10 [ 202.667446][ T6063] ? cgroup_update_frozen_flag+0x125/0x240 [ 202.669297][ T6063] ? find_held_lock+0x2b/0x80 [ 202.670760][ T6063] ? get_signal+0x184f/0x21e0 [ 202.672332][ T6063] do_group_exit+0xd5/0x2a0 [ 202.673801][ T6063] get_signal+0x1ec7/0x21e0 [ 202.675269][ T6063] ? __pfx_get_signal+0x10/0x10 [ 202.676864][ T6063] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 202.678521][ T6063] arch_do_signal_or_restart+0x91/0x7e0 [ 202.680269][ T6063] ? get_timespec64+0x147/0x240 [ 202.681786][ T6063] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.683664][ T6063] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 202.685490][ T6063] exit_to_user_mode_loop+0x139/0x700 [ 202.687134][ T6063] ? rcu_is_watching+0x13/0xc0 [ 202.688633][ T6063] do_syscall_64+0x661/0x790 [ 202.690073][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.691908][ T6063] RIP: 0033:0x7f0e60d5e90e [ 202.693286][ T6063] Code: Unable to access opcode bytes at 0x7f0e60d5e8e4. [ 202.695437][ T6063] RSP: 002b:00007f0e61d2af58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 202.698123][ T6063] RAX: fffffffffffffdfc RBX: 00007f0e61d2b6c0 RCX: 00007f0e60d5e90e [ 202.700755][ T6063] RDX: 00007f0e61d2afb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.703342][ T6063] RBP: 00007f0e60e35024 R08: 0000000000000000 R09: 0000000000000000 [ 202.705802][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.708383][ T6063] R13: 00007f0e61026038 R14: 00007f0e61025fa0 R15: 00007ffd45667b28 [ 202.710818][ T6063] [ 202.711800][ T6063] Modules linked in: [ 202.713654][ T6063] ---[ end trace 0000000000000000 ]--- [ 202.717758][ T42] audit: type=1400 audit(2000000061.239:5529): avc: denied { recv } for pid=10748 comm="syz.5.1292" saddr=10.0.2.2 src=39672 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 May 18 03:34:21 syzkaller kern.alert kernel: [ 202.608416][ T6063] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 202.734120][ T6063] RIP: 0010:media_request_release+0xb1/0x1b0 [ 202.736125][ T6063] Code: 48 c1 ea 03 80 3c 02 00 0f 85 f5 00 00 00 48 8b 9d 10 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e6 00 00 00 48 8b 5b 10 48 85 db 0f 84 94 00 00 [ 202.742802][ T6063] RSP: 0018:ffffc900032efa28 EFLAGS: 00010202 [ 202.744978][ T6063] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 202.747896][ T6063] RDX: 0000000000000002 RSI: ffffffff8e3d3fc0 RDI: 0000000000000010 [ 202.751410][ T6063] RBP: ffff88802aa71708 R08: 0000000000000001 R09: 0000000000000000 [ 202.754573][ T6063] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803793a000 [ 202.757589][ T6063] R13: ffff8880205b1300 R14: ffff88803998a748 R15: 0000000000000000 [ 202.760943][ T6063] FS: 0000000000000000(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 202.764371][ T6063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.766436][ T6063] CR2: 00007ffc2e6e17f0 CR3: 0000000035825000 CR4: 0000000000352ef0 [ 202.768946][ T6063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 202.772186][ T6063] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 202.774646][ T6063] Kernel panic - not syncing: Fatal exception [ 202.777095][ T6063] Kernel Offset: disabled [ 202.778430][ T6063] Rebooting in 86400 seconds..