last executing test programs: 40.375638127s ago: executing program 2 (id=246): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) clock_getres(0x2, &(0x7f0000000380)) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 40.373425911s ago: executing program 2 (id=247): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000200)={0x1, "13fae5c5b1fac5b267b5037ea6ecf30076f5178cf21aa284290695e9e014102e", 0x1, 0x0, 0x3, 0x8314, 0x0, 0x3, 0x5, 0x4}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2c, 0x0, &(0x7f0000000080)) r3 = fsmount(r1, 0x0, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfffffffa}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004097dc000c0000000400000001000084010000000a000000a070a1a63403000000060000000000000000000001050000001e0000000000000000000003000000000200000002000000000100000061002e2e61610061305f00"], 0x0, 0x64}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 40.31645477s ago: executing program 2 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x47}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x7, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x47}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x7, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) (async) 40.106273738s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, 0xffffffffffffffff, 0xa0daa000) (async, rerun: 64) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1d7200, 0x0) 40.105296701s ago: executing program 2 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000400)={0x0, @ctrl={0x0, 0x0, @value64}}) 39.956316903s ago: executing program 2 (id=251): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000131401010000000000000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="340000001900150030bd7000fddbdf250a0000000202000000000000180009800c00", @ANYRES32], 0x34}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x5ae2, &(0x7f0000000140)={0x0, 0x3, 0x10, 0x3, 0x16d}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000300), &(0x7f0000000400)='%+9llu \x00'}, 0x20) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x345, 0x0, 0x1000}]}) (async) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) (async) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9b01, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000000)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) read$dsp(r10, &(0x7f0000000240)=""/108, 0x6c) (async, rerun: 64) write$dsp(r9, &(0x7f0000002000)='`', 0x88020) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0031c8", @ANYRES16=r5, @ANYRES16=r3, @ANYRESOCT=r4, @ANYBLOB="10005a800c0001800500010036000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (rerun: 64) io_uring_enter(r8, 0x2217, 0x7721, 0x16, 0x0, 0x0) 24.832773745s ago: executing program 32 (id=251): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000131401010000000000000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="340000001900150030bd7000fddbdf250a0000000202000000000000180009800c00", @ANYRES32], 0x34}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x5ae2, &(0x7f0000000140)={0x0, 0x3, 0x10, 0x3, 0x16d}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000300), &(0x7f0000000400)='%+9llu \x00'}, 0x20) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x345, 0x0, 0x1000}]}) (async) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) (async) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9b01, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000000)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) read$dsp(r10, &(0x7f0000000240)=""/108, 0x6c) (async, rerun: 64) write$dsp(r9, &(0x7f0000002000)='`', 0x88020) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0031c8", @ANYRES16=r5, @ANYRES16=r3, @ANYRESOCT=r4, @ANYBLOB="10005a800c0001800500010036000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (rerun: 64) io_uring_enter(r8, 0x2217, 0x7721, 0x16, 0x0, 0x0) 2.568824076s ago: executing program 0 (id=787): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000c00)='mqueue\x00', 0x84418, 0x0) 2.520887119s ago: executing program 0 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c20000000800450000200000000000119078000000000000004e20000c9078010800"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2.250954967s ago: executing program 0 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c20000000800450000200000000000119078000000000000004e20000c9078010800"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2.017372033s ago: executing program 0 (id=801): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_usbip_server_init(0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 1.349139033s ago: executing program 4 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0xf3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x3, 0x8001}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1f}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x500) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0x80000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e24,access=user,dfltgid=', @ANYRESHEX=r3, @ANYBLOB="2c69676e6f726571762c63616368653d6d6d61702c76657273696f6e3d3970323030302e4c2c6163636573733d616e792c6d73697a653d3078303030303030303030303030303030392c736d61636b6673726f6f743d7d255cb6402c7375626a5f757365723d2c6f626a5f726f6c653d2f6465762f6e65742f74756e002c646f6e745f61707072616973652c6f626a5f726f6c653d2a2c7569643c", @ANYRESDEC=r4, @ANYBLOB="447365736e65723d0000000000c609635a00000000004184", @ANYRESDEC=r5, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 1.200464322s ago: executing program 4 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040840) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.120936384s ago: executing program 4 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="fefffffe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r6, 0x21, {0x2, 0x0, 0x4}}, 0x18) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x3, {0x2, 0xf0, 0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x9, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x5}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x5f, 0x71, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000004c0)=""/4096, 0x65, 0x1000, 0x0, 0x401}, 0x28) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0xfffffeff, 0x7, 0x1, 0x8000, 0xffffffffffffffff, 0x3, '\x00', r3, r8, 0x4, 0x2, 0x5, 0x4, @value=r9}, 0x50) 1.120372998s ago: executing program 4 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@deltaction={0x194, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5ca2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x4, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0xa0, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x46e}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9ea0}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x194}}, 0x20000084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {0xe, 0x5}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) socket$key(0xf, 0x3, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000200)=0xa) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840) ioctl$EVIOCGBITKEY(r12, 0x80404521, &(0x7f0000000840)=""/160) mq_notify(r11, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001380)={[&(0x7f0000000080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000001200)={[&(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 1.050480684s ago: executing program 3 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc814) (async) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x5, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x7f, 0x3, 0x2c, 0xff, 0x3, 0xd5, 0x40, 0x5, 0x8, 0x1, 0x40, 0x0, 0x1}, 0xe) (async) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4c27876e0d5cc82}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8084}, 0x40040) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x2}) (async, rerun: 32) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (rerun: 32) sendfile(r2, r1, &(0x7f0000000340)=0xffffffffffffffff, 0x7bc2b544) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000380), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xfc, "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"}, &(0x7f0000000500)=0x104) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000540)={r3, 0x5}, &(0x7f0000000580)=0x8) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x6080, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x2) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x256203) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000006c0)={0x8, 0xfa, 0xf7}) (async, rerun: 64) read(r4, &(0x7f0000000700)=""/196, 0xc4) (async, rerun: 64) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000800)="9136b3eca466368e1fd87a2e9261141e19b6d198738f1eb12ace158612ef248fdd", 0x21) r6 = dup2(r4, r0) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000840)={r1, 0x0, 0xfffffffffffffffa, 0xffff, 0x81, 0x1}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000880)={@rand_addr, @private, 0x0}, &(0x7f00000008c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x3ff, 0x1, 0xfffffffd, 0x20000, r1, 0x4, '\x00', r7, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x5}, 0x50) mount(&(0x7f0000000980)=@filename='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x0, &(0x7f0000000a40)='\x00') r8 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x0, &(0x7f0000002c40)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000002b40)=[{{&(0x7f0000000a80)=@rc={0x1f, @none}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/146, 0x92}, {&(0x7f0000000cc0)=""/91, 0x5b}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/135, 0x87}, {&(0x7f0000000e80)=""/134, 0x86}, {&(0x7f0000000f40)=""/226, 0xe2}, {&(0x7f0000001040)=""/173, 0xad}, {&(0x7f0000001100)=""/199, 0xc7}, {&(0x7f0000001200)=""/183, 0xb7}], 0xa, &(0x7f0000001380)=""/11, 0xb}, 0x7fffffff}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/180, 0xb4}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/212, 0xd4}, {&(0x7f0000002600)=""/155, 0x9b}], 0x4, &(0x7f0000002700)=""/160, 0xa0}, 0x1}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/78, 0x4e}], 0x3, &(0x7f00000029c0)=""/22, 0x16}, 0x3}, {{0x0, 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000002a40)=""/193, 0xc1}, 0x3}], 0x4, 0x10, &(0x7f0000002c80)={r9, r10+10000000}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x20, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x68}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mount$9p_rdma(&(0x7f0000002e00), &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80), 0x900040, &(0x7f0000003000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@access_uid}, {@rq={'rq', 0x3d, 0xf}}], [{@audit}, {@obj_user={'obj_user', 0x3d, 'nl80211\x00'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '\r\''}}]}}) 1.048561533s ago: executing program 4 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, r1, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@loopback, @empty, 0x14, 0x4}}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) close(0x3) 987.648927ms ago: executing program 4 (id=833): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x32, 0x0, 0x63, 0x86cc4097e8288a3a, 0x0, 0x0, 0x37, 0x34, 0xf4, 0x33, 0x0, 0x64, 0x0, 0x30, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x3a}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0x0, 0x0, 0x4, 0x9, 0x81, 0x7, 0x10, 0xfe, 0x0, 0x72}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x6, 0x12}, {0xf000, 0x60000, 0xc, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x7, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x3, 0xb9, 0x9, 0x6, 0x4, 0x4, 0x60, 0x5, 0x7, 0x7c}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xfeffffffffffff) r7 = userfaultfd(0x801) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES16=r1], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x92734453a7b78ec6}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 940.69671ms ago: executing program 3 (id=836): pidfd_send_signal(0xffffffffffffffff, 0x21, &(0x7f0000000200)={0x12, 0xffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a010, &(0x7f0000000040)='}q\x82.\xe5\x83\xf3\x8fp\xdfJ\xb6\xcf\a1N5\xe2\x95,\a\'\xfd\x87\xca\x8d\x03\x99]\xe5\xfe\xc2\xc3\xdb\xfc\x1b\xb1\x81\xb6\xb2\xdd\x12\xa5\xca\xb93)\xfd\x06i0\xab\x9e\xe0!D\xf9\xb2Xh\x81K\x85\x16\x1b\x94\xf8\v\xfc\x02f\x8e\xaaa\xe0') 937.488909ms ago: executing program 3 (id=837): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x418082) ioctl$FE_READ_UNCORRECTED_BLOCKS(r2, 0x80046f49, &(0x7f00000000c0)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10001}, @NL80211_ATTR_PEER_MEASUREMENTS={0x34, 0x111, 0x0, 0x1, {0x30, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10000}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0x7, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x20000080) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000003c0)={0x0, @adiantum, 0x0, @desc2}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000000400)) (async, rerun: 64) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000001400)={0x80, 0x1, 0x3, 0x7ff, "9e6a42c5f104f210ba306014fc1890011a0e898a3e4e1f90f128ed3c876455e2"}) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000001440)={'ip_vti0\x00'}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), r1) (rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x44}}, 0xc080000) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8800) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000017c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000001800)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xb, 0x0, 0x74, @mcast2, @empty, 0x8000, 0x40, 0xa6c, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001a80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x160, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x160}}, 0x4000040) (async, rerun: 32) close_range(r0, r6, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x70, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4ea2738540f9f9a7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20042004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000001d00)=[{0x1, 0x0, {0x0, 0x1, 0x3}, {0x2, 0x1, 0x3}, 0x2, 0x2}], 0x20) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@newspdinfo={0x24, 0x24, 0x300, 0x70bd26, 0x25dfdbfb, 0x8fd2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xfc, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000}, 0x24000810) 880.821933ms ago: executing program 3 (id=838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 810.938385ms ago: executing program 0 (id=839): syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYBLOB=' '], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_ublk_setup_io_uring(0x5e29, &(0x7f0000000000)={0x0, 0xc99c, 0x20000, 0x1, 0x46}, &(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x596d, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x10, 0x17f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x7db, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa3}}}, &(0x7f0000000300)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0xf4ad, 0x20, 0x3, 0x3e4}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeec6, 0x401, 0x1, 0x249}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb633, 0x125, 0x2, 0x11f}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52af, 0x200, 0x1, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd494, 0x10, 0x3, 0x170}}], 0x4, &(0x7f0000001580)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x4, 0x652, 0x0, &(0x7f0000000580)=@buf_1k="5b6c6996f9b99c74875ecfac3491647f50091ad2c0637d83bff9a3e1bc0254e6fbe22732ecf4f0917ebd654e4dd1e173d5bc2696fc0bccb67d618b46bd3fec138f8edb85a61d33e5a3fe8806284d8098ea8f523819263a0bc8558e092e6b372564a38462f7b5ec35b78ded6f7aa450e4753b3bf616b6bfdadc3a2f9afecafe8ee9dcb4407b5ef94ce8bce9f1f20756f9e24c7d6edfc417007afd682be248c55a649b459297fd5afb9eaffe42ea8fa0134ee0ad3343935a7792c6413d4e6f15979ec0e5164eecf9bb9e9f7abc7a75a037f83e6c78fc84edf690679cbe743b83f6a600b89c081cee47b8cfd12cfaeeb6a7791be6524bbed667bc9cc8d157997ad811ed93559cc545bcae51aa006a0236a8c24e11e86709006baf4ea6b70130c728d777cd80507dc24387d8c95f97a9da46ba810616c147d82e477cb97c0f312e494b45c3eff21b00607c9b3588aaaad93af9f65f03f59d8eb750b2bfee623b62e235c477d2762113d4d1d85964d0a40e43b6997c2c6e3791b856781ee1ceab2347af269a4eb8736c3a5bf8402edcf02dc0ba2a20217601c8509be58fd2c3c2e89cc8be4f37ff0999c036390dee3bea7b310b1a9f4883cea82b80ebe2570401ad3a6e5fd0e30aeda9c2210dc51dc60f550681ac4beab972b839c5616daf53969eb142388e89245d5b3b4e601a936fe84d7dd45b5bf1850bb19b54d89fc816120ae5cd0e303f3636cea4b590cf6555528d54483bfcf151c33cda215244c835c388b953e003a9de85a884322a634cc4cc5b17c7e0cff71fee0c6659404c74c02820b8438000adbd8edf2b00521bef320d097ff8c63526a6b4153a93124ff77d6e4934a7628d59bc92121516205ff380c6bab3ec4f963835f4a5d2ce74ba1567248b0a26ddcc68205ec90f75bcc76bb3af1ff904d6bd97598529ea9be63ffe6ec803bd4e95b0c63eaae66b4f24ecb820445bd32c1bf6685d39146216c5433b597210e0d48f7d97fd70035fb96e5a5dfc55e62276aa56e69acac885fd51a7c3e8c49d3fe336edc649b2bfa0f6af525fb7aa9080fdbfa66e4e3c5dd639b68bfcdc3543b11819eef3efe0074f4a521a8a58b72558c67a4173d390ad606bf6ce1dd56be92b142d514bde4b7edb7a9b0fbe3ed5fb80f7c059002ecc7b39ebcee9d78847c301187f7cd7140d36c4362a6c476377d099d32ad34c6c94f69cc8c9237389ace51a6d8c1cd1ebec70c48b3d13b9f9b3160c82b84bf463bdfdc264bdd7602347ef922ab9cfe7b5f7382cab97d451bf416b458b2cf48daff88d118b2f39d69de2f86b3ec7c5afb359e5a586d16ee9a94703fdb3ae99a664cc62371e0e134ef382279097a3ed6d89710ee63b702914df67b6c67a50bbebcf8e2859d8d74f29091f9c964810f80e590704237e3d8083b31585576a035764c811025b8686811622a04758"}}, &(0x7f0000001600)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, r7, &(0x7f0000001640)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd=r0, 0x0, 0x0, 0xc6d5, 0x8, 0x1, {0x0, r8, r0}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 808.292845ms ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) landlock_create_ruleset(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x45, 0x0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000600)="5cf6ef1066679cf7af801f378c414be1439bd8cd20744d7ad5278f0521701c2baa42162a3e616f7079e01783ed6a0495a59acc66b49283631526dd700b66dd3f216c567c0831d190873eebac5aa0d58294383797b5a518f4cafba430966cd8b6c70568aeabe8af9e8c9768c3093296ff5f77c2c3ddf741357e5937e68bbff02eb2270475effdd1392889979c80c95345c1487dbc5e400b9428f88d85807870982ab13a8b616440"}, {&(0x7f00000008c0)="3ac80ea57d7baff13e3d5b3f2dcd0db1da7dc7cd5917acd627d0cb13cfbea27835b5efbe5470498f2d1fcb21c56e96e1d45699d90539ebd1e451f6fe63608529c7fe2cd681ca68b80959e50664ad87e795ba5a91f979f87d808d5ceb437a88eac3e31eb10676406fa360e0bbd20bbaef6b03abfb4e51760438e6e175bd92e5766c4f5a501fe85eda1471aeae4ffdf08e2556134b955e733e63b3490e70565cf0eac6424c84015d2ea322b7ea4f704aad86ac3e43acac67ce7e1b983f1f58f9b069071ad5e67bff9427312375a4"}, {&(0x7f0000002880)="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"}]}}, {{&(0x7f00000038c0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfb72}, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003940)="af68cdc6cb8df6aa0032c25f3cf7759889e95c9f5c66868fea6e5d606d8c6f54c045c421cf24b1a84bce536ae1aa8c7187013413217b81cfa881cfb5a55744"}, {&(0x7f0000003980)="52122b38144e14419b89f4501347c413b1e46e7c5f33aeeaf77cf5680c4ae7f8252d4a01d0055a05d62a9f7011895e740647a8bdd328f99f0bd11fe03535a1"}], 0x0, &(0x7f0000003a00)=[@hoplimit={{0x0, 0x29, 0x34, 0xbf}}, @hoplimit={{0x0, 0x29, 0x34, 0x9}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x3c, 0x0, 0x2, 0x9, 0x0, [@mcast2]}}}]}}], 0x1, 0x140188d1) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x45, 0x0}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000600)="5cf6ef1066679cf7af801f378c414be1439bd8cd20744d7ad5278f0521701c2baa42162a3e616f7079e01783ed6a0495a59acc66b49283631526dd700b66dd3f216c567c0831d190873eebac5aa0d58294383797b5a518f4cafba430966cd8b6c70568aeabe8af9e8c9768c3093296ff5f77c2c3ddf741357e5937e68bbff02eb2270475effdd1392889979c80c95345c1487dbc5e400b9428f88d85807870982ab13a8b616440"}, {&(0x7f00000008c0)="3ac80ea57d7baff13e3d5b3f2dcd0db1da7dc7cd5917acd627d0cb13cfbea27835b5efbe5470498f2d1fcb21c56e96e1d45699d90539ebd1e451f6fe63608529c7fe2cd681ca68b80959e50664ad87e795ba5a91f979f87d808d5ceb437a88eac3e31eb10676406fa360e0bbd20bbaef6b03abfb4e51760438e6e175bd92e5766c4f5a501fe85eda1471aeae4ffdf08e2556134b955e733e63b3490e70565cf0eac6424c84015d2ea322b7ea4f704aad86ac3e43acac67ce7e1b983f1f58f9b069071ad5e67bff9427312375a4"}, {&(0x7f0000002880)="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"}]}}, {{&(0x7f00000038c0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfb72}, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003940)="af68cdc6cb8df6aa0032c25f3cf7759889e95c9f5c66868fea6e5d606d8c6f54c045c421cf24b1a84bce536ae1aa8c7187013413217b81cfa881cfb5a55744"}, {&(0x7f0000003980)="52122b38144e14419b89f4501347c413b1e46e7c5f33aeeaf77cf5680c4ae7f8252d4a01d0055a05d62a9f7011895e740647a8bdd328f99f0bd11fe03535a1"}], 0x0, &(0x7f0000003a00)=[@hoplimit={{0x0, 0x29, 0x34, 0xbf}}, @hoplimit={{0x0, 0x29, 0x34, 0x9}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x3c, 0x0, 0x2, 0x9, 0x0, [@mcast2]}}}]}}], 0x1, 0x140188d1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = gettid() ioprio_get$pid(0x1, r8) (async) ioprio_get$pid(0x1, r8) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 559.089044ms ago: executing program 3 (id=846): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1ab202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0xbdf45b9236d78f14}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0xbdf45b9236d78f14}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x8000, 0xff, 0x74, {{0x12, 0x4, 0x3, 0x8, 0x48, 0x65, 0x0, 0xa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x34, 0xfc, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7}, {@local, 0x8e}, {@multicast2, 0xf7}, {@multicast2, 0x7}, {@multicast2, 0xfffffffb}, {@loopback}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x3}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000240)=""/25, 0x3c, 0x19, 0x0, 0x5}, 0x28) fcntl$dupfd(r0, 0x406, r0) (async) r3 = fcntl$dupfd(r0, 0x406, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x5329, 0xd839, 0x3f, 0x30249, 0x1, 0x4c82, '\x00', r1, r2, 0x2, 0x5, 0x1, 0x0, @void, @value, @value=r3}, 0x50) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) (async) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 218.09843ms ago: executing program 1 (id=853): r0 = syz_open_pts(0xffffffffffffffff, 0x800040) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close_range(r0, r1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r2, &(0x7f00000000c0)={0xc, 0x1, 0x1, 0x2}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000140)}, 0x10) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000240)={0x6, 'pimreg0\x00', {0x7fff}, 0x5}) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000280)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) r6 = syz_open_dev$rtc(&(0x7f00000002c0), 0x5, 0x101500) ioctl$RTC_WIE_OFF(r6, 0x7010) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x160, r8, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x4d}}}}, [@NL80211_ATTR_IE={0x13d, 0x2a, [@perr={0x84, 0x116, {0x3, 0x12, [{{}, @device_b, 0x6, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x51, @value=@device_b, 0x3c}, {{}, @device_a, 0x80, @void, 0xf}, {{}, @broadcast, 0x772, @void, 0xf}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x8}, {{}, @device_b, 0x481c, @void, 0x41}, {{}, @broadcast, 0xf7d1, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x39}, {{}, @device_a, 0x6, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x12}, {{}, @broadcast, 0x7f, @void, 0x3d}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x36}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x35}, {{}, @device_b, 0xfffffffa, @void, 0x28}, {{}, @broadcast, 0x5, @void, 0x1c}, {{}, @broadcast, 0x5, @void, 0x36}, {{}, @broadcast, 0x27a, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x41}]}}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x8}}, @channel_switch={0x25, 0x3, {0x1, 0xb6, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xb5, 0x5}}, @challenge={0x10, 0x1, 0x23}, @supported_rates={0x1, 0x4, [{0x5}, {0x1b, 0x1}, {0xb, 0x1}, {0x0, 0x1}]}, @mesh_chsw={0x76, 0x6, {0xef, 0x6, 0x31, 0x5}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi5\x00', 0x800, 0x0) ioctl$COMEDI_CANCEL(r9, 0x6407) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x80, 0xc9}}}, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000019c0)={0x90, 0x0, &(0x7f0000001840)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001640)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x10}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000016c0)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001780)={@flat=@weak_binder={0x77622a85, 0x102, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000001700)=""/92, 0x5c, 0x2, 0x30}}, &(0x7f0000001800)={0x0, 0x18, 0x38}}}], 0x9b, 0x0, &(0x7f0000001900)="201bd628fa28f43da459b2bce8851e92e434029b5fd6c45e051d125ffb4aa36363f463fe02850983f6af9c24b04dc2193c1858202b1df251510cb01bcb516a0e4b86904c883bf99d75e06d8c4c412fd4d63849c098711c72a2de71a849bd93a10f48e691f7136b4e8400c09fee9720941ad5bf278c181508bdb299638f0193a8515ee7f76a93b94cd626e83c3759b3d949777e2cde4eb32871a320"}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x18, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xd7ebb75353de060c}, 0x8001) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000001b00), &(0x7f0000001b40), 0x2, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x12180, 0x120, 0x9}, 0x18) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000001cc0)={&(0x7f0000001c00)=""/141, 0x0, 0x800, 0x7}, 0x20) 217.553958ms ago: executing program 1 (id=854): r0 = socket(0x10, 0x803, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYBLOB="0800080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2800000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfsfloor}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='.\x02\x00', 0x102) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000004c0)=@other={'decodes', ' ', 'none'}, 0xd) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xe8000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000480)={'veth0_macvtap\x00', @broadcast}) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000340)={0x1, 0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 166.387276ms ago: executing program 1 (id=855): setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2bc0700bbbbbbbbbbbb08004500ff000000000000009078ac1e0001ac1414aa0304907812ae3bfc9376b7b698decf5900183f2500000000000000000100007f0000017f000001001863"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 74.10904ms ago: executing program 1 (id=856): mkdir(&(0x7f0000000000)='./file0\x00', 0x50) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0xe, 0x1) setns(r0, 0x20000) fgetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)=""/103, 0x67) setns(r0, 0x80) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x1, 0x6, 0x1000}) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000003c0)={&(0x7f00000001c0)=0xff, 0xfffffffb, &(0x7f0000000200)=[{}, {}], &(0x7f0000000380)}) getsockname$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x4d}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) write$vhost_msg_v2(r0, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000005c0)=""/41, 0x29, &(0x7f0000000600)=""/126, 0x1, 0x4}}, 0x48) ioctl$DVB_DEMUX_DMX_GET_STC(r0, 0xc0106f32, &(0x7f0000000700)={0x400}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000740), 0x0, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f0000000740), 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000780)={{0x8, 0x1, 0x4, 0x3, 0x18e977c8}, [{0xffffffffffffff00, 0x100, 0x5, 0x8}, {0x7f, 0x9, 0x5, 0x2}, {0x4, 0x3, 0x8, 0x54}, {0x3, 0x3, 0x4, 0x3}, {0x0, 0x3c, 0x4, 0x8}, {0x0, 0xb5, 0xe3, 0x7}]}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x4f, 0x0, "b21f136530f5dda4360a311b15555b19d146345ff65a3ad2ada7ee291317375df6904b6567b659e6c26ea7cb99e2dc5380e8c4112afc5e17799e65cb42d826bf607f5565aac686c734f6e387cad425a6"}, 0xd8) openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x88000, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x88000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r2) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x624}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xed}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x20040000) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x624}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xed}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000bc0)={0x0, "104fc4772b43a47d8d152fc4ab4b9056"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000bc0)={0x0, "104fc4772b43a47d8d152fc4ab4b9056"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000001bc0)={r8, 0x400, 0x0, [0x1000000000000000, 0x100, 0x27c000000000, 0x5, 0x5ad], [0x7ff, 0x9, 0x7, 0x3, 0x3, 0xffffffff, 0x123, 0x2, 0x6, 0xfffffffffffff7b6, 0x6963, 0x7fff, 0x65, 0x4, 0x1, 0x3966, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4, 0xd, 0x2, 0x2, 0x8, 0xfffffffffffffff8, 0xcdf6, 0x1, 0x6, 0xffffffff00000001, 0x9, 0x73b1, 0x3, 0x0, 0x1ff, 0x2, 0x7fffffff, 0x6, 0x0, 0x7f, 0x8000, 0x40, 0x7fffffffffffffff, 0x3, 0x4, 0xffffffffffff63b2, 0x3, 0x1000, 0xcfb, 0x1000, 0x9, 0x7ff, 0x6, 0x2, 0x7fffffffffffffff, 0x1ff, 0x9, 0x0, 0xfffffffffffffff9, 0x4, 0x7ff, 0x6, 0x0, 0x101, 0x9, 0x20000000, 0x7, 0x100000001, 0x8001, 0x2, 0x2, 0xb, 0x80, 0x2, 0x0, 0x3, 0x4, 0x6ce, 0x0, 0x3, 0xfffffffffffffffd, 0xffffffffffffff80, 0x10001, 0x5000000000000000, 0x40000000, 0xf, 0x26, 0x4ed, 0xfffffffffffffffb, 0xb93c, 0x4, 0x9, 0x800, 0x7, 0x0, 0x8, 0x1, 0x1, 0x8, 0x0, 0x7, 0x2, 0x7d, 0x2, 0x3, 0x2, 0x8000, 0x6, 0x4, 0x0, 0x2, 0x0, 0x5, 0x8000, 0x100000000, 0x0, 0x2, 0x6, 0x1, 0x5]}) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000002000)={{r6}, "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"}) openat(r6, &(0x7f0000003040)='./file0/file0\x00', 0x80000, 0x41) (async) r9 = openat(r6, &(0x7f0000003040)='./file0/file0\x00', 0x80000, 0x41) syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r9) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000003080)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x1000, 0x9, 0x8b4e, 0x2, 0xd, 0x6, 0xc, 0x2, 0x1, 0x5, 0xc, 0xcd2, 0x7fffffffffffffff, 0x9, 0x5]}, &(0x7f0000003180)=0x100) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000003080)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x1000, 0x9, 0x8b4e, 0x2, 0xd, 0x6, 0xc, 0x2, 0x1, 0x5, 0xc, 0xcd2, 0x7fffffffffffffff, 0x9, 0x5]}, &(0x7f0000003180)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000031c0)={r10, 0x33dc1c27}, &(0x7f0000003200)=0x8) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r9, 0xaf) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r9, 0xaf) 73.708412ms ago: executing program 1 (id=857): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x25, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000010000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003f85fcff03000000af370100000000006f3bf4fffcffffffb7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000400000000b70500000800000085000000a500000018000000ffffffff0000000001800000184b0001feffffff00000000000000005a515000040010009500000000000000bf9a0000ec000000b7020000010000008500b7000000000000009500000000000000d6fa87d108ad244e864a97000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x25, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000010000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003f85fcff03000000af370100000000006f3bf4fffcffffffb7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000400000000b70500000800000085000000a500000018000000ffffffff0000000001800000184b0001feffffff00000000000000005a515000040010009500000000000000bf9a0000ec000000b7020000010000008500b7000000000000009500000000000000d6fa87d108ad244e864a97000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) r1 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x1, {0x1, 0x70182ed1d815a9da, 0x5}, 0x1}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) accept4(r3, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80, 0x800) (async) accept4(r3, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80, 0x800) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) (async) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) r8 = memfd_secret(0x80000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181843, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x4) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = eventfd2(0xe5c, 0x80000) r12 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000240)={r12, 0xb2c, 0x2, r11}) eventfd2(0x6, 0x1) (async) r13 = eventfd2(0x6, 0x1) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000080)={r11, 0x7, 0x2, r13}) (async) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000080)={r11, 0x7, 0x2, r13}) close_range(r8, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r14, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000010000100000000e0ff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000500000000000000a1400000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x49, '\x00', r2, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x10, 0x48}, 0x94) 532.119µs ago: executing program 1 (id=858): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) (async) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000040)={r3, 0x3, 0x8, 0x0, 0x2, [], [0x0, 0x6, 0x2, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x380000000000000]}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000000000000001"], 0x88}}, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x4, 0x12) (async) r6 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x254, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcf, 0x1a}}}}, [@NL80211_ATTR_FRAME={0x21d, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_b, @random="58444090d99f", {0x7}, @value=@ver_80211n={0x0, 0x7ffe, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x5, @random=0x7ff, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x49}}, [{0xdd, 0xeb, "4d66f9699a469b9996d462a590711819caf08f2d1d39ba0cc8ea55d292a5e42f3a9f57d075e3cb2d1747e2844b4f73813725e6da1cc10e0159e5fcd677495cdd5dad5380bc1e0213b161978408f80c5f90c31cd3b0ae5530d0a4f429b5b084256ad5883b769ccb3a5fd01c5fb41662c1d23c17a2aa826ed9eabbe5320974b5b0641d74d9247a1896fa90f2be115051fd0340af8431524792a5432c1a9ac491418fbf19b7729c551d37eeadfa6b948bcaff7c9a83d16a040ca188652a25dff001c6cf357f583f967e285939f6e58a430fb93ca555edca1dd091480607ef64a004bfa2ebabd8b89f728579ce"}, {0xdd, 0xe9, "c0179902754149a9dbba461a70ccf1cbefae1101318f5c3d0cfbc699af0197b5ed609959596148032e36a03b2e743f05529af82b527a29b43a27c3b46ef8dc8714ae954b80279ff9b7da4e860ffd3b36da34f90d0aa84a4bddc41cd06dac7889ad7c8c46e94c3ff65384e05ef0dd1c99e24d8ce65f588d594756adcfbfaed01cd4b6f3b326821eef62d76c3e69a6212a5102c081a5e2e59aaf73a40bae79c0096845e046702bf5a54ae4d79a195855d29062fd21082549691b29711cb0610296abd743edf20fd58d56f59399dfcd704da0399b7ed7d29c731e60c7940a84732042c01aa917a3deb948"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb9c}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xfbff, 0x5, 0x6]}]}, 0x254}, 0x1, 0x0, 0x0, 0xc0}, 0x40004) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r8, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000440)={0x28, 0x1, r9, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000140)={0x18, r8}) (async) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3506}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=859): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa9780c200000086dd606410a600080000fc020000000000000000000000000000ff0200000000000000000000000000012900000000000000"], 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x60, @any, 0x200, 0x1}, 0xe) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x448400, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000340)=0xff) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000180)={0xe, 0x80000, r1}) (async) pipe2$9p(&(0x7f0000000100), 0x80) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') pread64(r4, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r12, &(0x7f0000000080)={0x27, r11, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) (async) sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x1, 0x3, {0xa, 0x1, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdac}}}, 0x80, &(0x7f00000018c0)}, 0x20000000) r13 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMEJECT_SW(r13, 0x530f, 0x1) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x0, 0xc52d}}}}]}, 0x44}}, 0x4c850) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) (async) socket(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): ure [ 52.042902][ T59] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 52.046104][ T59] rtc rtc0: __rtc_set_alarm: err=-22 [ 52.057185][ T24] usb 5-1: device descriptor read/64, error -71 [ 52.167333][ T24] usb usb5-port1: attempt power cycle [ 52.306695][ T6195] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 52.310077][ T6195] ALSA: mixer_oss: invalid index 1374389 [ 52.313261][ T6195] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 52.315694][ T6195] CIFS: VFS: Malformed UNC in devname [ 52.507680][ T24] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 52.527617][ T24] usb 5-1: device descriptor read/8, error -71 [ 52.552860][ T6203] __nla_validate_parse: 6 callbacks suppressed [ 52.552871][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 52.569012][ T6205] loop5: detected capacity change from 0 to 7 [ 52.571837][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.575330][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.578108][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.581240][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.584672][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.588367][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.592044][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.595236][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.598308][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.601422][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.604258][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.607180][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.609730][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.612580][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.614964][ T6205] ldm_validate_partition_table(): Disk read failed. [ 52.617054][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.620684][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.624084][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.627084][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.629894][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.633067][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 52.635802][ T6205] Dev loop5: unable to read RDB block 0 [ 52.638785][ T6205] loop5: unable to read partition table [ 52.640635][ T6205] loop5: partition table beyond EOD, truncated [ 52.642810][ T6205] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 52.695736][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.699870][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.747257][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 52.770805][ T6215] loop3: detected capacity change from 0 to 21199 [ 52.776313][ T6215] loop3: unable to read partition table [ 52.777645][ T24] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 52.778610][ T6215] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 52.797861][ T24] usb 5-1: device descriptor read/8, error -71 [ 52.917555][ T24] usb usb5-port1: unable to enumerate USB device [ 52.927754][ T1348] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 53.088570][ T1348] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.093488][ T1348] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 53.099395][ T1348] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 53.103366][ T1348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.106754][ T1348] usb 7-1: Product: syz [ 53.108567][ T1348] usb 7-1: Manufacturer: syz [ 53.110759][ T1348] usb 7-1: SerialNumber: syz [ 53.114512][ T1348] usb 7-1: config 0 descriptor?? [ 53.117021][ T6213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 53.167658][ T1348] rc_core: IR keymap rc-streamzap not found [ 53.170483][ T1348] Registered IR keymap rc-empty [ 53.173601][ T1348] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 53.179727][ T1348] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 53.324513][ T5825] usb 7-1: USB disconnect, device number 3 [ 53.387314][ T5741] Bluetooth: hci2: command 0x0419 tx timeout [ 53.397722][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 53.900683][ T6248] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.977778][ T6260] evm: overlay not supported [ 54.003256][ T6267] block nbd2: not configured, cannot reconfigure [ 54.053226][ T6280] usb usb2: check_ctrlrecip: process 6280 (syz.0.119) requesting ep 01 but needs 81 [ 54.057166][ T6280] usb usb2: usbfs: process 6280 (syz.0.119) did not claim interface 0 before use [ 54.087941][ T6285] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 54.316978][ T6315] tmpfs: Unknown parameter 'grpquot ' [ 54.454648][ T6331] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 54.457082][ T6331] netlink: 'syz.2.135': attribute type 2 has an invalid length. [ 54.459591][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 54.467345][ T5835] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 54.619223][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 54.624410][ T5835] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 54.628618][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.632495][ T5835] usb 5-1: Product: syz [ 54.634322][ T5835] usb 5-1: Manufacturer: syz [ 54.635765][ T5835] usb 5-1: SerialNumber: syz [ 54.638125][ T5835] usb 5-1: config 0 descriptor?? [ 54.640927][ T5835] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 54.643646][ T5835] pctv452e: pctv452e_power_ctrl: 1 [ 54.643646][ T5835] [ 54.646017][ T5835] usb 5-1: selecting invalid altsetting 3 [ 54.648588][ T5835] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 54.648588][ T5835] [ 54.651749][ T5835] dvb-usb: bulk message failed: -22 (5/0) [ 54.654835][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.658106][ T5835] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 54.660644][ T5835] usb 5-1: media controller created [ 54.662308][ T5835] dvb-usb: bulk message failed: -22 (8/0) [ 54.664087][ T5835] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 54.667077][ T5835] dvb-usb: MAC address reading failed. [ 54.671695][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.695948][ T5835] DVB: Unable to find symbol stb0899_attach() [ 54.697994][ T5835] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 54.747210][ T5835] rc_core: IR keymap rc-tt-1500 not found [ 54.749142][ T5835] Registered IR keymap rc-empty [ 54.751186][ T5835] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 54.755324][ T5835] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input6 [ 54.760175][ T5835] dvb-usb: schedule remote query interval to 100 msecs. [ 54.763019][ T5835] pctv452e: pctv452e_power_ctrl: 0 [ 54.763019][ T5835] [ 54.766046][ T5835] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 54.827241][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 54.844138][ T6305] openvswitch: netlink: Actions may not be safe on all matching packets [ 54.848945][ T5825] usb 5-1: USB disconnect, device number 6 [ 54.868729][ T5825] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 54.921239][ T6358] kvm: kvm [6356]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 54.924633][ T6358] kvm: kvm [6356]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 55.018346][ T6358] nfs: Unknown parameter 'lo-{3xck' [ 55.027347][ T6374] overlayfs: failed to resolve './file1': -2 [ 55.059188][ T6361] block nbd0: Receive control failed (result -32) [ 55.115296][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.143'. [ 55.142805][ T6384] netlink: 'syz.3.144': attribute type 2 has an invalid length. [ 55.145644][ T6384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.144'. [ 55.216113][ T42] kauditd_printk_skb: 75 callbacks suppressed [ 55.216170][ T42] audit: type=1400 audit(1782248949.651:380): avc: denied { remount } for pid=6394 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.226416][ T42] audit: type=1400 audit(1782248949.661:381): avc: denied { bind } for pid=6394 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.233493][ T42] audit: type=1400 audit(1782248949.661:382): avc: denied { node_bind } for pid=6394 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 55.240978][ T42] audit: type=1400 audit(1782248949.661:383): avc: denied { read } for pid=6394 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.467242][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 55.477221][ T5741] Bluetooth: hci2: command 0x0419 tx timeout [ 55.543307][ T42] audit: type=1400 audit(1782248949.981:384): avc: denied { map } for pid=6438 comm="syz.0.149" path="socket:[11707]" dev="sockfs" ino=11707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.550984][ T42] audit: type=1400 audit(1782248949.981:385): avc: denied { read accept } for pid=6438 comm="syz.0.149" path="socket:[11707]" dev="sockfs" ino=11707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.573924][ T42] audit: type=1400 audit(1782248950.011:386): avc: denied { setopt } for pid=6440 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.595649][ T6447] gretap1: entered promiscuous mode [ 55.598027][ T6447] batman_adv: batadv0: Adding interface: gretap1 [ 55.600106][ T6447] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 55.606221][ T6447] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 55.629672][ T6451] overlayfs: empty lowerdir [ 55.635938][ T6453] xt_hashlimit: invalid interval [ 55.639090][ T6453] netlink: 14 bytes leftover after parsing attributes in process `syz.2.154'. [ 55.644758][ T6453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.648905][ T6453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.652528][ T6453] bond0 (unregistering): Released all slaves [ 55.684955][ T6455] Bluetooth: MGMT ver 1.23 [ 55.686827][ T42] audit: type=1400 audit(1782248950.121:387): avc: denied { read } for pid=6450 comm="syz.0.153" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.687738][ T6455] input: syz1 as /devices/virtual/input/input7 [ 55.802508][ T42] audit: type=1400 audit(1782248950.241:388): avc: denied { prog_load } for pid=6456 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.808845][ T42] audit: type=1400 audit(1782248950.241:389): avc: denied { map_create } for pid=6456 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.098601][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'. [ 56.101706][ T6470] netlink: 'syz.1.158': attribute type 6 has an invalid length. [ 56.104217][ T6470] netlink: 'syz.1.158': attribute type 5 has an invalid length. [ 56.107263][ T6470] netlink: 'syz.1.158': attribute type 4 has an invalid length. [ 56.108205][ T6476] netlink: 112 bytes leftover after parsing attributes in process `syz.3.160'. [ 56.145034][ T6478] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 56.182341][ T6482] syzkaller0: entered promiscuous mode [ 56.184280][ T6482] syzkaller0: entered allmulticast mode [ 56.270486][ T6488] random: crng reseeded on system resumption [ 56.640954][ T6505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.169'. [ 56.643810][ T6505] tipc: Invalid UDP bearer configuration [ 56.643828][ T6505] tipc: Enabling of bearer rejected, failed to enable media [ 56.724506][ T6509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6509 comm=syz.3.170 [ 56.751432][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 56.811125][ T41] cfg80211: failed to load regulatory.db [ 56.832883][ T6521] vcan1: entered allmulticast mode [ 56.841946][ T6525] Illegal XDP return value 664326068 on prog (id 18) dev N/A, expect packet loss! [ 56.907294][ T5741] Bluetooth: hci0: command 0x040f tx timeout [ 57.015933][ T6536] sit1: entered promiscuous mode [ 57.086986][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 57.099057][ T6547] bond0: entered promiscuous mode [ 57.100792][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.107234][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26384 sclass=netlink_route_socket pid=6547 comm=syz.2.179 [ 57.181614][ T6550] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.547369][ T5741] Bluetooth: hci1: command 0x040f tx timeout [ 57.547387][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 57.775023][ T6570] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 57.777590][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 57.780267][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 57.782904][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 57.783184][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.788789][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.791177][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.793554][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.795860][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.798837][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.801273][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.803836][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.806386][ T61] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 57.812347][ T61] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.04 Device [syz1] on syz1 [ 57.833090][ T6578] fido_id[6578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.890429][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.912886][ T6586] Bluetooth: hci0: load_link_keys: too big key_count value 24940 [ 57.915208][ T6591] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 57.918023][ T6591] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.921201][ T6591] vhci_hcd vhci_hcd.0: Device attached [ 57.939334][ T6592] vhci_hcd: connection closed [ 57.939558][ T12] vhci_hcd vhci_hcd.0: stop threads [ 57.943802][ T12] vhci_hcd vhci_hcd.0: release socket [ 57.946121][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 58.328315][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.674912][ T6648] xt_connbytes: Forcing CT accounting to be enabled [ 58.778614][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.836046][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.893985][ T6663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.919475][ T6672] veth0_to_bond: entered allmulticast mode [ 58.919570][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 58.968102][ T5835] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.971630][ T6676] erspan0: entered promiscuous mode [ 58.977234][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 58.997256][ T5735] Bluetooth: hci0: command 0x040f tx timeout [ 59.003587][ T6684] netlink: 'syz.3.216': attribute type 11 has an invalid length. [ 59.006852][ T6684] netlink: 224 bytes leftover after parsing attributes in process `syz.3.216'. [ 59.015698][ T6684] kAFS: unable to lookup cell 'syz0' [ 59.018509][ T6684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.216'. [ 59.044657][ T6691] netlink: 'syz.1.219': attribute type 39 has an invalid length. [ 59.095730][ T6693] netlink: 'syz.1.219': attribute type 7 has an invalid length. [ 59.098463][ T6693] netlink: 'syz.1.219': attribute type 28 has an invalid length. [ 59.101364][ T6693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'. [ 59.104214][ T6693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'. [ 59.139988][ T5835] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 59.142655][ T5835] usb 5-1: config 0 has no interface number 0 [ 59.144581][ T5835] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.150590][ T5835] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 59.154157][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.156758][ T5835] usb 5-1: Product: syz [ 59.158431][ T5835] usb 5-1: Manufacturer: syz [ 59.160155][ T5835] usb 5-1: SerialNumber: syz [ 59.164042][ T5835] usb 5-1: config 0 descriptor?? [ 59.168624][ T5835] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 59.422673][ T6704] binder: 6656:6704 ioctl c018620c 200000000040 returned -22 [ 59.431916][ T6703] loop4: detected capacity change from 0 to 2640 [ 59.435130][ T6703] buffer_io_error: 10 callbacks suppressed [ 59.435144][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.441218][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.444667][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.450483][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.454156][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.457604][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.461154][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.464542][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.468076][ T6703] ldm_validate_partition_table(): Disk read failed. [ 59.471020][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.474494][ T6703] Buffer I/O error on dev loop4, logical block 0, async page read [ 59.478231][ T6703] Dev loop4: unable to read RDB block 0 [ 59.480930][ T6703] loop4: unable to read partition table [ 59.483636][ T6703] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 59.556309][ T5142] ldm_validate_partition_table(): Disk read failed. [ 59.559426][ T5142] Dev loop4: unable to read RDB block 0 [ 59.562014][ T5142] loop4: unable to read partition table [ 59.575023][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 59.627198][ T5735] Bluetooth: hci1: command 0x040f tx timeout [ 59.668600][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 59.685332][ T6717] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 3, id = 0 [ 59.790770][ T6729] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20001 [ 60.127209][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.257236][ T5835] usb 6-1: device descriptor read/64, error -71 [ 60.497197][ T5835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.595821][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 60.595873][ T42] audit: type=1400 audit(1782248955.031:462): avc: denied { name_connect } for pid=6753 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 60.627403][ T5835] usb 6-1: device descriptor read/64, error -71 [ 60.737351][ T5835] usb usb6-port1: attempt power cycle [ 61.077418][ T5835] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.097543][ T5835] usb 6-1: device descriptor read/8, error -71 [ 61.337194][ T5835] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 61.357545][ T5835] usb 6-1: device descriptor read/8, error -71 [ 61.467585][ T5835] usb usb6-port1: unable to enumerate USB device [ 61.480630][ T6761] random: crng reseeded on system resumption [ 61.485188][ T6761] Restarting kernel threads ... [ 61.487594][ T6761] Done restarting kernel threads. [ 61.492271][ T6761] Restarting kernel threads ... [ 61.494727][ T6761] Done restarting kernel threads. [ 61.520456][ T42] audit: type=1400 audit(1782248955.961:463): avc: denied { connect } for pid=6765 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.529413][ T42] audit: type=1400 audit(1782248955.961:464): avc: denied { write } for pid=6765 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.561826][ T42] audit: type=1400 audit(1782248956.001:465): avc: denied { ioctl } for pid=6768 comm="syz.2.241" path="socket:[13283]" dev="sockfs" ino=13283 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.720853][ T42] audit: type=1400 audit(1782248956.161:466): avc: denied { append } for pid=6773 comm="syz.2.242" path="socket:[13289]" dev="sockfs" ino=13289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.738986][ T847] usb 5-1: USB disconnect, device number 7 [ 61.742033][ T847] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 61.743947][ T42] audit: type=1400 audit(1782248956.181:467): avc: denied { connect } for pid=6775 comm="syz.2.243" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.750582][ T42] audit: type=1400 audit(1782248956.181:468): avc: denied { write } for pid=6775 comm="syz.2.243" path="socket:[12127]" dev="sockfs" ino=12127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.757623][ T42] audit: type=1400 audit(1782248956.181:469): avc: denied { create } for pid=6775 comm="syz.2.243" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.764082][ T42] audit: type=1400 audit(1782248956.181:470): avc: denied { link } for pid=6775 comm="syz.2.243" name="#13" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.771620][ T42] audit: type=1400 audit(1782248956.181:471): avc: denied { rename } for pid=6775 comm="syz.2.243" name="#14" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.828841][ T6787] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 61.905163][ T5836] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.907890][ T5836] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.911551][ T5836] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.914210][ T5836] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.703410][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.706043][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.710183][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.713161][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.716312][ T6813] batman_adv: batadv0: Removing interface: gretap1 [ 62.901647][ T73] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.905187][ T6817] fuse: Unknown parameter '&d' [ 62.934550][ T6817] __nla_validate_parse: 7 callbacks suppressed [ 62.934564][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 62.947607][ T6817] bond1: entered promiscuous mode [ 62.949981][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.954672][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 63.395549][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 63.407031][ T6846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'. [ 63.471051][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 63.475252][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 63.479422][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 63.483432][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 63.771428][ T6892] overlayfs: missing 'lowerdir' [ 63.907178][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 64.621124][ T6957] /dev/sr0: Can't open blockdev [ 64.907346][ T5741] Bluetooth: hci4: command 0x1003 tx timeout [ 64.907373][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.077438][ T5826] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.247230][ T5826] usb 8-1: Using ep0 maxpacket: 16 [ 65.250496][ T5826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.254568][ T5826] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 65.259548][ T5826] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 65.263263][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.267946][ T5826] usb 8-1: config 0 descriptor?? [ 65.272173][ T5826] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 65.729710][ T7008] tmpfs: Unknown parameter 'nr_iNode{' [ 65.758339][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.761684][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.783447][ T7016] loop4: detected capacity change from 0 to 2640 [ 65.787856][ T6016] buffer_io_error: 118 callbacks suppressed [ 65.787866][ T6016] Buffer I/O error on dev loop4, logical block 0, async page read [ 65.796440][ T6016] Buffer I/O error on dev loop4, logical block 0, async page read [ 65.802433][ T6016] Buffer I/O error on dev loop4, logical block 0, async page read [ 65.805629][ T6016] Buffer I/O error on dev loop4, logical block 0, async page read [ 65.809497][ T6016] Buffer I/O error on dev loop4, logical block 0, async page read [ 65.820940][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.826355][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.848840][ T7008] veth0_vlan: left promiscuous mode [ 65.883456][ T5836] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.886060][ T5836] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.889380][ T5836] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.891972][ T5836] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.894568][ T5836] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.897286][ T5836] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.899815][ T5836] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.902445][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 65.902453][ T42] audit: type=1400 audit(1782248960.341:494): avc: denied { write } for pid=7024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.903413][ T5836] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.926789][ T42] audit: type=1400 audit(1782248960.361:495): avc: denied { write } for pid=7027 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.968873][ T42] audit: type=1400 audit(1782248960.411:496): avc: denied { write } for pid=7029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.995787][ T42] audit: type=1400 audit(1782248960.431:497): avc: denied { write } for pid=7032 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.033302][ T42] audit: type=1400 audit(1782248960.471:498): avc: denied { write } for pid=7034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.058724][ T42] audit: type=1400 audit(1782248960.501:499): avc: denied { write } for pid=7037 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.530260][ T7042] hpfs: Bad magic ... probably not HPFS [ 66.530389][ T7017] usb 8-1: USB disconnect, device number 2 [ 66.544079][ T7044] overlayfs: failed to resolve './file0': -40 [ 66.668456][ T5731] IPVS: starting estimator thread 0... [ 66.757236][ T7057] IPVS: using max 33 ests per chain, 79200 per kthread [ 66.807962][ T5105] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.808579][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 66.820978][ T42] audit: type=1400 audit(1782248961.261:500): avc: denied { ioctl } for pid=7061 comm="syz.3.293" path="socket:[13913]" dev="sockfs" ino=13913 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.821091][ T7062] syzkaller0: entered promiscuous mode [ 66.833088][ T7062] syzkaller0: entered allmulticast mode [ 66.842803][ T42] audit: type=1400 audit(1782248961.281:501): avc: denied { create } for pid=7061 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.850757][ T42] audit: type=1400 audit(1782248961.291:502): avc: denied { sys_admin } for pid=7061 comm="syz.3.293" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.863433][ T7062] VFS: Mount too revealing [ 66.863488][ T42] audit: type=1400 audit(1782248961.301:503): avc: denied { mount } for pid=7061 comm="syz.3.293" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.937411][ T5105] usb 6-1: device descriptor read/64, error -71 [ 66.942145][ T7072] CIFS mount error: No usable UNC path provided in device string! [ 66.942145][ T7072] [ 66.946196][ T7072] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 66.951112][ T7072] program syz.3.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.955048][ T7072] ata1.00: invalid command format 67 [ 66.991540][ T7074] ======================================================= [ 66.991540][ T7074] WARNING: The mand mount option has been deprecated and [ 66.991540][ T7074] and is ignored by this kernel. Remove the mand [ 66.991540][ T7074] option from the mount to silence this warning. [ 66.991540][ T7074] ======================================================= [ 67.177263][ T5105] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 67.307209][ T5105] usb 6-1: device descriptor read/64, error -71 [ 67.335554][ T7087] batadv_slave_1: entered promiscuous mode [ 67.352089][ T7087] IPv6: syztnl0: Disabled Multicast RS [ 67.417340][ T5105] usb usb6-port1: attempt power cycle [ 67.644569][ T7105] macsec1: entered promiscuous mode [ 67.757359][ T5105] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 67.777710][ T5105] usb 6-1: device descriptor read/8, error -71 [ 67.795261][ T7111] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 68.017603][ T5105] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 68.037789][ T5105] usb 6-1: device descriptor read/8, error -71 [ 68.157296][ T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.160180][ T5105] usb usb6-port1: unable to enumerate USB device [ 68.317593][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 68.320611][ T41] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 68.323741][ T41] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 68.327172][ T41] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 68.330137][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.334041][ T41] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 68.336827][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.339528][ T41] usb 5-1: Product: syz [ 68.340824][ T41] usb 5-1: Manufacturer: syz [ 68.342396][ T41] usb 5-1: SerialNumber: syz [ 68.344487][ T41] usb 5-1: config 0 descriptor?? [ 68.548548][ T41] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 68.552074][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.555838][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.559819][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.563737][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.572265][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.576425][ T5739] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.580159][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.585757][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.589036][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.807216][ T7118] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 68.814830][ T34] usb 5-1: USB disconnect, device number 8 [ 68.950808][ T7141] netlink: 'syz.3.318': attribute type 2 has an invalid length. [ 68.997609][ T5735] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 68.998026][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 69.002733][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 69.005423][ T7145] netlink: 'syz.3.320': attribute type 19 has an invalid length. [ 69.010633][ T5836] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.013746][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 69.014197][ T5836] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.016453][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 69.016470][ T7146] netlink: 'syz.3.320': attribute type 19 has an invalid length. [ 69.026736][ T5836] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.029528][ T5836] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.083726][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 69.084050][ T7155] netlink: 1 bytes leftover after parsing attributes in process `syz.3.323'. [ 69.121372][ T7159] 9pnet_virtio: no channels available for device syz [ 69.484507][ T7166] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.709886][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.715258][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.719470][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.723752][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.728732][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.731165][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.735230][ T7175] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 69.738878][ T7175] SELinux: failed to load policy [ 69.741789][ T7179] netlink: 'syz.0.329': attribute type 5 has an invalid length. [ 69.769027][ T7183] xt_ecn: cannot match TCP bits for non-tcp packets [ 69.983709][ T7198] tmpfs: Bad value for 'mpol' [ 70.005973][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'. [ 70.029365][ T7204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.034517][ T7202] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 70.055199][ T7213] comedi: valid board names for 8255 driver are: [ 70.058291][ T7213] 8255 [ 70.059163][ T7213] comedi: valid board names for vmk80xx driver are: [ 70.061774][ T7213] vmk80xx [ 70.063054][ T7213] comedi: valid board names for usbduxsigma driver are: [ 70.065547][ T7213] usbduxsigma [ 70.066823][ T7213] comedi: valid board names for usbduxfast driver are: [ 70.069721][ T7213] usbduxfast [ 70.071075][ T7213] comedi: valid board names for usbdux driver are: [ 70.073741][ T7213] usbdux [ 70.074934][ T7213] comedi: valid board names for ni6501 driver are: [ 70.077778][ T7213] ni6501 [ 70.078987][ T7213] comedi: valid board names for dt9812 driver are: [ 70.081362][ T7213] dt9812 [ 70.082572][ T7213] comedi: valid board names for ni_labpc_cs driver are: [ 70.085379][ T7213] ni_labpc_cs [ 70.086823][ T7213] comedi: valid board names for ni_daq_700 driver are: [ 70.091348][ T7213] ni_daq_700 [ 70.092757][ T7213] comedi: valid board names for labpc_pci driver are: [ 70.095497][ T7213] labpc_pci [ 70.096824][ T7213] comedi: valid board names for adl_pci9118 driver are: [ 70.099989][ T7213] pci9118dg [ 70.101111][ T7213] pci9118hg [ 70.102366][ T7213] pci9118hr [ 70.103661][ T7213] comedi: valid board names for 8255_pci driver are: [ 70.105950][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 70.106385][ T7213] 8255_pci [ 70.111427][ T7213] comedi: valid board names for s526 driver are: [ 70.114759][ T7213] s526 [ 70.115990][ T7213] comedi: valid board names for multiq3 driver are: [ 70.118953][ T7213] multiq3 [ 70.120351][ T7213] comedi: valid board names for pcmuio driver are: [ 70.123140][ T7213] pcmuio48 [ 70.125496][ T7213] pcmuio96 [ 70.126885][ T7213] comedi: valid board names for pcmmio driver are: [ 70.129506][ T7213] pcmmio [ 70.130513][ T7213] comedi: valid board names for pcmda12 driver are: [ 70.133043][ T7213] pcmda12 [ 70.134366][ T7213] comedi: valid board names for pcmad driver are: [ 70.137592][ T7213] pcmad12 [ 70.138963][ T7213] pcmad16 [ 70.140323][ T7213] comedi: valid board names for ni_labpc driver are: [ 70.144258][ T7213] lab-pc-1200 [ 70.145756][ T7213] lab-pc-1200ai [ 70.147331][ T7213] lab-pc+ [ 70.148592][ T7213] comedi: valid board names for atmio16 driver are: [ 70.151235][ T7213] atmio16 [ 70.152524][ T7213] atmio16d [ 70.155091][ T7213] comedi: valid board names for ni_at_ao driver are: [ 70.157494][ T7213] at-ao-6 [ 70.158584][ T7213] at-ao-10 [ 70.159910][ T7213] comedi: valid board names for ni_at_a2150 driver are: [ 70.162386][ T7213] ni_at_a2150 [ 70.163483][ T7213] comedi: valid board names for adq12b driver are: [ 70.165553][ T7213] adq12b [ 70.166490][ T7213] comedi: valid board names for mpc624 driver are: [ 70.168889][ T7213] mpc624 [ 70.169929][ T7213] comedi: valid board names for c6xdigio driver are: [ 70.172417][ T7213] c6xdigio [ 70.173811][ T7213] comedi: valid board names for aio_iiro_16 driver are: [ 70.176631][ T7213] aio_iiro_16 [ 70.178603][ T7213] comedi: valid board names for aio_aio12_8 driver are: [ 70.182761][ T7213] aio_aio12_8 [ 70.183897][ T7213] aio_ai12_8 [ 70.185081][ T7213] aio_ao12_4 [ 70.186268][ T7213] comedi: valid board names for fl512 driver are: [ 70.190302][ T7213] fl512 [ 70.191263][ T7213] comedi: valid board names for dmm32at driver are: [ 70.195078][ T7213] dmm32at [ 70.196188][ T7213] comedi: valid board names for dt282x driver are: [ 70.198551][ T7213] dt2821 [ 70.199531][ T7213] dt2821-f [ 70.200636][ T7213] dt2821-g [ 70.201707][ T7213] dt2823 [ 70.202643][ T7213] dt2824-pgh [ 70.203744][ T7213] dt2824-pgl [ 70.204870][ T7213] dt2825 [ 70.205813][ T7213] dt2827 [ 70.206812][ T7213] dt2828 [ 70.207906][ T7213] dt2829 [ 70.208891][ T7213] dt21-ez [ 70.210211][ T7213] dt23-ez [ 70.211531][ T7213] dt24-ez [ 70.212824][ T7213] dt24-ez-pgl [ 70.214268][ T7213] comedi: valid board names for dt2817 driver are: [ 70.216884][ T7213] dt2817 [ 70.218554][ T7213] comedi: valid board names for dt2815 driver are: [ 70.221256][ T7213] dt2815 [ 70.222516][ T7213] comedi: valid board names for dt2814 driver are: [ 70.225215][ T7213] dt2814 [ 70.226450][ T7213] comedi: valid board names for dt2811 driver are: [ 70.229221][ T7213] dt2811-pgh [ 70.230652][ T7213] dt2811-pgl [ 70.232098][ T7213] comedi: valid board names for dt2801 driver are: [ 70.234766][ T7213] dt2801 [ 70.236076][ T7213] comedi: valid board names for das6402 driver are: [ 70.239417][ T7213] das6402-12 [ 70.240928][ T7213] das6402-16 [ 70.242406][ T7213] comedi: valid board names for das1800 driver are: [ 70.245119][ T7213] das-1701st [ 70.246558][ T7213] das-1701st-da [ 70.248132][ T7213] das-1702st [ 70.249901][ T7213] das-1702st-da [ 70.251765][ T7213] das-1702hr [ 70.253192][ T7213] das-1702hr-da [ 70.254634][ T7213] das-1701ao [ 70.256050][ T7213] das-1702ao [ 70.257606][ T7213] das-1801st [ 70.259279][ T7213] das-1801st-da [ 70.260708][ T7213] das-1802st [ 70.262117][ T7213] das-1802st-da [ 70.263613][ T7213] das-1802hr [ 70.264944][ T7213] das-1802hr-da [ 70.266428][ T7213] das-1801hc [ 70.267883][ T7213] das-1802hc [ 70.269280][ T7213] das-1801ao [ 70.270615][ T7213] das-1802ao [ 70.272005][ T7213] comedi: valid board names for das800 driver are: [ 70.274617][ T7213] das-800 [ 70.275877][ T7213] cio-das800 [ 70.277377][ T7213] das-801 [ 70.278566][ T7213] cio-das801 [ 70.279652][ T7213] das-802 [ 70.280692][ T7213] cio-das802 [ 70.281815][ T7213] cio-das802/16 [ 70.283016][ T7213] comedi: valid board names for isa-das08 driver are: [ 70.285187][ T7213] isa-das08 [ 70.286228][ T7213] das08-pgm [ 70.287356][ T7213] das08-pgh [ 70.288406][ T7213] das08-pgl [ 70.289499][ T7213] das08-aoh [ 70.290666][ T7213] das08-aol [ 70.291939][ T7213] das08-aom [ 70.292973][ T7213] das08/jr-ao [ 70.294108][ T7213] das08jr-16-ao [ 70.295216][ T7213] pc104-das08 [ 70.296269][ T7213] das08jr/16 [ 70.297386][ T7213] comedi: valid board names for das16m1 driver are: [ 70.299802][ T7213] das16m1 [ 70.300783][ T7213] comedi: valid board names for dac02 driver are: [ 70.303155][ T7213] dac02 [ 70.304452][ T7213] comedi: valid board names for rti802 driver are: [ 70.306661][ T7213] rti802 [ 70.307913][ T7213] comedi: valid board names for rti800 driver are: [ 70.310458][ T7213] rti800 [ 70.311619][ T7213] rti815 [ 70.312748][ T7213] comedi: valid board names for pcm3724 driver are: [ 70.315228][ T7213] pcm3724 [ 70.316241][ T7213] comedi: valid board names for pcl818 driver are: [ 70.318373][ T7213] pcl818l [ 70.319356][ T7213] pcl818h [ 70.320421][ T7213] pcl818hd [ 70.321490][ T7213] pcl818hg [ 70.322543][ T7213] pcl818 [ 70.323551][ T7213] pcl718 [ 70.324587][ T7213] pcm3718 [ 70.325634][ T7213] comedi: valid board names for pcl816 driver are: [ 70.327745][ T7213] pcl816 [ 70.328719][ T7213] pcl814b [ 70.329735][ T7213] comedi: valid board names for pcl812 driver are: [ 70.331847][ T7213] pcl812 [ 70.332797][ T7213] pcl812pg [ 70.333893][ T7213] acl8112pg [ 70.334930][ T7213] acl8112dg [ 70.336000][ T7213] acl8112hg [ 70.337055][ T7213] a821pgl [ 70.338147][ T7213] a821pglnda [ 70.339222][ T7213] a821pgh [ 70.340189][ T7213] a822pgl [ 70.341219][ T7213] a822pgh [ 70.342266][ T7213] a823pgl [ 70.343285][ T7213] a823pgh [ 70.344002][ T175] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 70.344268][ T7213] pcl813 [ 70.344274][ T7213] pcl813b [ 70.350831][ T7213] acl8113 [ 70.351867][ T7213] iso813 [ 70.352798][ T7213] acl8216 [ 70.353878][ T7213] a826pg [ 70.354868][ T7213] comedi: valid board names for pcl730 driver are: [ 70.356941][ T7213] pcl730 [ 70.357947][ T7213] iso730 [ 70.358928][ T7213] acl7130 [ 70.359966][ T7213] pcm3730 [ 70.360983][ T7213] pcl725 [ 70.362316][ T7213] p8r8dio [ 70.363358][ T7213] acl7225b [ 70.364417][ T7213] p16r16dio [ 70.365467][ T7213] pcl733 [ 70.366419][ T7213] pcl734 [ 70.367526][ T7213] opmm-1616-xt [ 70.368674][ T7213] pearl-mm-p [ 70.369780][ T7213] ir104-pbf [ 70.370803][ T7213] comedi: valid board names for pcl726 driver are: [ 70.372857][ T7213] pcl726 [ 70.373901][ T7213] pcl727 [ 70.374875][ T7213] pcl728 [ 70.375829][ T7213] acl6126 [ 70.376840][ T7213] acl6128 [ 70.377911][ T7213] comedi: valid board names for pcl724 driver are: [ 70.379966][ T7213] pcl724 [ 70.380928][ T7213] pcl722 [ 70.381890][ T7213] pcl731 [ 70.382889][ T7213] acl7122 [ 70.384173][ T7213] acl7124 [ 70.385432][ T7213] pet48dio [ 70.386474][ T7213] pcmio48 [ 70.387581][ T7213] onyx-mm-dio [ 70.388685][ T7213] comedi: valid board names for pcl711 driver are: [ 70.390833][ T7213] pcl711 [ 70.391806][ T7213] pcl711b [ 70.392859][ T7213] acl8112hg [ 70.394004][ T7213] acl8112dg [ 70.395049][ T7213] comedi: valid board names for amplc_pc263 driver are: [ 70.397273][ T7213] pc263 [ 70.398599][ T7213] comedi: valid board names for amplc_pc236 driver are: [ 70.400726][ T7213] pc36at [ 70.402053][ T7213] comedi: valid board names for amplc_dio200 driver are: [ 70.404632][ T7213] pc212e [ 70.405604][ T7213] pc214e [ 70.406562][ T7213] pc215e [ 70.407591][ T7213] pc218e [ 70.408533][ T7213] pc272e [ 70.409500][ T7213] comedi: valid board names for comedi_parport driver are: [ 70.411749][ T7213] comedi_parport [ 70.412924][ T7213] comedi: valid board names for comedi_test driver are: [ 70.415284][ T7213] comedi_test [ 70.416373][ T7213] comedi: valid board names for comedi_bond driver are: [ 70.418659][ T7213] comedi_bond [ 70.464300][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 70.492048][ T7266] 9pnet_virtio: no channels available for device syz [ 70.557757][ T7274] futex_wake_op: syz.0.352 tries to shift op by -1; fix this program [ 70.720389][ T7278] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.744368][ C0] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.748177][ C0] sr 2:0:0:0: [sr0] tag#10 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 70.801757][ T7282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.354'. [ 71.160498][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 71.160514][ T42] audit: type=1400 audit(1782248965.601:526): avc: denied { ioctl } for pid=7283 comm="syz.0.355" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.469926][ T7018] IPVS: starting estimator thread 0... [ 71.490252][ T7299] tmpfs: Bad value for 'mpol' [ 71.492045][ T42] audit: type=1400 audit(1782248965.931:527): avc: denied { connect } for pid=7298 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.529674][ T42] audit: type=1400 audit(1782248965.971:528): avc: denied { read } for pid=7298 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.567452][ T7297] IPVS: using max 56 ests per chain, 134400 per kthread [ 71.599340][ T7310] bridge2: entered promiscuous mode [ 71.601085][ T7310] bridge2: entered allmulticast mode [ 71.706220][ T42] audit: type=1400 audit(1782773254.145:529): avc: denied { setopt } for pid=7316 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.764255][ T42] audit: type=1400 audit(1782773254.205:530): avc: denied { append } for pid=7324 comm="syz.1.366" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.011466][ T42] audit: type=1400 audit(1782773254.455:531): avc: denied { read } for pid=7330 comm="syz.0.369" path="socket:[18454]" dev="sockfs" ino=18454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.064268][ T7339] syzkaller0: entered promiscuous mode [ 72.066076][ T7339] syzkaller0: entered allmulticast mode [ 72.087299][ T5105] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 72.169628][ T42] audit: type=1400 audit(1782773254.615:532): avc: denied { create } for pid=7340 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.189728][ T7341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16518 sclass=netlink_route_socket pid=7341 comm=syz.0.372 [ 72.237197][ T5105] usb 6-1: Using ep0 maxpacket: 8 [ 72.240257][ T5105] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.242766][ T5105] usb 6-1: config 0 has no interface number 0 [ 72.244662][ T5105] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 46, changing to 9 [ 72.248451][ T5105] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17779, setting to 1024 [ 72.251921][ T5105] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.254691][ T5105] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.258713][ T5105] usb 6-1: config 0 descriptor?? [ 72.261283][ T7329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.266277][ T5105] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 72.523058][ C2] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 72.526054][ T5105] usb 6-1: USB disconnect, device number 11 [ 73.110826][ T42] audit: type=1400 audit(1782773255.538:533): avc: denied { map } for pid=7363 comm="syz.1.379" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.174955][ T7377] binder: 7372:7377 ioctl c018620b 0 returned -14 [ 73.176083][ T7375] syzkaller0: entered promiscuous mode [ 73.176094][ T7375] syzkaller0: entered allmulticast mode [ 73.177624][ T7375] tipc: Started in network mode [ 73.185354][ T7375] tipc: Node identity 4a64baf899f4, cluster identity 4711 [ 73.189011][ T7375] tipc: Enabled bearer , priority 0 [ 73.195521][ T7373] tipc: Resetting bearer [ 73.199022][ T7373] tipc: Disabling bearer [ 73.215206][ T42] audit: type=1400 audit(1782773255.635:534): avc: denied { read } for pid=7384 comm="syz.1.385" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.222013][ T42] audit: type=1400 audit(1782773255.635:535): avc: denied { open } for pid=7384 comm="syz.1.385" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.499785][ T7409] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 73.538403][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 73.540665][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.543814][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.546500][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 73.548570][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.551056][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.553471][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 73.555482][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.557801][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.560151][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 73.562224][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.565953][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.568427][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 73.570496][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.574027][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.576554][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 73.578671][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.581358][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.586584][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 73.588741][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.593088][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.596051][ T7413] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(21) [ 73.598266][ T7413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.601460][ T7413] vhci_hcd vhci_hcd.0: Device attached [ 73.606806][ T7413] vhci_hcd vhci_hcd.0: port 0 already used [ 73.785216][ T7018] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.788379][ T7021] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 73.950024][ T7018] usb 8-1: Using ep0 maxpacket: 16 [ 73.952761][ T7018] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 73.956973][ T7018] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 73.959750][ T7018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.962315][ T7018] usb 8-1: Product: syz [ 73.963550][ T7018] usb 8-1: Manufacturer: syz [ 73.964969][ T7018] usb 8-1: SerialNumber: syz [ 73.967181][ T7018] usb 8-1: config 0 descriptor?? [ 73.969876][ T7018] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 73.976346][ T7018] usb 8-1: Detected FT232B [ 74.186821][ T7431] vhci_hcd: connection closed [ 74.187044][ T7429] vhci_hcd: connection closed [ 74.187546][ T7427] vhci_hcd: connection closed [ 74.189126][ T7417] usb 43-1: recv xbuf, 0 [ 74.189793][ T7425] vhci_hcd: connection closed [ 74.189912][ T7423] vhci_hcd: connection closed [ 74.190019][ T7421] vhci_hcd: connection closed [ 74.190121][ T7419] vhci_hcd: connection closed [ 74.190282][ T7018] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 74.190694][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.190714][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.190770][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.191913][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.191928][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.192001][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.192187][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.192201][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.192247][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.192393][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.194136][ T7018] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 74.195432][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.197278][ T7018] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 74.198409][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.201149][ T7018] usb 8-1: USB disconnect, device number 3 [ 74.207832][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.211159][ T7018] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 74.212077][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.213749][ T7018] ftdi_sio 8-1:0.0: device disconnected [ 74.215365][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.239015][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.240644][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.242427][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.244345][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.246001][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.247732][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.249653][ T5836] vhci_hcd vhci_hcd.3: stop threads [ 74.251287][ T5836] vhci_hcd vhci_hcd.3: release socket [ 74.253024][ T5836] vhci_hcd vhci_hcd.3: disconnect device [ 74.260262][ T7021] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 74.329190][ T7439] smb3: Unknown parameter 'nocaseerfs/binder0' [ 74.341627][ T7439] __nla_validate_parse: 10 callbacks suppressed [ 74.341639][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 74.346243][ T7439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.394'. [ 74.348904][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 74.845818][ T7462] No control pipe specified [ 74.849020][ T7464] 9pnet_virtio: no channels available for device syz [ 74.901065][ T7462] validate_nla: 29 callbacks suppressed [ 74.901106][ T7462] netlink: 'syz.0.401': attribute type 12 has an invalid length. [ 75.757726][ T7475] input: syz0 as /devices/virtual/input/input10 [ 75.902198][ T7480] 9pnet_virtio: no channels available for device syz [ 75.907480][ T7480] 9pnet_virtio: no channels available for device syz [ 75.997320][ T7488] geneve2: entered promiscuous mode [ 76.024015][ T7491] overlayfs: upper fs does not support file handles, falling back to index=off. [ 76.091191][ T7494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.093990][ T7494] overlayfs: failed to set xattr on upper [ 76.095905][ T7494] overlayfs: ...falling back to redirect_dir=nofollow. [ 76.098611][ T7494] overlayfs: ...falling back to index=off. [ 76.101402][ T7494] overlayfs: ...falling back to uuid=null. [ 76.103766][ T7494] overlayfs: ...falling back to xino=off. [ 76.105829][ T7494] overlayfs: maximum fs stacking depth exceeded [ 76.168986][ T7497] 9p: Bad value for 'version' [ 76.228141][ T7499] syz.0.412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.398775][ T7508] syzkaller0: entered promiscuous mode [ 76.400700][ T7508] syzkaller0: entered allmulticast mode [ 76.404737][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 76.404750][ T42] audit: type=1400 audit(1782773258.735:550): avc: denied { append } for pid=7507 comm="syz.0.415" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.414228][ T42] audit: type=1400 audit(1782773258.735:551): avc: denied { map } for pid=7507 comm="syz.0.415" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.421714][ T42] audit: type=1400 audit(1782773258.735:552): avc: denied { execute } for pid=7507 comm="syz.0.415" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 76.470085][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.472260][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.567993][ T42] audit: type=1400 audit(1782773258.891:553): avc: denied { bind } for pid=7509 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.568275][ T7510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.416'. [ 76.650802][ T7518] raw_sendmsg: syz.0.417 forgot to set AF_INET. Fix it! [ 76.688105][ T7521] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 76.691102][ T42] audit: type=1400 audit(1782773259.017:554): avc: denied { write } for pid=7520 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.733367][ T7524] qrtr: Invalid version 48 [ 76.793007][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.422'. [ 76.807191][ T7530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7530 comm=syz.0.422 [ 76.813543][ T7530] 9pnet_virtio: no channels available for device syz [ 77.304105][ T42] audit: type=1400 audit(1782773259.613:555): avc: denied { getopt } for pid=7550 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.338779][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 77.411310][ T42] audit: type=1400 audit(1782773259.710:556): avc: denied { execute } for pid=7556 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.419935][ T42] audit: type=1400 audit(1782773259.710:557): avc: denied { execute_no_trans } for pid=7556 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.465939][ T7522] overlayfs: statfs failed on './file0' [ 77.469105][ T5741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.472218][ T5741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.476102][ T5741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.480129][ T5741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.483147][ T5741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.519409][ T7570] SELinux: ebitmap: empty map [ 77.521456][ T7570] SELinux: failed to load policy [ 77.550405][ T42] audit: type=1400 audit(1782773259.857:558): avc: denied { append } for pid=7573 comm="syz.0.435" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.579005][ T7578] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 77.596041][ T7578] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 77.601666][ T7578] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 77.605241][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 77.611607][ T7578] dummy0: entered promiscuous mode [ 77.620009][ T42] audit: type=1400 audit(1782773259.925:559): avc: denied { ioctl } for pid=7576 comm="syz.0.436" path="socket:[23292]" dev="sockfs" ino=23292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.648175][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 77.668829][ T7590] hfsplus: unable to find HFS+ superblock [ 77.692230][ T7587] CIFS mount error: No usable UNC path provided in device string! [ 77.692230][ T7587] [ 77.695534][ T7587] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.718176][ T7599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7599 comm=syz.0.443 [ 77.722625][ T7599] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 77.727076][ T7597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.442'. [ 77.752643][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.755173][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.757620][ T7563] bridge_slave_0: entered allmulticast mode [ 77.759984][ T7563] bridge_slave_0: entered promiscuous mode [ 77.763740][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.766006][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.768258][ T7563] bridge_slave_1: entered allmulticast mode [ 77.770499][ T7563] bridge_slave_1: entered promiscuous mode [ 77.780482][ T7563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.786813][ T7563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.801544][ T7563] team0: Port device team_slave_0 added [ 77.804965][ T7563] team0: Port device team_slave_1 added [ 77.822136][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.825007][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.835448][ T7563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.840593][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.844074][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.854180][ T7563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.892126][ T7563] hsr_slave_0: entered promiscuous mode [ 77.895619][ T7563] hsr_slave_1: entered promiscuous mode [ 77.911863][ T7615] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 77.920563][ T7615] : renamed from bridge_slave_1 (while UP) [ 77.971855][ T7563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.977185][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.980150][ T7563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.984554][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.988000][ T7563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.993327][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.996750][ T7563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.001136][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.015196][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.018214][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.021326][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.024277][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.053889][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.061893][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.065628][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.078840][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.110521][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.113465][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.120562][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.122856][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.319202][ T7563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.354454][ T7663] openvswitch: netlink: Missing key (keys=40, expected=100) [ 78.450511][ T7563] veth0_vlan: entered promiscuous mode [ 78.454446][ T7563] veth1_vlan: entered promiscuous mode [ 78.468970][ T7563] veth0_macvtap: entered promiscuous mode [ 78.472554][ T7563] veth1_macvtap: entered promiscuous mode [ 78.479760][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.485140][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.490784][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.494440][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.498599][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.501368][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.523782][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.526280][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.534814][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537230][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.562623][ T7695] 9pnet_virtio: no channels available for device syz [ 78.970071][ T7713] 9pnet_virtio: no channels available for device syz [ 78.974551][ T7713] 9pnet_virtio: no channels available for device syz [ 79.478674][ T7727] 9pnet_virtio: no channels available for device syz [ 79.570266][ T5741] Bluetooth: hci4: command tx timeout [ 79.570486][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 79.600987][ T7730] wireguard0: entered allmulticast mode [ 79.626031][ T7735] 9pnet_virtio: no channels available for device syz [ 79.736813][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.740410][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.743471][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.746415][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.750037][ T7725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.755536][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.758390][ T7738] 9pnet_virtio: no channels available for device syz [ 79.762358][ T7738] 9pnet_virtio: no channels available for device syz [ 79.856349][ T7017] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.881435][ T7742] kvm: kvm [7741]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 79.961921][ T847] usb 6-1: USB disconnect, device number 12 [ 80.011919][ T7017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.018896][ T7017] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.026976][ T7017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.032056][ T7017] usb 9-1: config 0 descriptor?? [ 80.223488][ T7021] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.241649][ T7017] usbhid 9-1:0.0: can't add hid device: -71 [ 80.244356][ T7017] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 80.248905][ T7017] usb 9-1: USB disconnect, device number 2 [ 80.379078][ T7021] usb 5-1: config 4 has an invalid interface number: 139 but max is 1 [ 80.382570][ T7021] usb 5-1: config 4 has an invalid interface number: 58 but max is 1 [ 80.385883][ T7021] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 80.390446][ T7021] usb 5-1: config 4 has no interface number 0 [ 80.393524][ T7021] usb 5-1: config 4 has no interface number 1 [ 80.396063][ T7021] usb 5-1: config 4 interface 139 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 80.400690][ T7021] usb 5-1: config 4 interface 58 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 80.405159][ T7021] usb 5-1: config 4 interface 58 altsetting 7 bulk endpoint 0xC has invalid maxpacket 1023 [ 80.409379][ T7021] usb 5-1: config 4 interface 58 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 80.413728][ T7021] usb 5-1: config 4 interface 58 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 11 [ 80.419151][ T7021] usb 5-1: config 4 interface 139 has no altsetting 0 [ 80.422039][ T7021] usb 5-1: config 4 interface 58 has no altsetting 0 [ 80.426557][ T7021] usb 5-1: New USB device found, idVendor=0403, idProduct=d014, bcdDevice= 3.eb [ 80.429935][ T7021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.432380][ T7021] usb 5-1: Product: 싃䷮挮톖淛䮘꽞쵷ẩəᭌ㿩㳌햪锘쳾쓇䊾㚁퇨떽蕪ꭄ饱ᔡ᭏⌑鞪࿼뿸☢﵉絑齫⯱š磸ڊ锰슁픗櫇鉽韵棼鄞쌬啭眸줏쟾郇캰ꠠ䪨儍觍豬뎒瓕뼝퀳燐᭫峎靪큶齫蕑ョŻ抪넁灖쓴蚋⦉턳㢋օ⇝눀ࡏ펙蒗ᤰῷ髦⺩ [ 80.442363][ T7021] usb 5-1: Manufacturer: ᐁ [ 80.444277][ T7021] usb 5-1: SerialNumber: ề᰹芫鷾젅ﻄᳬ◶ﭼ翉ꆰ㔌꽔㒨祑郀첓캌Мꐷ៨鏙嬐ឭꖷﳒ﫦㏡ㇰꊱ粑釪姩㪊僃첞嬑旇摣ﯥ帟檞唥ﵤ뢃ꛟ휗緁カ竭⡰갮墎ꡙ拿櫬囤 [ 80.683483][ T7021] ftdi_sio 5-1:4.139: FTDI USB Serial Device converter detected [ 80.687302][ T7021] ftdi_sio ttyUSB0: unknown device type: 0x3eb [ 80.694778][ T7021] ftdi_sio 5-1:4.58: FTDI USB Serial Device converter detected [ 80.698434][ T7021] ftdi_sio ttyUSB1: unknown device type: 0x3eb [ 80.706638][ T7021] usb 5-1: USB disconnect, device number 9 [ 80.713859][ T7021] ftdi_sio 5-1:4.139: device disconnected [ 80.717257][ T7021] ftdi_sio 5-1:4.58: device disconnected [ 80.723623][ T7017] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 80.793822][ T7764] 9pnet_virtio: no channels available for device syz [ 80.897569][ T7017] usb 9-1: Using ep0 maxpacket: 16 [ 80.904407][ T7017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.908277][ T7017] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 80.912110][ T7017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.919638][ T7017] usb 9-1: config 0 descriptor?? [ 81.043845][ T7793] 9pnet_virtio: no channels available for device syz [ 81.046187][ T7793] 9pnet_virtio: no channels available for device syz [ 81.048380][ T7793] 9pnet_virtio: no channels available for device syz [ 81.174609][ T7804] 9pnet_virtio: no channels available for device syz [ 81.184314][ T7804] 9pnet_virtio: no channels available for device syz [ 81.254096][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 81.313960][ T7832] 9pnet_virtio: no channels available for device syz [ 81.318151][ T7832] 9pnet_virtio: no channels available for device syz [ 81.345648][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 81.345717][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 81.348164][ T7017] kye 0003:0458:5016.0004: control desc unexpectedly large [ 81.348180][ T7017] kye 0003:0458:5016.0004: control desc unexpectedly large [ 81.350646][ T7017] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.0004/input/input13 [ 81.415570][ T7017] kye 0003:0458:5016.0004: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 81.424090][ T7846] pim6reg: entered allmulticast mode [ 81.427547][ T7846] misc userio: The device must be registered before sending interrupts [ 81.459539][ T7850] gfs2: error -5 reading superblock [ 81.460557][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 81.462857][ T7850] 9pnet_virtio: no channels available for device syz [ 81.513517][ T7855] support for the xor transformation has been removed. [ 81.584180][ T7857] 9pnet_virtio: no channels available for device syz [ 81.636802][ T7859] 9pnet_virtio: no channels available for device syz [ 81.641182][ T7859] 9pnet_virtio: no channels available for device syz [ 81.691562][ T5741] Bluetooth: hci4: command tx timeout [ 81.722255][ T59] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 81.732067][ T7867] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.873418][ T42] kauditd_printk_skb: 129 callbacks suppressed [ 81.873444][ T42] audit: type=1400 audit(1782773264.087:689): avc: denied { write } for pid=7732 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.876819][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.888571][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.892262][ T59] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 81.896028][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.899913][ T59] usb 6-1: config 0 descriptor?? [ 81.905601][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 81.908051][ T42] audit: type=1400 audit(1782773264.127:690): avc: denied { create } for pid=7884 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.913082][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 81.918867][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 81.922099][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 81.924391][ T59] usb 6-1: media controller created [ 81.928995][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.929394][ T42] audit: type=1400 audit(1782773264.146:691): avc: denied { bind } for pid=7884 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.937985][ T7890] netlink: 92 bytes leftover after parsing attributes in process `syz.3.521'. [ 81.940173][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 81.950567][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 81.953625][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input14 [ 81.958840][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 81.960969][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 81.975000][ T42] audit: type=1400 audit(1782773264.186:692): avc: denied { append } for pid=7894 comm="syz.3.522" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.981265][ T7896] usb usb8: usbfs: process 7896 (syz.3.522) did not claim interface 0 before use [ 81.998955][ T7899] 9pnet_virtio: no channels available for device syz [ 82.091688][ T7906] ocfs2: Unknown parameter 'grpquotax' [ 82.108753][ T7853] 9pnet_virtio: no channels available for device syz [ 82.117075][ T7021] usb 6-1: USB disconnect, device number 13 [ 82.119065][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 82.121362][ T59] dvb-usb: error while querying for an remote control event. [ 82.131663][ T7021] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 82.175223][ T42] audit: type=1400 audit(1782773264.382:693): avc: denied { write } for pid=7909 comm="syz.3.526" path="socket:[25311]" dev="sockfs" ino=25311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.501207][ T59] usb 9-1: USB disconnect, device number 3 [ 82.584898][ T7925] syz_tun: entered allmulticast mode [ 82.590524][ T7925] dvmrp2: entered allmulticast mode [ 82.594152][ T7924] syz_tun: left allmulticast mode [ 82.596397][ T7924] dvmrp2: left allmulticast mode [ 82.730852][ T7938] batadv_slave_1: entered promiscuous mode [ 82.733711][ T7938] xt_ecn: cannot match TCP bits for non-tcp packets [ 82.737204][ T7937] batadv_slave_1: left promiscuous mode [ 82.868274][ T7942] overlayfs: conflicting lowerdir path [ 82.870699][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'. [ 83.234454][ T42] audit: type=1400 audit(1782773265.424:694): avc: denied { listen } for pid=7956 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.675348][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 83.710622][ T42] audit: type=1400 audit(1782773265.896:695): avc: denied { ioctl } for pid=7975 comm="syz.1.547" path="socket:[24285]" dev="sockfs" ino=24285 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.724290][ T42] audit: type=1400 audit(1782773265.906:696): avc: denied { write } for pid=7975 comm="syz.1.547" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.757081][ T42] audit: type=1400 audit(1782773265.945:697): avc: denied { write } for pid=7977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.786205][ T7980] 9pnet_virtio: no channels available for device syz [ 83.807828][ T5741] Bluetooth: hci4: command tx timeout [ 83.811524][ T42] audit: type=1400 audit(1782773265.994:698): avc: denied { write } for pid=7981 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.939316][ T7985] 9pnet_virtio: no channels available for device syz [ 84.221008][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'. [ 84.225256][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'. [ 84.245910][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 84.255815][ T847] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 84.282879][ T8020] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.289463][ T8020] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.297618][ T8023] 9pnet_virtio: no channels available for device syz [ 84.405255][ T8027] sock: sock_set_timeout: `syz.3.561' (pid 8027) tries to set negative timeout [ 84.418252][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.427062][ T847] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.431457][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.438135][ T847] usb 9-1: config 0 descriptor?? [ 84.510434][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.599106][ T8049] tmpfs: Cannot change global quota limit on remount [ 84.650074][ T847] usbhid 9-1:0.0: can't add hid device: -71 [ 84.652110][ T847] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 84.655184][ T847] usb 9-1: USB disconnect, device number 4 [ 85.086889][ T1348] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 85.239065][ T1348] usb 9-1: Using ep0 maxpacket: 16 [ 85.241943][ T1348] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.245370][ T1348] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 85.248145][ T1348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.251555][ T1348] usb 9-1: config 0 descriptor?? [ 85.309514][ T8076] bond1: left promiscuous mode [ 85.313310][ T8076] bridge2: left promiscuous mode [ 85.666339][ T1348] kye 0003:0458:5016.0005: control desc unexpectedly large [ 85.668879][ T1348] kye 0003:0458:5016.0005: control desc unexpectedly large [ 85.675380][ T1348] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.0005/input/input16 [ 85.685526][ T8099] 9pnet_virtio: no channels available for device syz [ 85.728558][ T8101] 9pnet_fd: p9_fd_create_tcp (8101): problem binding to privport [ 85.740048][ T1348] kye 0003:0458:5016.0005: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 85.795763][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.852414][ T8117] kvm: user requested TSC rate below hardware speed [ 85.876526][ T8116] ALSA: mixer_oss: invalid OSS volume '' [ 85.918897][ T5741] Bluetooth: hci4: command tx timeout [ 85.985758][ T8131] 9pnet_virtio: no channels available for device syz [ 86.388148][ T7018] usb 9-1: USB disconnect, device number 5 [ 86.680967][ T8144] __nla_validate_parse: 3 callbacks suppressed [ 86.680978][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 86.686493][ T8144] openvswitch: netlink: Tunnel attr 126 out of range max 16 [ 86.877155][ T8150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.009345][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 87.009356][ T42] audit: type=1400 audit(1782773269.149:713): avc: denied { mounton } for pid=8156 comm="syz.4.597" path="/10/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 87.034660][ T8164] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 87.070845][ T8162] loop3: detected capacity change from 0 to 22215 [ 87.074765][ T8162] loop3: unable to read partition table [ 87.076635][ T8162] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 87.246547][ T5843] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 87.408547][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 87.408805][ T24] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 87.411682][ T5843] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.418293][ T5843] usb 6-1: string descriptor 0 read error: -22 [ 87.420254][ T5843] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 87.423951][ T5843] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 87.431253][ T5843] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 87.434630][ T5843] dw2102: su3000_power_ctrl: 1, initialized 0 [ 87.437137][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 87.439845][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.443053][ T5843] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 87.446213][ T5843] usb 6-1: media controller created [ 87.448461][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.451134][ T5843] dw2102: i2c transfer failed. [ 87.453255][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.455700][ T5843] dw2102: i2c transfer failed. [ 87.457727][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.460377][ T5843] dw2102: i2c transfer failed. [ 87.462460][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.464244][ T5843] dw2102: i2c transfer failed. [ 87.465735][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.467757][ T5843] dw2102: i2c transfer failed. [ 87.469794][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 87.472141][ T5843] dw2102: i2c transfer failed. [ 87.474185][ T5843] dvb-usb: MAC address: 02:02:02:02:02:02 [ 87.483530][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.494876][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 87.497132][ T5843] dw2102: command 0x0e transfer failed. [ 87.498823][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 87.500691][ T5843] dw2102: command 0x0e transfer failed. [ 87.561766][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.564889][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 87.567697][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 87.571259][ T24] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 87.574048][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.577534][ T8178] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 87.580354][ T24] hub 9-1:1.0: bad descriptor, ignoring hub [ 87.582350][ T24] hub 9-1:1.0: probe with driver hub failed with error -5 [ 87.584804][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 87.586469][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 87.588098][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 87.590278][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 87.592502][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 87.784313][ T42] audit: type=1400 audit(1782773269.919:714): avc: denied { read write } for pid=8177 comm="syz.4.604" name="cdc-wdm0" dev="devtmpfs" ino=3143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 87.791794][ T42] audit: type=1400 audit(1782773269.919:715): avc: denied { open } for pid=8177 comm="syz.4.604" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 87.823919][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 87.826379][ T5843] dw2102: command 0x0e transfer failed. [ 87.828755][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 87.831263][ T5843] dw2102: command 0x0e transfer failed. [ 87.833633][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 87.836442][ T5843] dw2102: command 0x51 transfer failed. [ 87.838911][ T8160] dw2102: i2c wr: len=80 is too big! [ 87.838911][ T8160] [ 87.858405][ T5843] DVB: Unable to find symbol ds3000_attach() [ 87.861353][ T8185] 9pnet_virtio: no channels available for device syz [ 87.866183][ T5843] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 87.925004][ T5843] rc_core: IR keymap rc-su3000 not found [ 87.927501][ T5843] Registered IR keymap rc-empty [ 87.930095][ T5843] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 87.938798][ T5843] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input17 [ 87.944272][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 87.947253][ T5843] dw2102: su3000_power_ctrl: 0, initialized 1 [ 87.949867][ T5843] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 87.979782][ T8189] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 87.982889][ T8189] netlink: 42 bytes leftover after parsing attributes in process `syz.0.606'. [ 88.004841][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.009497][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.013770][ T8194] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 88.052242][ T8197] SELinux: policydb string does not match my string SE Linux [ 88.054619][ T8197] SELinux: failed to load policy [ 88.057766][ T42] audit: type=1400 audit(1782773270.185:716): avc: denied { perfmon } for pid=8196 comm="syz.3.608" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.060149][ T8197] 8021q: VLANs not supported on ip6gre0 [ 88.117312][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 88.119227][ T5843] dw2102: i2c transfer failed. [ 88.238692][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 88.279220][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 88.281701][ T5843] dw2102: i2c transfer failed. [ 88.350936][ T8178] usb 9-1: reset low-speed USB device number 6 using dummy_hcd [ 88.441101][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 88.443520][ T5731] dw2102: i2c transfer failed. [ 88.603070][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 88.605500][ T5731] dw2102: i2c transfer failed. [ 88.645972][ T8182] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 88.765137][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 88.767536][ T5731] dw2102: i2c transfer failed. [ 88.926861][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 88.929335][ T5731] dw2102: i2c transfer failed. [ 89.046187][ T42] audit: type=1400 audit(1782773271.154:717): avc: denied { bpf } for pid=8177 comm="syz.4.604" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.079092][ T24] usb 5-1: device descriptor read/64, error -71 [ 89.088627][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 89.090380][ T59] dw2102: i2c transfer failed. [ 89.140322][ T34] usb 9-1: USB disconnect, device number 6 [ 89.250447][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 89.252283][ T59] dw2102: i2c transfer failed. [ 89.321336][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 89.331999][ T42] audit: type=1400 audit(1782773271.441:718): avc: denied { module_request } for pid=8220 comm="syz.3.614" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 89.369328][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.371648][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.374592][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.376839][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.379228][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.381517][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.383874][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.386157][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.388467][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.390803][ T8229] xt_nfacct: accounting object `syz0' does not exist [ 89.413072][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 89.415722][ T59] dw2102: i2c transfer failed. [ 89.423100][ T8231] ceph: No mds server is up or the cluster is laggy [ 89.445196][ T42] audit: type=1400 audit(1782773271.549:719): avc: denied { execute_no_trans } for pid=8235 comm="syz.3.617" path="/214/file0" dev="tmpfs" ino=1229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.467316][ T42] audit: type=1400 audit(1782773271.579:720): avc: denied { compute_member } for pid=8238 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.473707][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 89.474221][ T42] audit: type=1400 audit(1782773271.579:721): avc: denied { accept } for pid=8238 comm="syz.3.618" lport=50908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.479055][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.483722][ T42] audit: type=1400 audit(1782773271.579:722): avc: denied { setopt } for pid=8238 comm="syz.3.618" lport=50908 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.486926][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.498501][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.499253][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.503700][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.503717][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.504403][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.511977][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.511994][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.512684][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.521590][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.521607][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.528019][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.528053][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.528075][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.528792][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.539425][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.543699][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.544414][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.548761][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.548777][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.549470][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.557731][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.557747][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 89.559170][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.559184][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.559194][ T24] usb 5-1: Product: syz [ 89.559201][ T24] usb 5-1: Manufacturer: syz [ 89.559208][ T24] usb 5-1: SerialNumber: syz [ 89.562425][ T24] usb 5-1: config 0 descriptor?? [ 89.564448][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 89.576072][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 89.576083][ T59] dw2102: i2c transfer failed. [ 89.735877][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 89.737680][ T59] dw2102: i2c transfer failed. [ 89.869340][ C2] usb 5-1: yurex_control_callback - control failed: -2 [ 89.879386][ T34] usb 5-1: USB disconnect, device number 11 [ 89.883948][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 89.907777][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 89.909666][ T5731] dw2102: i2c transfer failed. [ 89.952469][ T8261] program syz.4.624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.994242][ T5105] usb 6-1: USB disconnect, device number 14 [ 90.007562][ T5105] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 90.261412][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 90.414620][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.419079][ T34] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.422891][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.427708][ T34] usb 5-1: config 0 descriptor?? [ 90.517823][ T8286] mmap: syz.3.630 (8286) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.639071][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 90.641753][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 90.646533][ T34] usb 5-1: USB disconnect, device number 12 [ 90.902884][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.634'. [ 90.905743][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.634'. [ 91.090044][ T5731] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.251579][ T5731] usb 5-1: Using ep0 maxpacket: 16 [ 91.255056][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.259599][ T5731] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 91.269986][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.279096][ T5731] usb 5-1: config 0 descriptor?? [ 91.327861][ T8310] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.438470][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 91.455409][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 91.455647][ T8369] binder: BINDER_SET_CONTEXT_MGR already set [ 91.459726][ T8366] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 91.461454][ T8369] binder: 8365:8369 ioctl 4018620d 200000000100 returned -16 [ 91.496519][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.645'. [ 91.521624][ T8373] netlink: 'syz.1.645': attribute type 4 has an invalid length. [ 91.524085][ T8373] netlink: 152 bytes leftover after parsing attributes in process `syz.1.645'. [ 91.527840][ T8373] .`: renamed from bond0 [ 91.699844][ T5731] kye 0003:0458:5016.0006: control desc unexpectedly large [ 91.704867][ T5731] kye 0003:0458:5016.0006: control desc unexpectedly large [ 91.709058][ T5731] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0006/input/input19 [ 91.757889][ T8397] capability: warning: `syz.3.652' uses 32-bit capabilities (legacy support in use) [ 91.768548][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 91.774410][ T5731] kye 0003:0458:5016.0006: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 92.025639][ T8424] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.063751][ T8426] fuse: Unknown parameter '' [ 92.855476][ T847] usb 5-1: USB disconnect, device number 13 [ 92.880249][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 92.883374][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 92.890828][ T8439] netlink: 80 bytes leftover after parsing attributes in process `syz.4.662'. [ 92.943269][ T8451] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 92.975599][ T8454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8454 comm=syz.1.668 [ 92.986177][ T8454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.668'. [ 93.010058][ T8443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=146 sclass=netlink_route_socket pid=8443 comm=syz.3.664 [ 93.015171][ T8443] netlink: 56 bytes leftover after parsing attributes in process `syz.3.664'. [ 93.018935][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 93.019350][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'. [ 93.022599][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 93.042970][ T8438] ceph: No mds server is up or the cluster is laggy [ 93.084890][ T8474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59408 sclass=netlink_route_socket pid=8474 comm=syz.0.674 [ 93.489388][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 93.492235][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 93.510880][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 93.510891][ T42] audit: type=1400 audit(1782773275.570:733): avc: denied { map } for pid=8490 comm="syz.0.678" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 93.521160][ T42] audit: type=1400 audit(1782773275.570:734): avc: denied { ioctl } for pid=8490 comm="syz.0.678" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.529100][ T42] audit: type=1400 audit(1782773275.570:735): avc: denied { read } for pid=8490 comm="syz.0.678" dev="nsfs" ino=4026533017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.536589][ T42] audit: type=1400 audit(1782773275.570:736): avc: denied { open } for pid=8490 comm="syz.0.678" path="net:[4026533017]" dev="nsfs" ino=4026533017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.545539][ T42] audit: type=1400 audit(1782773275.570:737): avc: denied { setattr } for pid=8490 comm="syz.0.678" name="LLC" dev="sockfs" ino=29946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.555347][ T42] audit: type=1400 audit(1782773275.590:738): avc: denied { read } for pid=8492 comm="syz.0.679" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.565234][ T42] audit: type=1400 audit(1782773275.590:739): avc: denied { open } for pid=8492 comm="syz.0.679" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.575407][ T42] audit: type=1400 audit(1782773275.599:740): avc: denied { ioctl } for pid=8492 comm="syz.0.679" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.641336][ T42] audit: type=1400 audit(1782773275.709:741): avc: denied { accept } for pid=8495 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.641416][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 93.718606][ T8500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=511 sclass=netlink_route_socket pid=8500 comm=syz.0.681 [ 94.040322][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 94.061434][ T42] audit: type=1400 audit(1782773276.125:742): avc: denied { bind } for pid=8518 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.116527][ T8517] kvm: pic: non byte write [ 94.163638][ T8522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.238538][ T5731] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 94.276253][ T8529] fuse: Bad value for 'user_id' [ 94.278505][ T8529] fuse: Bad value for 'user_id' [ 94.311404][ T5741] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 94.410696][ T5731] usb 9-1: Using ep0 maxpacket: 8 [ 94.413623][ T5731] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.416843][ T5731] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.420383][ T5731] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.423686][ T5731] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.427892][ T5731] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.431139][ T5731] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.627509][ T8544] openvswitch: netlink: Flow key attr not present in new flow. [ 94.645377][ T8508] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.654285][ T5731] usb 9-1: GET_CAPABILITIES returned 0 [ 94.656671][ T5731] usbtmc 9-1:16.0: can't read capabilities [ 94.856514][ T8508] openvswitch: netlink: EtherType 0 is less than min 600 [ 94.860153][ T1348] usb 9-1: USB disconnect, device number 7 [ 95.508163][ T8581] netlink: 'syz.4.706': attribute type 30 has an invalid length. [ 95.510895][ T8581] netlink: 'syz.4.706': attribute type 30 has an invalid length. [ 95.766693][ T8588] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.000847][ T8593] netlink: 'syz.3.711': attribute type 12 has an invalid length. [ 96.071528][ T8599] erspan0: entered promiscuous mode [ 96.181238][ T8606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8606 comm=syz.3.715 [ 96.388878][ T8617] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 96.393494][ T8617] romfs: unable to set blocksize [ 96.393494][ T8617] [ 96.600185][ T8627] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.651454][ T8634] openvswitch: netlink: Actions may not be safe on all matching packets [ 96.822034][ T8640] syzkaller0: entered promiscuous mode [ 96.824370][ T8640] syzkaller0: entered allmulticast mode [ 97.226446][ T8672] xt_cgroup: path and classid specified [ 97.270874][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.273850][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.277180][ T8675] 9pnet_virtio: no channels available for device syz [ 97.331173][ T8678] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 97.343389][ T8678] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 97.354718][ T8678] veth5: entered promiscuous mode [ 97.357322][ T8678] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 97.451183][ T8684] overlayfs: failed lookup in lower (newroot/245, name='file0', err=-40): overlapping layers [ 97.532719][ T847] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 98.192472][ T8712] __nla_validate_parse: 13 callbacks suppressed [ 98.192495][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 98.539290][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.747'. [ 98.543063][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 98.546079][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 98.576058][ T8721] autofs: Unknown parameter 'I[Mc>Wl 9!luoɘĎ퍚.} [ 98.576058][ T8721] @q+T' [ 98.584065][ T8721] autofs: Unknown parameter 'I[Mc>Wl 9!luoɘĎ퍚.} [ 98.584065][ T8721] @q+T' [ 98.589029][ T8726] netlink: 48 bytes leftover after parsing attributes in process `syz.4.749'. [ 98.622617][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 98.626830][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 98.862805][ T8748] NILFS (nbd4): device size too small [ 98.890691][ T8751] syzkaller1: entered promiscuous mode [ 98.894039][ T8751] syzkaller1: entered allmulticast mode [ 98.996925][ T8758] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.761'. [ 99.000474][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 99.000484][ T42] audit: type=1400 audit(1782773281.020:749): avc: denied { cmd } for pid=8757 comm="syz.4.761" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 99.075260][ T42] audit: type=1400 audit(1782773537.107:750): avc: denied { bind } for pid=8767 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.083504][ T42] audit: type=1400 audit(1782773537.107:751): avc: denied { name_bind } for pid=8767 comm="syz.1.764" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 99.093192][ T42] audit: type=1400 audit(1782773537.107:752): avc: denied { node_bind } for pid=8767 comm="syz.1.764" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 99.136654][ T42] audit: type=1400 audit(1782773537.167:753): avc: denied { kexec_image_load } for pid=8778 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.167782][ T8756] syz.3.760 (8756): drop_caches: 2 [ 99.218567][ T8784] syzkaller1: entered promiscuous mode [ 99.221080][ T8784] syzkaller1: entered allmulticast mode [ 99.225924][ T8784] futex_wake_op: syz.0.770 tries to shift op by -1; fix this program [ 99.261737][ T8793] ip6gre1: entered promiscuous mode [ 99.263495][ T8793] ip6gre1: entered allmulticast mode [ 99.266553][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.267903][ T8793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.269017][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.292525][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.341804][ T8799] program syz.1.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.345132][ T8797] FAULT_INJECTION: forcing a failure. [ 99.345132][ T8797] name failslab, interval 1, probability 0, space 0, times 1 [ 99.350568][ T8797] CPU: 2 UID: 0 PID: 8797 Comm: syz.3.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.350605][ T8797] Tainted: [L]=SOFTLOCKUP [ 99.350609][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.350615][ T8797] Call Trace: [ 99.350632][ T8797] [ 99.350637][ T8797] dump_stack_lvl+0x100/0x190 [ 99.350659][ T8797] should_fail_ex.cold+0x5/0xa [ 99.350672][ T8797] ? fs_reclaim_acquire+0x70/0x100 [ 99.350686][ T8797] should_failslab+0xc2/0x120 [ 99.350702][ T8797] __kmalloc_noprof+0xfc/0x820 [ 99.350718][ T8797] ? rcu_is_watching+0x12/0xc0 [ 99.350737][ T8797] ? tomoyo_realpath_from_path+0xb6/0x690 [ 99.350755][ T8797] tomoyo_realpath_from_path+0xb6/0x690 [ 99.350777][ T8797] tomoyo_path_number_perm+0x23c/0x580 [ 99.350794][ T8797] ? tomoyo_path_number_perm+0x22e/0x580 [ 99.350811][ T8797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.350833][ T8797] ? preempt_count_add+0x76/0x150 [ 99.350848][ T8797] ? rcu_is_watching+0x12/0xc0 [ 99.350863][ T8797] ? __fget_files+0x215/0x3d0 [ 99.350872][ T8797] ? hook_file_ioctl_common+0x140/0x440 [ 99.350886][ T8797] ? lock_release+0x24d/0x310 [ 99.350899][ T8797] ? __fget_files+0x21f/0x3d0 [ 99.350908][ T8797] security_file_ioctl+0xd3/0x230 [ 99.350922][ T8797] __x64_sys_ioctl+0xb7/0x210 [ 99.350937][ T8797] do_syscall_64+0x115/0x870 [ 99.350963][ T8797] ? clear_bhb_loop+0x40/0x90 [ 99.350975][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.350989][ T8797] RIP: 0033:0x7fcb94b9ce59 [ 99.351023][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.351036][ T8797] RSP: 002b:00007fcb95ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.351046][ T8797] RAX: ffffffffffffffda RBX: 00007fcb94e15fa0 RCX: 00007fcb94b9ce59 [ 99.351053][ T8797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.351059][ T8797] RBP: 00007fcb95ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.351066][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.351071][ T8797] R13: 00007fcb94e16038 R14: 00007fcb94e15fa0 R15: 00007fffc4122918 [ 99.351091][ T8797] [ 99.351096][ T8797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.619479][ T8822] netlink: 204 bytes leftover after parsing attributes in process `syz.3.783'. [ 99.632838][ T8813] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.780'. [ 99.636242][ T8813] openvswitch: netlink: Message has 512 unknown bytes. [ 99.714853][ T8840] FAULT_INJECTION: forcing a failure. [ 99.714853][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 99.719797][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.0.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.719816][ T8840] Tainted: [L]=SOFTLOCKUP [ 99.719819][ T8840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.719826][ T8840] Call Trace: [ 99.719830][ T8840] [ 99.719835][ T8840] dump_stack_lvl+0x100/0x190 [ 99.719851][ T8840] should_fail_ex.cold+0x5/0xa [ 99.719864][ T8840] ? fs_reclaim_acquire+0x70/0x100 [ 99.719878][ T8840] should_failslab+0xc2/0x120 [ 99.719893][ T8840] __kmalloc_noprof+0xfc/0x820 [ 99.719904][ T8840] ? __pfx_dynamic_dname+0x10/0x10 [ 99.719919][ T8840] ? tomoyo_encode2+0xfb/0x3c0 [ 99.719931][ T8840] tomoyo_encode2+0xfb/0x3c0 [ 99.719943][ T8840] tomoyo_encode+0x29/0x50 [ 99.719954][ T8840] tomoyo_realpath_from_path+0x18c/0x690 [ 99.719967][ T8840] tomoyo_path_number_perm+0x23c/0x580 [ 99.719983][ T8840] ? tomoyo_path_number_perm+0x22e/0x580 [ 99.720000][ T8840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.720019][ T8840] ? preempt_count_add+0x76/0x150 [ 99.720035][ T8840] ? rcu_is_watching+0x12/0xc0 [ 99.720051][ T8840] ? __fget_files+0x215/0x3d0 [ 99.720060][ T8840] ? hook_file_ioctl_common+0x140/0x440 [ 99.720073][ T8840] ? lock_release+0x24d/0x310 [ 99.720086][ T8840] ? __fget_files+0x21f/0x3d0 [ 99.720096][ T8840] security_file_ioctl+0xd3/0x230 [ 99.720107][ T8840] __x64_sys_ioctl+0xb7/0x210 [ 99.720121][ T8840] do_syscall_64+0x115/0x870 [ 99.720137][ T8840] ? clear_bhb_loop+0x40/0x90 [ 99.720149][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.720159][ T8840] RIP: 0033:0x7f3eb799ce59 [ 99.720167][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.720178][ T8840] RSP: 002b:00007f3eb8811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.720188][ T8840] RAX: ffffffffffffffda RBX: 00007f3eb7c15fa0 RCX: 00007f3eb799ce59 [ 99.720196][ T8840] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.720203][ T8840] RBP: 00007f3eb8811090 R08: 0000000000000000 R09: 0000000000000000 [ 99.720209][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.720215][ T8840] R13: 00007f3eb7c16038 R14: 00007f3eb7c15fa0 R15: 00007ffdcda46738 [ 99.720225][ T8840] [ 99.720234][ T8840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.782067][ T847] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 99.923893][ T8849] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 99.931744][ T8849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.939402][ T8849] netlink: 'syz.3.791': attribute type 12 has an invalid length. [ 99.974159][ T847] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 99.978602][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.985845][ T847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.990526][ T8853] netlink: 'syz.4.794': attribute type 2 has an invalid length. [ 99.993434][ T847] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.998521][ T847] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 99.998736][ T8853] /dev/nullb0: Can't open blockdev [ 100.001738][ T847] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.007756][ T847] usb 6-1: Manufacturer: syz [ 100.009754][ T8853] 9pnet_virtio: no channels available for device syz [ 100.010175][ T847] usb 6-1: config 0 descriptor?? [ 100.071470][ T42] audit: type=1400 audit(1782773538.097:754): avc: denied { wake_alarm } for pid=8863 comm="syz.3.796" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.115481][ T8867] 8021q: VLANs not supported on ip_vti0 [ 100.122177][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.211165][ T8876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 100.213580][ T8876] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.217650][ T8876] vhci_hcd vhci_hcd.0: Device attached [ 100.234992][ T42] audit: type=1400 audit(1782773538.267:755): avc: denied { read } for pid=8872 comm="syz.4.800" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 100.284376][ T41] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.371900][ T8886] 9pnet_virtio: no channels available for device syz [ 100.378191][ T8887] overlay: filesystem on ./bus not supported as upperdir [ 100.402492][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 100.424272][ T847] hid_parser_main: 18 callbacks suppressed [ 100.424289][ T847] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 100.431734][ T847] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 100.443829][ T8893] 9pnet_virtio: no channels available for device syz [ 100.454088][ T8895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8895 comm=syz.3.807 [ 100.472543][ T5105] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 100.475566][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 100.543936][ T42] audit: type=1326 audit(1782773538.577:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.3.810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94b9ce59 code=0x7ffc0000 [ 100.552062][ T42] audit: type=1326 audit(1782773538.577:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8905 comm="syz.3.810" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94b9ce59 code=0x7ffc0000 [ 100.626657][ T847] usb 6-1: USB disconnect, device number 15 [ 100.632419][ T5105] usb 5-1: Using ep0 maxpacket: 16 [ 100.636137][ T5105] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.642443][ T5105] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 100.647065][ T5105] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 100.649923][ T5105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.653112][ T5105] usb 5-1: Product: syz [ 100.654474][ T5105] usb 5-1: Manufacturer: syz [ 100.655947][ T5105] usb 5-1: SerialNumber: syz [ 100.658934][ T5105] usb 5-1: config 0 descriptor?? [ 100.806116][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.855403][ T8932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8932 comm=syz.4.819 [ 100.863593][ T5105] usb 5-1: USB disconnect, device number 15 [ 100.866448][ T8878] vhci_hcd: connection closed [ 100.866754][ T5836] vhci_hcd vhci_hcd.0: stop threads [ 100.871115][ T5836] vhci_hcd vhci_hcd.0: release socket [ 100.873112][ T5836] vhci_hcd vhci_hcd.0: disconnect device [ 100.932148][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 100.940464][ T8945] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 100.943547][ T8945] overlayfs: missing 'lowerdir' [ 101.023486][ T42] audit: type=1400 audit(1782773539.057:758): avc: denied { getopt } for pid=8949 comm="syz.3.824" lport=36750 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.036150][ T8952] netlink: 'syz.4.825': attribute type 21 has an invalid length. [ 101.038578][ T8952] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.124035][ T8967] netlink: 'syz.3.829': attribute type 15 has an invalid length. [ 101.127252][ T8967] netlink: 'syz.3.829': attribute type 15 has an invalid length. [ 101.232489][ T8971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.234455][ T8971] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.234488][ T8980] netlink: 'syz.1.834': attribute type 11 has an invalid length. [ 101.236349][ T8971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.240664][ T8971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.243269][ T8971] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.246297][ T8971] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.275500][ T8985] new mount options do not match the existing superblock, will be ignored [ 101.429279][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.541309][ T9010] netlink: 'syz.1.843': attribute type 29 has an invalid length. [ 101.552347][ T1348] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 101.618405][ T9013] overlayfs: failed lookup in lower (newroot/196, name='file0', err=-40): overlapping layers [ 101.624907][ T9013] overlayfs: failed lookup in lower (newroot/196, name='file0', err=-40): overlapping layers [ 101.629542][ T9013] overlayfs: failed lookup in lower (newroot/196, name='file0', err=-40): overlapping layers [ 101.660771][ T9019] macvlan0: entered promiscuous mode [ 101.732372][ T1348] usb 9-1: Using ep0 maxpacket: 16 [ 101.735929][ T1348] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.739268][ T1348] usb 9-1: config 0 has no interface number 0 [ 101.741841][ T1348] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.747734][ T1348] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 101.751528][ T1348] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 101.755023][ T1348] usb 9-1: Product: syz [ 101.756860][ T1348] usb 9-1: SerialNumber: syz [ 101.760586][ T1348] usb 9-1: config 0 descriptor?? [ 101.766141][ T1348] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input21 [ 101.916424][ T9034] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 102.012668][ T9042] overlay: Unknown parameter 'smackfsfloor' [ 102.217041][ T9058] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.287827][ T5731] usb 9-1: USB disconnect, device number 8 [ 102.287842][ C0] cm109 9-1:0.8: cm109_urb_irq_callback: urb status -71 [ 102.292429][ C0] ------------[ cut here ]------------ [ 102.294694][ C0] URB ffff88802a800500 submitted while active [ 102.297191][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#0: udevd/6016 [ 102.301200][ C0] Modules linked in: [ 102.303019][ C0] CPU: 0 UID: 0 PID: 6016 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 102.307353][ C0] Tainted: [L]=SOFTLOCKUP [ 102.309091][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.313112][ C0] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 102.315361][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 7e f4 a6 fa 48 8d 3d 17 eb 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 102.323073][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00010046 [ 102.325598][ C0] RAX: 0000000000000000 RBX: ffff88802a800500 RCX: ffffffff87e5dff9 [ 102.328970][ C0] RDX: ffff8880319ba540 RSI: ffff88802a800500 RDI: ffffffff90e875c0 [ 102.332416][ C0] RBP: ffff88802d9bce00 R08: 0000000000000001 R09: 0000000000000000 [ 102.334812][ C0] R10: 0000000000000001 R11: 2d39203930316d63 R12: 0000000000000046 [ 102.337259][ C0] R13: ffff88803c21f058 R14: 000000000000000f R15: 0000000000000001 [ 102.339571][ C0] FS: 00007f8551e98880(0000) GS:ffff8880d62ef000(0000) knlGS:0000000000000000 [ 102.342195][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.344210][ C0] CR2: 00007f3eb7be8158 CR3: 0000000026b17000 CR4: 0000000000352ef0 [ 102.346641][ C0] Call Trace: [ 102.347668][ C0] [ 102.348584][ C0] cm109_urb_irq_callback+0x473/0xa70 [ 102.350318][ C0] ? usb_hcd_unmap_urb_for_dma+0x271/0x8a0 [ 102.352145][ C0] ? do_raw_spin_lock+0x128/0x260 [ 102.353672][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 102.355215][ C0] ? dummy_timer+0xd92/0x36c0 [ 102.356626][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 102.358172][ C0] dummy_timer+0xda1/0x36c0 [ 102.359884][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.361572][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.363369][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.364896][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.366621][ C0] ? lock_release+0x24d/0x310 [ 102.368052][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.369973][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.371784][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 102.373640][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.375200][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.376734][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.378255][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 102.380180][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.381825][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 102.383521][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 102.385197][ C0] handle_softirqs+0x1ea/0x9b0 [ 102.386719][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 102.388439][ C0] ? _raw_spin_unlock+0x28/0x50 [ 102.390083][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 102.392057][ C0] __irq_exit_rcu+0x162/0x210 [ 102.393567][ C0] irq_exit_rcu+0x9/0x30 [ 102.394923][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.397152][ C0] [ 102.398401][ C0] [ 102.399650][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.402170][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 102.404666][ C0] Code: c6 e3 5e 00 48 89 df 5b e9 9d 5e 64 00 be 03 00 00 00 5b e9 f2 a9 f6 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 91 09 12 48 8b 34 24 65 48 8b 15 e1 90 09 [ 102.410922][ C0] RSP: 0018:ffffc900033f7da8 EFLAGS: 00000246 [ 102.412804][ C0] RAX: ffffffff82992031 RBX: ffff88801c77ec40 RCX: ffffffff82992052 [ 102.415985][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880319ba540 [ 102.419185][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 102.422455][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c77ec40 [ 102.425238][ C0] R13: 0000000000000001 R14: ffff88802cdaf548 R15: 0000000000000000 [ 102.427894][ C0] ? mntput_no_expire+0x21/0x220 [ 102.429477][ C0] ? mntput_no_expire+0x42/0x220 [ 102.431060][ C0] ? mntput_no_expire+0x42/0x220 [ 102.432570][ C0] mntput_no_expire+0x50/0x220 [ 102.434061][ C0] mntput+0x6b/0xa0 [ 102.435256][ C0] __fput+0x546/0xb50 [ 102.436497][ C0] fput_close_sync+0x118/0x250 [ 102.437985][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 102.439611][ C0] __x64_sys_close+0x8b/0x120 [ 102.441101][ C0] do_syscall_64+0x115/0x870 [ 102.442568][ C0] ? clear_bhb_loop+0x40/0x90 [ 102.444022][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.445929][ C0] RIP: 0033:0x7f8551715a67 [ 102.447252][ C0] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 102.453109][ C0] RSP: 002b:00007ffcd9fdd7d8 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 102.455676][ C0] RAX: ffffffffffffffda RBX: 000056205d4fb5c0 RCX: 00007f8551715a67 [ 102.458060][ C0] RDX: 00007f85517efea0 RSI: 000056205d504dd0 RDI: 0000000000000008 [ 102.460457][ C0] RBP: 00007f85517efff0 R08: 0000000000000000 R09: 0000000000000000 [ 102.462910][ C0] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 102.465338][ C0] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 102.467755][ C0] [ 102.468742][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.471006][ C0] CPU: 0 UID: 0 PID: 6016 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 102.474145][ C0] Tainted: [L]=SOFTLOCKUP [ 102.475486][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.478548][ C0] Call Trace: [ 102.479548][ C0] [ 102.480454][ C0] dump_stack_lvl+0x100/0x190 [ 102.481995][ C0] vpanic+0x552/0x970 [ 102.483247][ C0] ? __pfx_vpanic+0x10/0x10 [ 102.484696][ C0] ? lock_release+0x24d/0x310 [ 102.486187][ C0] panic+0xd1/0xe0 [ 102.487403][ C0] ? __pfx_panic+0x10/0x10 [ 102.488858][ C0] ? check_panic_on_warn+0x1f/0x90 [ 102.490489][ C0] check_panic_on_warn.cold+0x19/0x34 [ 102.492222][ C0] ? usb_submit_urb+0x1689/0x19b0 [ 102.493795][ C0] __warn.cold+0x191/0x318 [ 102.495185][ C0] __report_bug+0x30f/0x440 [ 102.496614][ C0] ? usb_submit_urb+0x1689/0x19b0 [ 102.498174][ C0] ? __pfx___report_bug+0x10/0x10 [ 102.499720][ C0] ? stack_trace_save+0x8e/0xc0 [ 102.501260][ C0] ? cm109_urb_irq_callback+0x379/0xa70 [ 102.502984][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 102.504614][ C0] ? dummy_timer+0xd35/0x36c0 [ 102.506086][ C0] ? kasan_save_stack+0x30/0x50 [ 102.507590][ C0] report_bug_entry+0xe1/0x290 [ 102.509021][ C0] ? usb_submit_urb+0x168c/0x19b0 [ 102.510657][ C0] handle_bug+0x1cd/0x2a0 [ 102.512043][ C0] exc_invalid_op+0x17/0x50 [ 102.513483][ C0] asm_exc_invalid_op+0x1a/0x20 [ 102.515052][ C0] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 102.516916][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 7e f4 a6 fa 48 8d 3d 17 eb 85 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 102.522949][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00010046 [ 102.524828][ C0] RAX: 0000000000000000 RBX: ffff88802a800500 RCX: ffffffff87e5dff9 [ 102.527533][ C0] RDX: ffff8880319ba540 RSI: ffff88802a800500 RDI: ffffffff90e875c0 [ 102.530707][ C0] RBP: ffff88802d9bce00 R08: 0000000000000001 R09: 0000000000000000 [ 102.533429][ C0] R10: 0000000000000001 R11: 2d39203930316d63 R12: 0000000000000046 [ 102.536127][ C0] R13: ffff88803c21f058 R14: 000000000000000f R15: 0000000000000001 [ 102.539270][ C0] ? cm109_urb_irq_callback+0x379/0xa70 [ 102.541552][ C0] cm109_urb_irq_callback+0x473/0xa70 [ 102.543759][ C0] ? usb_hcd_unmap_urb_for_dma+0x271/0x8a0 [ 102.546119][ C0] ? do_raw_spin_lock+0x128/0x260 [ 102.548282][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 102.550510][ C0] ? dummy_timer+0xd92/0x36c0 [ 102.552395][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 102.554457][ C0] dummy_timer+0xda1/0x36c0 [ 102.556357][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.558550][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.560852][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.562839][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.565105][ C0] ? lock_release+0x24d/0x310 [ 102.567015][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.569396][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 102.571691][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 102.574026][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.575668][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.577214][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.578874][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 102.581383][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.583436][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 102.585581][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 102.587677][ C0] handle_softirqs+0x1ea/0x9b0 [ 102.589336][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 102.591145][ C0] ? _raw_spin_unlock+0x28/0x50 [ 102.592922][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 102.594933][ C0] __irq_exit_rcu+0x162/0x210 [ 102.596866][ C0] irq_exit_rcu+0x9/0x30 [ 102.598612][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.600926][ C0] [ 102.601996][ C0] [ 102.603167][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.605551][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 102.608032][ C0] Code: c6 e3 5e 00 48 89 df 5b e9 9d 5e 64 00 be 03 00 00 00 5b e9 f2 a9 f6 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 91 09 12 48 8b 34 24 65 48 8b 15 e1 90 09 [ 102.615692][ C0] RSP: 0018:ffffc900033f7da8 EFLAGS: 00000246 [ 102.618145][ C0] RAX: ffffffff82992031 RBX: ffff88801c77ec40 RCX: ffffffff82992052 [ 102.621396][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880319ba540 [ 102.624735][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 102.627873][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c77ec40 [ 102.631106][ C0] R13: 0000000000000001 R14: ffff88802cdaf548 R15: 0000000000000000 [ 102.634369][ C0] ? mntput_no_expire+0x21/0x220 [ 102.636102][ C0] ? mntput_no_expire+0x42/0x220 [ 102.637972][ C0] ? mntput_no_expire+0x42/0x220 [ 102.639994][ C0] mntput_no_expire+0x50/0x220 [ 102.641990][ C0] mntput+0x6b/0xa0 [ 102.643604][ C0] __fput+0x546/0xb50 [ 102.645300][ C0] fput_close_sync+0x118/0x250 [ 102.647269][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 102.649366][ C0] __x64_sys_close+0x8b/0x120 [ 102.651363][ C0] do_syscall_64+0x115/0x870 [ 102.653324][ C0] ? clear_bhb_loop+0x40/0x90 [ 102.655380][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.657851][ C0] RIP: 0033:0x7f8551715a67 [ 102.659334][ C0] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 102.666870][ C0] RSP: 002b:00007ffcd9fdd7d8 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 102.669776][ C0] RAX: ffffffffffffffda RBX: 000056205d4fb5c0 RCX: 00007f8551715a67 [ 102.672280][ C0] RDX: 00007f85517efea0 RSI: 000056205d504dd0 RDI: 0000000000000008 [ 102.675376][ C0] RBP: 00007f85517efff0 R08: 0000000000000000 R09: 0000000000000000 [ 102.678542][ C0] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 102.681124][ C0] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 102.683956][ C0] [ 102.685862][ C0] Kernel Offset: disabled [ 102.687306][ C0] Rebooting in 86400 seconds..