last executing test programs: 1m8.082734808s ago: executing program 2 (id=2802): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10122, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) r2 = creat(0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x5, '\x00', @p_u32=0x0}}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) connect(r2, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000300)="f5fe37d8848c4c746d08090ee761754e8b75a9ced69de1e7e1f820e9c28a3a48b9494ef9bdbc7640d5373ec4b8b53e44d7eea2f2ff7fb9568fc8d89164c9ffc0654d22dfaa935f3265ac6cd007fb06a2770644e1af7d7de2e41f7c7f1fe2c50aea507488ca3d7f767cc42f18a56d156bdef1c8f11d9d00d50e62534bd3c836c0c4593bc82bce3e7c9a9659f8bb438004e428a347368efff88a798c", 0x9b}, {&(0x7f00000003c0)="eba71b5dd84e9db529fbeab893b4b1435d6eb47d5e81016fa05a7b97b17a2a30166aba0dbacd753e03df7b20d48cc47347201e9cd00a67fa2336ee43769a69c0ad9e384d323c3fd265c3daeade6b39fb534e1031f2f340fb03c8e7c0c999c396773761f2cb6138bc2c13ab5988d0150acdbb5f5834fca842a98043b15db96a7d88a2f161abe9dbef669c91925d273e62c3d2836ea388aad17cd413cca1cb4cb87ce55d06a3d79f13bd7c669f729b047a20e71794bb813c44a7687119f1a9d83f8e7528645efd0a7d7113c810", 0xcc}, {&(0x7f0000000540)="25f77c3ac2d6b92c4e8adb9588fd80da77efcd6f7ddb47b35d07e5d358104df646832a4e2a50f5b19db6c236f6c136e37117ed1ea2a186248709fbc66f407711a18bab48ba868c8e1a095b31fbde6ca5629d15359f7fbf9bcc8ed598c68b78b6d4c7abf7fe2a22650332e1db01923daaeee52758b4856402009b4082c548e4dd775236ce79e69327ab2682ab789d1cb1e3", 0x91}, {&(0x7f0000000600)="ae21484dd3ada6446eb27f66692f305de3cb8b653d0cb8ba4ff481d71127d7d30723df9a7b1705279303d5abc0f600609b1a11e49b111ac8b5a7f3621e732a2f35b7bcedefa5cc9d4d97045917555b7a1f36b6114eb52990a84a4fe7c41515e54e6d400e88b915717a27d90a4e8d19ebd132349beb65520ce8fa2a5bcc6db0c588bb9376a38e6013d44db53519bbc6bb116fdbc76db496aeace97517f606e9787009fb8911cf1b6ea3c7c931e9138ef462845103a26aed1a", 0xb8}, {&(0x7f0000000e80)="5ad7ac76fbbd4351ca0d918620601384d9bace7c07fe919d5d9ba29d37eb125f40ed948c0433c756f0a480cd7834fa4d802af3c950fbfcbbf202f826ba0ffa89b1c81f6e93a7c8844951a6103b3e2d4e600e528b25172f23b8ed2e293df5e9ddaf7cd4e93e17b140ca691d88d98edbb9f41f324574a3128bdabeb205489d2d6d95595f2e4d92d75ae34a5feb04a620e0eeb56d835b2129f8b7f1b88d8c67e75b9bd14fb64e45816f723d61608218795f5ab57f756e194a1583b709fcc6ce34915692f07f7b96bb0e240187f6e46a0f388d1f9ff01f69116564f277a12cb59f996eb2ff19cd5ee90fee84ea1a362148eeef38dd1d7d33f2463f30794134604ca009bf5e3bf352608fcf75b632fe82137f855153e638d1766f9f54e9260e1de0edfcc8873df9e24645fb658176f6483908a5c417e2b6552879f4a666b7c33a6addbe9717116cf2812043fbfdbf95fa860c2b3c7367291933569f52add80c1aabd2b1fd23882ba5d7cbf047c2c6efc96d9fb17628cbe869391744fd4bf9896ccc85a7d9468af9fa07158b75fe34cb91820be4e88f2da73426fe0509cd0a64a2c2d2c4c55e25327d6a76cc6597fcfc3ee64dc4ca02ac9a19d1e7ad7ff61bb0779a5071818d537c92f9e5919abd3090caa4e0524d92511a95a7a0a9361c50ac8c5d71560049ce25d726ff550abf15efc4b9f9b0c30e79390315fa5da4ae7ac380702fb2044dc26cea7401cef946eabc5c3957ee97d8490d2686fb7a35c7c31bf8ac6f4cf202186ff465ed122eb5fcfa5bd31607b88f434e68be0db3affb3022dfbd51feacad8f53c050b18ac3c2d55a8b039bc7d2260b74f14485c3aee918018359e0e3d7b36f246d6afd6430d9cd38209e848c7f792a86bd42346792e5fab20128ae8d45022cfeafbf2abbc5cac32e84b94db09ba39786f6b5f918839bb843c61a33d3045722d46fb86f4fac1a094991f023e01651843d62a02263fa8ed4f2e51b96c998b440c34c5a9c51cb08cfaa8c308e6fa3c601f68f1dd3a343a005cebe383a39b17be0e3f2ef8beb082221f6cd6d4b27c384a5ef4ecfddf00e984b7cd61f55cbff7a5cbfbb728837bf0530933ce0cbe5327abcdcb600f7b9d7f60db9f1ee90eadf1654e0c934abfc022bac2d2a30398eebe32182815acae08ad0e1b19af541c806d15ca13778ac929ec932516bcead89dcca2bc3460690e20305f736a72b0d5a260e195dd48013fb79e1e79a1503de3136beec419bdc0a524d57e7ea190d9a4d14bc720dcc033d99e908db43eb0ace73a527b8822729b3d0227c8efd986178e5c8ac0f890817f9f5154330b2c9d2456f476b803c08c657c2fc842623f463a220049f7c29142d906a26c17d9e6085cd0cf2639caafd639f9a9cc4923b7712d867b62dc0fbfea5a848a2786b9650c91d22c8df23140af0f595b91386c3b99f321085e9b72359c59b43870a948a6324e31fcdac157690a21f072edab5a72d8c514c7286f74ed59c9192760886d75dd140dd7d3031ea876adee11952d7398a9c873ad8b909f8a880b0d49fa0bfa56b94a605d77f0b5fb731d55040188cb2c29b81b2d79e36163847d58928eec1546ffe19a433701b3fe4cffb48c23cfce046844fd1334f2ee0a688ef38074a5243be301553dc570adbcbdab7ec95192bbb003d087b21347b78d3d9b37793f7d7190134294b0cd32101cd8edaa8de2d45b30caab51d23b78feda7052a889bcabd47c279f0219a2f253a6c4994235021737fc70f13120f1e624c69271e64655ff216f5c5c3730a4eb4b7b1f8bd2ce35bbc32b0839d2179ebb393cd7940a1afc25c17b3dc7f4861092719c37c2995d15cfd7aa6f9ee7bd40e7061d02df3eb10fd8542d8bcfcf413737c866ca940d5337bd74410970af2595d1423d91355e7033a49a4a6d5c34bbf7da858c88670be6dea1d96c4c05fa67f333ec6d23f69945571acc9928d80b42c937bed163000ad7f35a7b24200e8f9bb8850e57490ccfd746f69271180133ab555d2af3b71687a08e8fcec39fff91b2538f94253786c55b6c76b968aaec6e5454cf8c17f63bbb77c8b2d7e450e8f4f592631f682e1895489c6c85ab7ebdbecdc0ff82acab15777df83b4d6545cc604de0c3cf23da9e27e2b2c645f899682b83ac8a18a751df841e1f35c8b786eaa8b201ad7bcceabedd36f140e8604f6f3e58cfa28bc59253b3d25d6e5517b56fd83e7de333b4654e74f574ffa5e007306e0df70b86dc470c790afa239fd55b024b322d46f7b2c14f1e24e9f12280d2dbad3d17c721e14cea80efa8afd0244d8e6493476a0021d63c9f8c9017580baa8e02c5294aacf69f247976f0b19da56e4daf23a23e2518aa8c376b5060d058483de6529ec72d84f5272e5504ca8f3c398bbebf4be4d7a30eb45071bc88e6781df04d09b3098b07329c8ad6e437a2e310b609e837c62310854ede4a53edf9d7d5fb3c3bf756516c67d2a4c9086a60edf06bc0f3c0bf09fb2baea5fc132c673076ab0a35ce9e808ccf596789756e8659c9211a3edb541746328958c39b90d5ec0a1b9b65e411ca54aa953cb01b4c81a30ba13179c1ce7cfc183add707e21da8ca6b7797b20d189f85db773771cacec16d138616ff42bc2295e3d52cefa2b82fc218242f02d68b2073e941d53e0ad1c3acab4f33bf850f3f98547058d057a1b1dfc32147525b8f647e46f99a55c67c1b7aa923b43bc2f57bfc5ddd5795f54df19653d9ee66b7aa4efaca7ef6f28d4a1d9c8e7537c33d0f4ceba539752099f14fc987e37a699d171600a0a9b2f2385f5328e0858403daf76aefddbe1e1e1b0c0cbcb2bf8c31ff69796209016d194df1229e65586e4b105adaa6927b9ebbfaadb78ff24172640eba2c101a35f347be1eff730085d5db552b3b80394a4d3f03ed7213637757f0e677c0d81fe012176737536c4ff013dc90379e87d3fddc92c90f7f050ca7f0279546b28019fa8d5abcb97204917056a4ef0056496859a363d52a5757f0cbc1dea0cc313f8e24b6204c2d309e6ca34449d9935acc60bdb1ea4c90d5b99f90dc2de7416864d392952fb6a81d07dc4709258697d6b9669650ea4f257d8f80890325f330baebc4ed8cf9cff2a3a2bb07fbc2d632d663ecadcd9504b5584b576247b4355c241b94b334001d9c3528afd018f0099f3479ca9873b467b91afb090dd818aea9615c36752d2a37f563f197a4f9b01450f321257fb774275275a57ccb815bbde8aa2c1878cbeb64ed70504add3530b289ea17562250bbd625a0df78d0200573069f6549e6b891ba321e7d7401fad353177f15c6038550f604b4b22013af8842a6fe1cb11f8d6238d8ee86c21be3fb1835f96c6b78bcbf2030c0ddb434cc3f8cf8cd4be0e0f1fa4c3ac6e96994b8772015305ad51a5d702eaaedd257230286667fdd031f2cbe66b266c190cdb72df815b703ec12aa9a784d5e73887f74fa173e251db2309d071bb811929015968845e115c59ec0f1dd2fb2feb4bbc6ea09d24ef7a5bfa4c1ebd766c861049b8a22cdc374f4798bed848ba2cf7cf849f623747f6e1e7b7265ed3a318333c31fbd489b0e29a6bf398e0b2278298cb6ca850bb05a634abea01b7245bf45ef041bb38ebf6b09d44f668e9865dcb3b7f734c446d247c8898bc10914881b294e8065fcd4fafddef67c236805d49dc7eed13c0133fa3dcc798817341dd34218a31a0a8f5ebfe31d4d909750db880ff067e1c73480f1b6444614a15ec07ade20a3c1628a10226ac87906962d20f5e7be4e2a60c0849eeee1ee503ae732c4a781173dc26b0092be0506b100fcbe8875326ccd37bedec23fc7381ce7a0055732c06304f9d518e917956f850cd401dc451069825cd7752912135554c377122a5ce39c215e0b34e365a8c3067c56ac37683c82019477b80a0e2cd9c70b201c3b34bfd6583f531ca90c56278412c34f3d5fae12b44c22e33ccbc8146bacc687da151bcb47bdc647e1e330c6366b6db177fa189146666268c31b8f2468039a8fb60211db66c84cb550727c42542434be7c423524578e3e1482a45e3a2df150923cc900b8867636b1474a31ee9f08cfa84525b7be1fe58cea1ca88e496609633b3f758040b2befd65327aa15c9c37f21a96a07e001b91838f8428092dc2ed4fbeda27063bc22b5b94d7b66ef6b553c03828c95c33385072f34339bc21b8d18e5ff76064b82fe91ab9f7f73934a395a35f2587f39d1839c614a4e2e4e14f65fdce4d170cfad316154e953f436d2a6e20e740d44ab5f44461929a6243ace2323bbc5e9e29cd50b9c16fcec11119eb72a6996999a74856cc3a6a5bcf2908582219de084ff13f284bd568c4519166d55c8af53ad9c9d69232c69996d988f06bf85745173f5c1c2cd189302c380f08b055872531857e0a255cecc035bf90f7b5b9126fef0075f84315d7d923ab4b1d73bbfc730a6556b7820b81e70baa95ef8ebb7b14678a15bbd9d3734b56267cddaff5a2c917f32c78747705d0adfb042c1da64b7b35c0efff6517657e8d621e85502bf2235ca116d778c35e55d2a430f70ee971947a416c763ec7af32d760874db908ac166ee7c8458064690c6f3b3d4dd501551e3e462ab400a24ae87f6d5beb787d85f3b50b66365b939bb43c772d93a811a0e58fc1ec88786045f350a069f4addef1c331900af7040e9784af95f92e008b78fdcc2afdac412be42481f03fae152d24f62419b9749cffc0fe7bd8a7e5294d6eb4521e76ea359d66a9fe3f9c8e6cc1a48ead54c25db1a38a933e5911d714d172c25af05cd74a787996cd8be71509780850ce9e12294566f813", 0xd51}], 0x5) madvise(&(0x7f0000c0b000/0x1000)=nil, 0x1000, 0x3) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0xa}}}}, 0x11) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000080)) 1m5.433829522s ago: executing program 1 (id=2838): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) preadv(r0, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, 0x9d, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003d40)={0x2020}, 0x2020) r3 = io_uring_setup(0x299, &(0x7f0000000040)={0x0, 0xf76b, 0x4, 0x2, 0xfffffffe}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x208100) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f00006c4000/0x2000)=nil, 0x2000, 0x3000006, 0x10, r2, 0xaa4a000) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001780), 0x1) 1m5.433355615s ago: executing program 1 (id=2839): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4805}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000080)={0x942d, 0xb, 0x9, 0x8001}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x50bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x44080) 1m5.123031004s ago: executing program 0 (id=2841): prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0xeeef0000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="340000001900150030bd7000fddbdf250a0000000202000000000000180009800c00", @ANYRES32], 0x34}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="640f789900080f009a38000f352e2eb647660f3882684c66b9b302000066b8dc15000066ba000000000f30ca95000f01c467df5caa063e0f011a", 0x3a}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m4.811998514s ago: executing program 2 (id=2843): socket(0x2, 0xa, 0x1) syz_emit_ethernet(0x22, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x60, 0x0, 0x4, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000001340)=""/133, 0x85}, {&(0x7f0000001400)=""/173, 0xad}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/218, 0xda}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/17, 0x11}], 0x8, 0x77800000, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5], 0x6c}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5], 0x6c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r8, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) (async) io_submit(r8, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r7, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 1m4.652392026s ago: executing program 0 (id=2845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r1, r2}, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x400, 0x70bd2b, 0x2, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9ea}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 1m4.480599699s ago: executing program 1 (id=2846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r1 = timerfd_create(0x8, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/226, 0xcd, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m4.479086729s ago: executing program 0 (id=2847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x6368, &(0x7f00000008c0)={0x0, 0x0, 0x10000, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x48}) io_uring_enter(r5, 0x3, 0x10a5, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xffff, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2e) r13 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r13, 0x4611, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r14, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x140) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) sendmsg$NFC_CMD_GET_SE(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m4.478771469s ago: executing program 2 (id=2848): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2d, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_int(r2, 0x0, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x10}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1m4.396952965s ago: executing program 2 (id=2849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) 1m4.343381445s ago: executing program 1 (id=2850): socket$can_bcm(0x1d, 0x2, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) fcntl$setpipe(r0, 0x407, 0x4000004) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) pipe2(&(0x7f00000002c0), 0x0) (async) fcntl$setpipe(r1, 0x407, 0x100000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) (async) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) (async) 1m4.34268829s ago: executing program 2 (id=2851): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$unix(0x1, 0x7, 0x0) syz_emit_ethernet(0x15e, &(0x7f0000000200)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x4b, 0x4, 0x0, 0x0, 0x150, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101b8, @loopback, {[@cipso={0x86, 0x4e, 0x3, [{0x7, 0x5, "951f61"}, {0x7, 0x5, "7e62f3"}, {0x6, 0xb, "b68d7e5850272a6191"}, {0x5, 0x12, "6fa723c26a2328d7d72f7671a5fd5c5a"}, {0x1, 0x11, "b488d36937c53f8543080e93dc7049"}, {0x1, 0xe, "d97223a262fe64b7a4ca2e5f"}, {0x5, 0x2}]}, @ssrr={0x89, 0xb, 0x6d, [@broadcast, @local]}, @timestamp={0x44, 0x8, 0x21, 0x0, 0xb, [0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xe5, 0x1, 0x3, [{@multicast1, 0x80000000}, {@loopback, 0x1}, {@remote, 0xb}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x1}, {@broadcast, 0x9}]}, @cipso={0x86, 0x2b, 0x2, [{0x5, 0x8, "91ab3346bbab"}, {0x0, 0xc, "d2ae7a0e26f4180fa484"}, {0x1, 0x6, "a5285f56"}, {0x0, 0x4, "bd85"}, {0x6, 0x7, "e601139be5"}]}, @timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x6af4}, {@local, 0x3}, {@multicast1, 0x2}, {@private=0xa010102}, {@loopback, 0x2}]}, @cipso={0x86, 0x25, 0x3, [{0x1, 0xc, "a637851d4c9078fc6dfd"}, {0x5, 0x7, "859f9fd9a9"}, {0x0, 0x5, "ac76cf"}, {0xe, 0x7, "4baeedd5d1"}]}, @end]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x0, 0x89, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}, "a815a23da43974ff"}}}}}, 0x0) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x63ad, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x46, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x443, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x4, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x41fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r5, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x20005804) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010028b97004fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="0200260a06000500040000000a000200ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000000), 0x0, 0x37, 0x1) 1m4.278882801s ago: executing program 1 (id=2852): r0 = io_uring_setup(0x4822, &(0x7f0000000080)={0x0, 0xc8bf, 0x1, 0x2, 0x1000002}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0xffff, 0x8, 0x3, 0xac08, 0xffffffffffffffff}) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/cgroup\x00') 1m4.274793539s ago: executing program 1 (id=2853): r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3a209cb1fece81e46fe07d597017", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m4.10777118s ago: executing program 2 (id=2854): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x106, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) sendfile(r2, r1, &(0x7f0000000180)=0x58, 0x3fffff) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1m4.10643885s ago: executing program 0 (id=2856): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="cca66c1f59e90003ad2c4288db941bffdc539b06bf4f91a501d7a54a4575f8d58586db8c4d73e742634ac56720c593537c4c54dc9a1a13a7da3ba54bcecf734bc5c3a286f2f3a183f577757b9a1f308f458c5f18968bf1f38a95c6c197bbdc37a0e1a5305cfa05541323c33ee11842b87ff0b0fa1c21b718d90a39a0a0b6fb0000000000000000002300"]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sendto$packet(r3, &(0x7f0000000380)="b08724e91f91f684ad8875c3a3c93f06a1c61b985d502c481a09817c134acedbbe68f82bbe8f668c5692c6344b3107915b1bdc5fbdde61d21e2b89c2be9d3cb5f2dc0dde1576d28a39efd6b3", 0x4c, 0x20000000, &(0x7f0000000400)={0x11, 0x2, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000009c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "43918030151cee7830ecc699689e47d908f6b15af07ec36c4eb0fd75501e29f2", "286825a090bb38844aec5c6ac43abe6aab6a8f816af7226b646f33affb2b2209b3c5261c9e5c1ea13ceb5d8584b819f8", "3cc751aa09d11ff33d6020ea42d166da27e267e12a8fbaa2170240e6", {"d3ace7ae0259e6618a26e13f19841693", "c5c4e6a9393a4734ea8002ed2340743d"}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m4.000861587s ago: executing program 0 (id=2857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x0, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffff5}}}, 0x118) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100013070000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c00140073686131"], 0x160}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x10000, 0x2, 0x58000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 1m3.945749592s ago: executing program 0 (id=2858): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x6, 0x1, 0x6, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00034000000000002400128009000100766c616e000000001400028006000100ffff00000600050081000000bf3ee16559"], 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') chdir(0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x0, 0x1000}, {0x81, 0xc1}]}, 0x14, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 27.014076564s ago: executing program 32 (id=2858): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x6, 0x1, 0x6, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00034000000000002400128009000100766c616e000000001400028006000100ffff00000600050081000000bf3ee16559"], 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') chdir(0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x0, 0x1000}, {0x81, 0xc1}]}, 0x14, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 27.014020449s ago: executing program 33 (id=2853): r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3a209cb1fece81e46fe07d597017", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 27.013865418s ago: executing program 34 (id=2854): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x106, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) sendfile(r2, r1, &(0x7f0000000180)=0x58, 0x3fffff) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1.234819588s ago: executing program 3 (id=3292): syslog(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) fcntl$notify(r1, 0x402, 0x4) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900010073797a30000000000900020073797a3100000000080003400000349908000840000000000800044000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) syslog(0x9, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) (async) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) (async) fcntl$notify(r1, 0x402, 0x4) (async) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r3, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900010073797a30000000000900020073797a3100000000080003400000349908000840000000000800044000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) (async) 978.176138ms ago: executing program 3 (id=3294): r0 = socket$inet6(0xa, 0x5, 0x3b5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @common=@inet=@socket2={{0x28}, 0x48}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/127, 0x7f}, {&(0x7f0000001080)=""/171, 0xab}, {&(0x7f0000001140)=""/1, 0x1}, {&(0x7f0000001180)=""/198, 0xc6}, {&(0x7f0000001280)=""/85, 0x55}, {&(0x7f0000001300)=""/8, 0x8}, {&(0x7f0000001340)=""/180, 0xb4}, {&(0x7f0000001400)=""/119, 0x77}], 0x9, &(0x7f0000001540)=[{0x90, 0x0, 0x0, ""/123}, {0xf0, 0x0, 0x0, ""/220}, {0x30, 0x0, 0x0, ""/31}, {0x68, 0x0, 0x0, ""/84}, {0x30, 0x0, 0x0, ""/26}, {0x88, 0x0, 0x0, ""/117}, {0x98, 0x0, 0x0, ""/135}, {0x78, 0x0, 0x0, ""/99}], 0x3e0, 0x42}, 0x38, 0x12042) 903.562481ms ago: executing program 3 (id=3295): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x1) fstat(r0, &(0x7f00000001c0)) socket$inet(0x2, 0x80000, 0x73) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 785.895039ms ago: executing program 5 (id=3298): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='./cgroup\x00', 0x9, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x42, 0x1, 0x3, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x38, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x66}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x8000000000000000}]}, @nested={0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='./cgroup\x00', 0x9, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x42, 0x1, 0x3, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x38, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x66}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x8000000000000000}]}, @nested={0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) 785.438422ms ago: executing program 3 (id=3299): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f00000003c0)={0x2, 0x26, 0xd, 0x5, 0x10, 0x6, @lba=0x80000001, @lba=0xfe}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x4, 0xa50}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000040)={0x2715, 0x7, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x7, r3}) 711.105277ms ago: executing program 5 (id=3301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30000030303034303030303030303030303034703030302c757365725f69643dd84da6089dfbc978f6dd9451ed740d465c0948a30ca14a9240f5d52b2c4593dab9faf16b8657b61873f78b5fbd6f568894", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x29, 0x89, 0x8000020, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000500)=""/138, 0x20000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5fd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 625.348668ms ago: executing program 4 (id=3303): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d", 0xec}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000500)="182f46af187c389960104274a2b66f2ac2ad0386f38b52d2393515f193b1cc32f304ece4da8c30e4ed6eccaa29", 0x2d}], 0x3, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a", 0x1e}, {&(0x7f00000011c0)}], 0x5}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x1000000000401, 0x7, 0xc5]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578c", 0x3a}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6a", 0x9d}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53", 0x39}], 0x7, &(0x7f00000014c0)}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) pwritev(r2, &(0x7f0000000900)=[{&(0x7f0000000340)="f0a4667381d7716ecc99872b65ae71a66f66985b573c00352e6a3e02bc0ddb9047", 0x21}, {&(0x7f0000000880)="18a881f440de1315f2a55138205add662ebee35270c6823c415a0d838d06dc3027fde47f1c9f5ad5b4cdc9c37bca2ec849e6d7a876f1a9b9007f6b62be05b3083a331e004dd08c2511a8281ed5166e297ac5e906074fcce6ce04317de54ce76cbeab91b4f490aaa814", 0x69}], 0x2, 0x80, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000580)="7278f7435ac8ad69ddfa87c2eb7cee3da954a77bd5a70612a8825c7cdc486dbf2ab4b9113e200108eee53de040", 0x2d}, {&(0x7f0000000540)="acda670b", 0x4}], 0x5, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 366.98659ms ago: executing program 4 (id=3305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2}) r2 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r2) keyctl$read(0xb, r2, &(0x7f0000002e80)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) 292.232296ms ago: executing program 5 (id=3307): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)='>', 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x23ff, 0x7, 0xf9, 0x3}}], 0xfffffffffffffd09}) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000440)={0x6, 0x7, [{0x7, 0x0, 0x9}, {0x3, 0x0, 0xbe}, {0x7fff, 0x0, 0x9}, {0x92d, 0x0, 0x1}, {0x8000, 0x0, 0x40}, {0x7, 0x0, 0xc81e}, {0x80000001, 0x0, 0xffffffffffffff80}, {0x15, 0x0, 0x4}, {0x3ff, 0x0, 0x7fffffffffffffff}, {0x8001, 0x0, 0xa7b8}, {0x2, 0x0, 0x3}, {0x1, 0x0, 0x8}, {0x3, 0x0, 0x4}, {0x31962c2e, 0x0, 0x5}, {0x5}, {0x0, 0x0, 0xc}]}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0xa, 0x20, 0x1}}]}}]}, 0x44}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, &(0x7f0000000140)) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9, {0xfffff12f}}, './file0\x00'}) getsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000e28c772b16a0704b08000300", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40008c0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r14 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r14, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000261000/0x2000)=nil, 0x2000, 0x1, 0x10, r10, 0xa9527000) ioctl$KVM_RUN(r14, 0xae80, 0x0) 291.739897ms ago: executing program 6 (id=3308): r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x20200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xbed1, 0x9, 0x2, {0xb, @pix={0x6, 0x8, 0x36314d4e, 0x2, 0xff, 0x2, 0x1, 0x1, 0x1, 0x7, 0x0, 0x4}}, 0x7}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8c40, 0x0) (rerun: 64) r4 = fcntl$getown(r2, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfe, {0x28, 0x1, 0x1, r4, 0x3ff, 0x80000001, 0x7, 0x9, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x10) (async) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)=@overlay={0x7fffffff, 0x1, 0x4, 0x100000, 0x6, {r5, r6/1000+60000}, {0x5, 0x8, 0x8, 0x80, 0x4, 0x5f, "7a8054f1"}, 0x2, 0x3, {}, 0x46}) (async) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000380)=""/175, 0xaf, 0xfffffffffffff79c, &(0x7f0000000480)={r7, r8+60000000}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000004c0)={0x7}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r3, 0xeeff7000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r10, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async) r13 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000000700)=""/144, &(0x7f00000007c0)=0x90) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000800)={0x0, @reserved}) (async, rerun: 64) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000008c0)) (rerun: 64) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x121000, 0x0) ioctl$KVM_GET_MSRS_sys(r14, 0xc008ae88, &(0x7f0000000940)={0x7, 0x0, [{0x931, 0x0, 0x2}, {0xbc1, 0x0, 0x69f}, {0x9c7, 0x0, 0x1}, {0xb0c, 0x0, 0x4}, {0x891}, {0x3b8, 0x0, 0x3}, {0xa82, 0x0, 0x9}]}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x138, r10, 0x504, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x110, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "37e5624420b66b3e8f538a0aefce6020"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1f8a5657e879794cf5edd78f50be94a8357ece0e0c4e01ab13d84ad11f2abb71"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "20a202db5bcdb5676ee6473026c99966"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a6865bffeb304bc58aa382c2461d6fdb7ea2f21127b53cbe07c1fb2b46b814b7"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x24004000) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/video#\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '})^$).'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x8) fcntl$F_GET_RW_HINT(r13, 0x40b, &(0x7f0000000d00)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000d40)=0x1, 0xffffffffffffff7f) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000d80)={'vcan0\x00'}) 211.134753ms ago: executing program 4 (id=3309): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'syz_tun\x00', {'gretap0\x00'}, 0x950}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'syz_tun\x00', {'gretap0\x00'}, 0x950}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) (async) 210.580047ms ago: executing program 6 (id=3310): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x6, @mcast2}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x444, 0x400, {0x0, 0x2710}, {}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "957c723ec7c30268"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) r3 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) (async) r4 = open(&(0x7f00000005c0)='./file1\x00', 0x20000, 0x718bb647156ec2f6) chdir(&(0x7f0000000000)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) (async) open(&(0x7f0000000140)='./file1\x00', 0x10000, 0x20) (async) unlink(&(0x7f0000000100)='./file0/file1\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x7, 0x4, @scatter={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/86}, {&(0x7f0000000480)=""/76}]}, &(0x7f00000001c0)="a109a81b133dce", 0x0, 0x2000, 0x10012, 0x1, 0x0}) 208.010323ms ago: executing program 3 (id=3311): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf9800000000000057080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002900)={&(0x7f0000000800)="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", &(0x7f0000001800)=""/4096, &(0x7f0000002800)="01c9c93e7e16742e66dc1b5fe72f3adedbb21ff28497a1524f889f56d98f57c8bb1fea44948625489ec538bd9e570fec17213158d512f3ef0b1039fa7e38b406d567a101435b19e1e15ef7fc939938b09ca2a963cf65c4c4659306a96c82677e84d9cf204a38bf3159799a9139166c05e2ea6bd412228c1c3fd011b76acae5bae67174a2ce3d5e34e9454ded59fdec134074620a300ef676b5ec5e4bfadac69ea82e36b3e3f30bd6b6e6f605eaeb85b5ffa9cf8fc59f2860a864a9", &(0x7f00000028c0)="14e5e0a6f8f8fcc92e4f892f39916560495e584ada5aa1ae1cfb7d5ef9dca35eb12d", 0x0, r0}, 0x38) 144.347342ms ago: executing program 4 (id=3312): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 143.782365ms ago: executing program 6 (id=3313): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 143.462419ms ago: executing program 5 (id=3314): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x181c00, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r2], 0x50) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "02c7eafb2c0caca8b02a09a29bc39f97117e2ab9091a9ba307985452b442a278", "2ca066fb2fe381377267e10df925ab3d10e073ee5f5e0da362680a3468ccec4d", "7508a49563f98a48b65a92f0edacff5df5c106980c2dc8cbd7b99269d38dc31e", "1634ca397b134b9410c32e04e2e2e149ef7e72e382ac4eff98f1b35a90e6bbb1", "c3ffbfbd751386b7ca0142b3e8f626e310587aa17c3c7b9f5d2b7c735073d7af", "c1ea5b85854c5b3cd4c7514b", 0x3, 0x1, 0x0, 0x7, 0x2}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r5}, 0x38) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f00000001c0)=@ethtool_dump={0x40, 0x51962ed5, 0x72400000, 0xffbd, "782a95e3b0263838720159829273054772bf55dbd8ea8c0ba85fc406ba8c3facb65a584973500110394bfff7b33ba562405616658b8ca6ff1f20ff4b5e9fcb8d30a0d09ce86f2502b749cf297add84176a22a68765ebcebd45c0779dee9879c1cc819788f87c198caf3eb9c003f8574731b0053849635891b4da4fbf48ae7a48648c565ec19307ff7fe704eb63ecbb3ba79f3ff113bf43ac10c830b07e945236762410be79d9"}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x12ee84580edfc2cc, 0x55007}, [@IFLA_VF_PORTS={0x50, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "25ce2fd6dfdee93f1224115f03f016bb"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/cdrom\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}]}, {0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 79.658354ms ago: executing program 3 (id=3315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x9, 0x6, 0xfff}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x4000010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r2, 0x1, 0xffffbffe, 0x4, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c0d0) 75.030816ms ago: executing program 4 (id=3316): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000200)) write$cgroup_int(r0, &(0x7f0000000140)=0x401, 0x12) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic, 0x0, 0x0, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) 74.851896ms ago: executing program 6 (id=3317): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000027c0)=""/269, 0x10d}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) accept$alg(r1, 0x0, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000027c0)=""/269, 0x10d}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) (async) 74.434ms ago: executing program 5 (id=3318): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f00000000c0)) (async) accept$netrom(r0, 0x0, &(0x7f0000000000)) (async) r1 = socket$netlink(0x10, 0x3, 0xa) writev(r1, &(0x7f0000000300), 0x0) 11.591041ms ago: executing program 6 (id=3319): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0xe33, {0x0, 0x6, 0x100000000, 0xe, 0x100}}) write$cgroup_int(r0, &(0x7f00000002c0)=0x3, 0x12) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) bind$packet(r1, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x1}, 0xffffffffffffff0e) syz_emit_ethernet(0xd2, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x0) 10.985754ms ago: executing program 5 (id=3320): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x1000, &(0x7f0000000640)="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"}, {0x3, 0x0, 0x203, 0x0}, {0x3, 0x0, 0x100d5b5, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0xc, 0x0}, {0x2, 0x43, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x6, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x4, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'b'}]]}, 0x70}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x45a840, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80386433, &(0x7f00000000c0)=""/61) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.058441ms ago: executing program 4 (id=3321): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xc83417c22f980b3c}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r10, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/ipc\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) 0s ago: executing program 6 (id=3322): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) mq_open(0x0, 0xc3, 0x40, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_open(&(0x7f0000000000)='\xd0O\xe4\xde!\xbd!|]\x85\xf3\xde\xebR76\xf1\xeb\xe9\x8e%q\xc4\xf7\x91\xc52\xf9Z\x04\x9d\x11\xcbv*\xe1\x98d\xa0\xb5\xf3;\x87\x1b\xfdG\xfd\xdb\xf5\xe8[@\xd6\xa7\x9c\xb7\xff\f\xb1\xdd\x9b\xa1f\x89[\x04\xab8\x0e\x86\xd5\xce\xda\x06\n\xd3\xd86q^\x91}r\x87\xf6\xdb5b\x90\x83*\xe94\xf0\xbd\x0f\xb4c\x8ec\xf4o0D#Y', 0x3, 0x181, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) ioctl(r7, 0x7, &(0x7f0000000400)="ec9fc4ae19b71d81a23c5fdc806aa52e7625f431ad3fbfe552a0af4ab136447f524b78e7d96fe7c1eafc415aeffd07bf122acda22da7ce67472b67246d7f26b95b148edb4ccf8b64b3216c014d7a9412b4c5be659051ffa599fd468aad767763c542312b3a4b25c5848872e1273040a2a944712ca46dae4367be301185a2d5b2a78e98a71a4990f4ff00706c07ba4960de9406ee6321a40e0ac1cb50a76f97228110e30e81aecf45797c5dbd2e9b1507d238ef3ce8967e453e386782a70662a913000315867f4fc5ed24544bb2ae44c12ed20ecf7cbc689fa84243fb85522174a34ff90516") kernel console output (not intermixed with test programs): vlan3 added [ 203.287631][ T8485] usb 7-1: USB disconnect, device number 11 [ 203.307582][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 203.312885][ T5872] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.316658][ T5872] usb 5-1: config 179 has no interface number 0 [ 203.319780][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.324870][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.329599][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.333106][ T5872] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 203.336963][ T5872] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.342526][ T5872] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.348315][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.354858][T14333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.503579][T14374] vivid-000: ================= START STATUS ================= [ 203.506923][T14374] vivid-000: Test Pattern: 75% Colorbar [ 203.509311][T14374] vivid-000: Fill Percentage of Frame: 100 [ 203.512031][T14374] vivid-000: Horizontal Movement: No Movement [ 203.514597][T14374] vivid-000: Vertical Movement: No Movement [ 203.517150][T14374] vivid-000: OSD Text Mode: All [ 203.519264][T14374] vivid-000: Show Border: false [ 203.526072][T14374] vivid-000: Show Square: false [ 203.527751][T14374] vivid-000: Sensor Flipped Horizontally: false [ 203.529974][T14374] vivid-000: Sensor Flipped Vertically: false [ 203.533066][T14374] vivid-000: Insert SAV Code in Image: false [ 203.535351][T14374] vivid-000: Insert EAV Code in Image: false [ 203.537335][T14374] vivid-000: Insert Video Guard Band: false [ 203.539258][T14374] vivid-000: Reduced Framerate: false [ 203.541109][T14374] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 203.543969][T14374] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 203.546833][T14374] vivid-000: Enable Capture Cropping: true [ 203.549346][T14374] vivid-000: Enable Capture Composing: true [ 203.551319][T14374] vivid-000: Enable Capture Scaler: true [ 203.553154][T14374] vivid-000: Timestamp Source: End of Frame [ 203.555166][T14374] vivid-000: Colorspace: sRGB [ 203.556814][T14374] vivid-000: Transfer Function: Default [ 203.558686][T14374] vivid-000: Y'CbCr Encoding: Default [ 203.560748][T14374] vivid-000: HSV Encoding: Hue 0-179 [ 203.562533][T14374] vivid-000: Quantization: Default [ 203.564472][T14374] vivid-000: Apply Alpha To Red Only: true [ 203.566813][T14374] vivid-000: Standard Aspect Ratio: 4x3 [ 203.570525][T14374] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 203.574090][T14374] vivid-000: DV Timings: 640x480p59 inactive [ 203.578073][T14374] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 203.581179][T14374] vivid-000: Maximum EDID Blocks: 2 [ 203.583386][T14374] vivid-000: Limited RGB Range (16-235): false [ 203.584857][ T5872] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input24 [ 203.586104][T14374] vivid-000: Rx RGB Quantization Range: Automatic [ 203.586171][T14374] vivid-000: Power Present: 0x00000001 [ 203.586260][T14374] tpg source WxH: 320x180 (Y'CbCr) [ 203.586280][T14374] tpg field: 1 [ 203.586287][T14374] tpg crop: (0,0)/320x180 [ 203.586297][T14374] tpg compose: (0,0)/320x180 [ 203.586308][T14374] tpg colorspace: 8 [ 203.586316][T14374] tpg transfer function: 0/0 [ 203.586324][T14374] tpg Y'CbCr encoding: 0/0 [ 203.586334][T14374] tpg quantization: 0/0 [ 203.586343][T14374] tpg RGB range: 0/2 [ 203.586353][T14374] vivid-000: ================== END STATUS ================== [ 203.596378][ T5995] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 203.625234][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.800882][ T840] usb usb40-port1: unable to enumerate USB device [ 203.810006][ T5995] usb 8-1: Using ep0 maxpacket: 16 [ 203.814418][ T5995] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 951 [ 203.820537][ T5995] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.823663][ T5995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.826224][ T5995] usb 8-1: Product: syz [ 203.827854][ T5995] usb 8-1: Manufacturer: syz [ 203.829376][ T5995] usb 8-1: SerialNumber: syz [ 203.894161][T14387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36890 sclass=netlink_route_socket pid=14387 comm=syz.2.2669 [ 203.970874][ T5934] Bluetooth: hci0: command tx timeout [ 204.272161][ T5995] cdc_ncm 8-1:1.0: bind() failure [ 204.277356][ T5995] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 204.279645][ T5995] cdc_ncm 8-1:1.1: bind() failure [ 204.283756][ T5995] usb 8-1: USB disconnect, device number 16 [ 204.842738][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 204.851630][T14392] erspan1: entered promiscuous mode [ 204.853314][T14392] erspan1: entered allmulticast mode [ 204.895915][T14392] xt_CT: No such helper "snmp_trap" [ 205.212243][T14400] qnx6: unable to set blocksize [ 205.219217][T14403] qnx6: unable to set blocksize [ 205.234684][T14400] Bluetooth: MGMT ver 1.23 [ 205.432595][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 205.432606][ T40] audit: type=1400 audit(201.447:345779): avc: denied { ioctl } for pid=14411 comm="syz.1.2674" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=53352 ioctlcmd=0x5613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 205.531719][ T40] audit: type=1400 audit(201.531:345780): avc: denied { create } for pid=14418 comm="syz.1.2676" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.538637][ T40] audit: type=1400 audit(201.541:345781): avc: denied { setopt } for pid=14418 comm="syz.1.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.549654][ T40] audit: type=1400 audit(201.541:345782): avc: denied { read write } for pid=14418 comm="syz.1.2676" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 205.559604][ T40] audit: type=1400 audit(201.541:345783): avc: denied { open } for pid=14418 comm="syz.1.2676" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 205.567687][ T40] audit: type=1400 audit(201.541:345784): avc: denied { mounton } for pid=14418 comm="syz.1.2676" path="/81/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.584683][ T40] audit: type=1400 audit(201.541:345785): avc: denied { mount } for pid=14418 comm="syz.1.2676" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.662876][T14422] bridge_slave_1: entered allmulticast mode [ 205.669369][ T40] audit: type=1804 audit(201.662:345786): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2676" name="/newroot/81/file0" dev="fuse" ino=1 res=1 errno=0 [ 205.691599][ T40] audit: type=1400 audit(201.681:345787): avc: denied { unmount } for pid=13205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 205.701677][ T40] audit: type=1400 audit(201.690:345788): avc: denied { unlink } for pid=13205 comm="syz-executor" name="file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.722036][T14425] netlink: 'syz.2.2678': attribute type 15 has an invalid length. [ 205.727511][T14425] netlink: 'syz.2.2678': attribute type 15 has an invalid length. [ 205.746032][T14427] fuse: Unknown parameter 'r' [ 205.750788][T14425] 9p: Bad value for 'port' [ 205.794337][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14429 comm=syz.2.2681 [ 205.800899][T14429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14429 comm=syz.2.2681 [ 205.814590][T14429] vlan2: entered allmulticast mode [ 205.816641][T14429] veth0_to_bond: entered allmulticast mode [ 206.011636][T14452] __nla_validate_parse: 5 callbacks suppressed [ 206.011648][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 206.086035][ T1295] usb 5-1: USB disconnect, device number 16 [ 206.086095][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 206.090736][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 206.157099][T14466] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 206.159688][T14466] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 206.162500][T14466] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2691'. [ 206.250667][T14467] comedi comedi3: no devices specified [ 206.420403][T14483] VFS: Mount too revealing [ 206.459663][T14491] 9p: Bad value for 'rfdno' [ 206.541706][T14498] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 206.546918][T14498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.573860][T14501] overlayfs: failed to resolve '/006': -2 [ 206.728889][ T1295] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.878342][ T1295] usb 5-1: device descriptor read/64, error -71 [ 206.968676][T14520] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 207.003863][T14520] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 207.019627][T14520] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 207.052174][T14528] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 207.057834][T14528] overlayfs: failed to set xattr on upper [ 207.059869][T14528] overlayfs: ...falling back to redirect_dir=nofollow. [ 207.062502][T14528] overlayfs: ...falling back to metacopy=off. [ 207.064702][T14528] overlayfs: ...falling back to index=off. [ 207.066659][T14528] overlayfs: ...falling back to uuid=null. [ 207.082984][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2710'. [ 207.145628][ T1295] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.295485][ T1295] usb 5-1: device descriptor read/64, error -71 [ 207.423792][ T1295] usb usb5-port1: attempt power cycle [ 207.531751][T14554] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.541340][T14554] misc userio: Can't change port type on an already running userio instance [ 207.797278][ T1295] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.841827][ T1295] usb 5-1: device descriptor read/8, error -71 [ 208.107949][ T1295] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 208.129836][ T1295] usb 5-1: device descriptor read/8, error -71 [ 208.248456][ T1295] usb usb5-port1: unable to enumerate USB device [ 209.039315][ T6809] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.043814][ T6809] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.048909][ T6809] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.054592][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.146612][T14591] bridge1: entered promiscuous mode [ 209.148360][T14591] bridge1: entered allmulticast mode [ 209.241678][T14593] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 209.245326][T14593] netlink: 'syz.1.2728': attribute type 3 has an invalid length. [ 209.248753][T14593] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2728'. [ 209.301437][T14597] SET target dimension over the limit! [ 209.454833][T14613] atomic_op ffff888045a02198 conn xmit_atomic 0000000000000000 [ 209.461452][T14611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2735'. [ 209.743748][ T50] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 209.758290][T14634] overlayfs: failed to resolve './file0': -2 [ 209.809392][T14636] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2744'. [ 209.904220][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 209.913710][ T50] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 209.918769][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.940633][ T50] pvrusb2: Hardware description: Terratec Grabster AV400 [ 209.943111][ T50] pvrusb2: ********** [ 209.944466][ T50] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 209.949710][ T50] pvrusb2: Important functionality might not be entirely working. [ 209.952446][ T50] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 209.956137][ T50] pvrusb2: ********** [ 210.056929][T14641] /dev/sr0: Can't open blockdev [ 210.092866][T14647] program syz.3.2748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.156490][ T2488] pvrusb2: Invalid write control endpoint [ 210.199442][ T2488] pvrusb2: Invalid write control endpoint [ 210.202064][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 210.206797][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 210.210008][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 210.215039][ T2488] pvrusb2: Device being rendered inoperable [ 210.217690][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 210.220896][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 210.225114][ T2488] pvrusb2: Attached sub-driver cx25840 [ 210.227607][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 210.231862][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 210.374717][T14615] pvrusb2: Attempted to execute control transfer when device not ok [ 210.387360][ T50] usb 6-1: USB disconnect, device number 19 [ 210.685664][T14684] sp0: Synchronizing with TNC [ 210.687447][T14684] [U] [ 210.972716][T14693] (syz.1.2762,14693,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 210.976340][T14693] (syz.1.2762,14693,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 211.028792][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 211.028804][ T40] audit: type=1400 audit(206.685:345890): avc: denied { create } for pid=14694 comm="syz.3.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.035855][ T40] audit: type=1400 audit(206.685:345891): avc: denied { create } for pid=14694 comm="syz.3.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.052393][ T40] audit: type=1400 audit(206.704:345892): avc: denied { append } for pid=14699 comm="syz.1.2765" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.073683][T14696] can: request_module (can-proto-0) failed. [ 211.086620][T14695] can: request_module (can-proto-0) failed. [ 211.099200][ T40] audit: type=1400 audit(206.742:345893): avc: denied { create } for pid=14708 comm="syz.0.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.106574][ T40] audit: type=1400 audit(206.751:345894): avc: denied { setopt } for pid=14708 comm="syz.0.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.119668][T14711] trusted_key: encrypted_key: master key parameter is missing [ 211.125401][ T40] audit: type=1400 audit(206.770:345895): avc: denied { connect } for pid=14710 comm="syz.1.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.129640][T14709] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 211.132727][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2768'. [ 211.140452][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 211.150018][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 211.179215][ T40] audit: type=1400 audit(206.826:345896): avc: denied { getopt } for pid=14714 comm="syz.3.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.188824][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2770'. [ 211.211924][ T40] audit: type=1400 audit(206.854:345897): avc: denied { ioctl } for pid=14718 comm="syz.0.2772" path="socket:[53752]" dev="sockfs" ino=53752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.233521][T14724] netlink: 'syz.3.2774': attribute type 30 has an invalid length. [ 211.310024][ T40] audit: type=1400 audit(206.947:345898): avc: denied { read } for pid=14730 comm="syz.3.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 211.351819][ T40] audit: type=1400 audit(206.985:345899): avc: denied { mount } for pid=14732 comm="syz.1.2778" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 211.596824][T14763] input: syz0 as /devices/virtual/input/input27 [ 211.612887][T14766] binder: 14765:14766 unknown command 0 [ 211.619000][T14766] binder: 14765:14766 ioctl c0306201 200000000080 returned -22 [ 211.644552][T14774] __nla_validate_parse: 2 callbacks suppressed [ 211.644572][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 211.678230][ T5934] block nbd0: Receive control failed (result -1) [ 211.728131][T14784] comedi comedi2: comedi_config --init_data is deprecated [ 211.800878][T14789] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.804891][T14789] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 212.022058][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 212.045159][T14798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2798'. [ 212.049891][T14798] 9p: Invalid gid '0x00000000ffffffff' [ 212.058481][T14798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2798'. [ 212.063333][T14798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2798'. [ 212.071125][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 212.075167][T14798] bridge_slave_1: left allmulticast mode [ 212.077179][T14798] bridge_slave_1: left promiscuous mode [ 212.079113][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.093406][T14798] bridge_slave_0: left allmulticast mode [ 212.096949][T14798] bridge_slave_0: left promiscuous mode [ 212.102424][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.168882][ T5934] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 212.172693][T14814] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 212.222976][T14814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.247359][T14814] bond1: (slave gretap1): making interface the new active one [ 212.252076][T14814] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 212.282883][T14817] overlayfs: missing 'lowerdir' [ 212.305024][T14819] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 212.416188][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 212.436043][T14827] netem: change failed [ 212.438934][T14827] syzkaller0: entered promiscuous mode [ 212.448144][T14827] syzkaller0: entered allmulticast mode [ 212.555155][ T50] usb 7-1: device descriptor read/64, error -71 [ 212.812063][ T50] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 212.892886][T14842] SELinux: ebitmap: empty map [ 212.895197][T14842] SELinux: failed to load policy [ 212.950690][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 212.951006][ T50] usb 7-1: device descriptor read/64, error -71 [ 213.068515][ T50] usb usb7-port1: attempt power cycle [ 213.114131][ T29] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 213.117033][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.119565][ T29] usb 8-1: Product: syz [ 213.120978][ T29] usb 8-1: Manufacturer: syz [ 213.122751][ T29] usb 8-1: SerialNumber: syz [ 213.355466][T14870] program syz.0.2823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.409164][T14878] binder: 14876:14878 ioctl c018620c 200000000040 returned -1 [ 213.442502][ T50] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 213.464288][ T50] usb 7-1: device descriptor read/8, error -71 [ 213.469505][ T29] rtl8150 8-1:1.0: couldn't reset the device [ 213.471610][ T29] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 213.476853][ T29] usb 8-1: USB disconnect, device number 17 [ 213.667017][ T5997] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 213.741980][ T50] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 213.763747][ T50] usb 7-1: device descriptor read/8, error -71 [ 213.827547][ T5997] usb 6-1: Using ep0 maxpacket: 8 [ 213.830851][ T5997] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.833733][ T5997] usb 6-1: config 0 has no interface number 0 [ 213.835822][ T5997] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.839513][ T5997] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.843317][ T5997] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.845304][T14889] [U] E [ 213.846891][ T5997] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.848245][T14889] [U] 3&I [ 213.853362][ T5997] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.853522][T14889] [U] [ 213.856337][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.857510][T14889] [U] [ 213.861717][T14889] [U] [ 213.862082][ T5997] usb 6-1: config 0 descriptor?? [ 213.862678][T14889] [U] [ 213.865171][T14889] [U] [ 213.866087][T14889] [U] [ 213.866979][T14889] [U] [ 213.867680][ T5997] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 213.867917][T14889] [U] [ 213.871362][T14889] [U] [ 213.872216][T14889] [U] [ 213.873107][T14889] [U] [ 213.874383][T14889] [U] [ 213.875278][T14889] [U] [ 213.876169][T14889] [U] [ 213.877060][T14889] [U] [ 213.881052][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.894214][ T50] usb usb7-port1: unable to enumerate USB device [ 214.026081][T14892] syzkaller0: entered promiscuous mode [ 214.027790][T14892] syzkaller0: entered allmulticast mode [ 214.032992][T14892] netlink: 'syz.3.2828': attribute type 39 has an invalid length. [ 214.053136][T14888] [U] [ 214.138541][T14902] binder: 14876:14902 ioctl c0389423 2000000000c0 returned -22 [ 214.149150][ T24] usb 6-1: USB disconnect, device number 20 [ 214.157222][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 214.268102][T14901] wg1 speed is unknown, defaulting to 1000 [ 214.388431][T14901] lo speed is unknown, defaulting to 1000 [ 214.471612][T14914] bond1: entered allmulticast mode [ 214.478879][T14914] ip6gretap1: entered promiscuous mode [ 214.486208][T14914] ip6gretap1: entered allmulticast mode [ 214.488212][T14914] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 214.758707][T14925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2837'. [ 214.826091][T14933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=14933 comm=syz.1.2839 [ 214.865444][T14917] wg1 speed is unknown, defaulting to 1000 [ 214.947323][T14917] lo speed is unknown, defaulting to 1000 [ 215.487042][T14969] input: syz1 as /devices/virtual/input/input28 [ 215.586783][T14980] netlink: 'syz.3.2844': attribute type 21 has an invalid length. [ 215.589554][T14980] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2844'. [ 215.592651][T14980] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2844'. [ 215.624687][T14972] nbd1: detected capacity change from 0 to 63 [ 215.718339][T14988] XFS (nbd0): SB validate failed with error -5. [ 215.742392][T14970] nbd2: detected capacity change from 0 to 63 [ 215.759502][ T5937] block nbd2: Receive control failed (result -104) [ 215.759542][ T5934] block nbd1: Receive control failed (result -32) [ 215.897604][T15003] geneve1: entered allmulticast mode [ 215.950768][T15012] input: syz0 as /devices/virtual/input/input29 [ 216.021192][T15017] afs: Unknown parameter 'dyn' [ 216.026509][T15017] overlayfs: overlapping lowerdir path [ 216.130794][T15021] netlink: 'syz.2.2854': attribute type 3 has an invalid length. [ 216.133285][T15021] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 216.136141][T15021] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2854'. [ 216.175589][T15025] fuse: Bad value for 'group_id' [ 216.177335][T15025] fuse: Bad value for 'group_id' [ 216.198398][T15026] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 216.203119][T15026] netlink: 'syz.2.2854': attribute type 2 has an invalid length. [ 216.206848][T15026] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 216.210597][T15026] netlink: 'syz.2.2854': attribute type 3 has an invalid length. [ 217.172600][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2860'. [ 217.222155][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 217.222173][ T40] audit: type=1400 audit(212.475:345959): avc: denied { mount } for pid=15037 comm="syz.3.2861" name="/" dev="rpc_pipefs" ino=55296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 217.235436][ T40] audit: type=1400 audit(212.485:345960): avc: denied { mounton } for pid=15037 comm="syz.3.2861" path="/105/file0" dev="rpc_pipefs" ino=55296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 217.282419][ T40] audit: type=1400 audit(212.532:345961): avc: denied { unmount } for pid=13554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 217.308909][ T40] audit: type=1400 audit(212.550:345962): avc: denied { getopt } for pid=15039 comm="syz.3.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.315069][T15040] comedi comedi0: Minor 2 could not be opened [ 217.372035][T15043] mkiss: ax0: crc mode is auto. [ 217.717661][T15059] (syz.3.2869,15059,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 217.721835][T15059] (syz.3.2869,15059,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 217.728557][T15059] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 218.039660][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 218.199889][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 218.204233][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.209369][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.213875][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 218.216481][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.219572][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.226849][ T10] usb 8-1: config 0 descriptor?? [ 218.242945][ T5934] Bluetooth: hci4: command 0x0406 tx timeout [ 218.244517][ T50] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 218.247787][ T50] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 218.662726][ T10] hid_parser_main: 30 callbacks suppressed [ 218.662742][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 218.672938][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 218.675344][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 218.677561][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 218.682217][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 218.685299][ T10] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 218.874928][T15062] bridge_slave_1: left allmulticast mode [ 218.876905][T15062] bridge_slave_1: left promiscuous mode [ 218.878842][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.888768][T15062] bridge_slave_0: left promiscuous mode [ 218.891375][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.038978][ T5995] usb 8-1: USB disconnect, device number 18 [ 219.630308][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.728607][ T40] audit: type=1400 audit(214.814:345963): avc: denied { ioctl } for pid=15067 comm="syz.3.2873" path="socket:[58473]" dev="sockfs" ino=58473 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 220.114259][ T40] audit: type=1400 audit(215.188:345964): avc: denied { getopt } for pid=15076 comm="syz.3.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.171114][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2877'. [ 220.181660][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2877'. [ 220.215269][T15083] bond2: Unable to set up delay as MII monitoring is disabled [ 220.219560][T15083] bond2 (unregistering): Released all slaves [ 220.343516][ T40] audit: type=1400 audit(215.394:345965): avc: denied { read write } for pid=15085 comm="syz.3.2878" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 220.351413][ T40] audit: type=1400 audit(215.394:345966): avc: denied { open } for pid=15085 comm="syz.3.2878" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 220.358815][ T40] audit: type=1400 audit(215.394:345967): avc: denied { ioctl } for pid=15085 comm="syz.3.2878" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 220.467072][ T50] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 220.469888][ T50] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 220.477864][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.603838][T15094] FAT-fs (sr0): bogus number of reserved sectors [ 220.606511][T15094] FAT-fs (sr0): Can't find a valid FAT filesystem [ 220.718140][ T40] audit: type=1400 audit(215.740:345968): avc: denied { search } for pid=15096 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.904292][T15109] syz.3.2883 (15109): /proc/15107/oom_adj is deprecated, please use /proc/15107/oom_score_adj instead. [ 221.021823][T15109] netlink: 'syz.3.2883': attribute type 25 has an invalid length. [ 221.024556][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 221.131983][T15109] netlink: 'syz.3.2883': attribute type 25 has an invalid length. [ 221.134552][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 221.448089][T15123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=15123 comm=syz.3.2885 [ 221.566494][T15128] bond2 (unregistering): Released all slaves [ 222.569382][T15139] Bluetooth: hci0: invalid len left 7, exp >= 104 [ 222.620323][T15141] syzkaller0: entered promiscuous mode [ 222.622237][T15141] syzkaller0: entered allmulticast mode [ 222.860444][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 222.861142][ T5934] Bluetooth: hci3: command 0x0405 tx timeout [ 222.861173][ T50] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 222.861206][ T50] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 222.863436][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'. [ 222.874471][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2891'. [ 222.877681][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'. [ 222.971478][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 222.994619][T15150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2893'. [ 222.998238][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 223.041149][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 223.041166][ T40] audit: type=1400 audit(217.910:345988): avc: denied { write } for pid=15152 comm="syz.3.2894" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.050565][ T40] audit: type=1400 audit(217.910:345989): avc: denied { open } for pid=15152 comm="syz.3.2894" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.090416][ T40] audit: type=1400 audit(217.966:345990): avc: denied { read } for pid=15155 comm="syz.3.2895" path="socket:[56570]" dev="sockfs" ino=56570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.237358][ T40] audit: type=1400 audit(218.106:345991): avc: denied { setopt } for pid=15166 comm="syz.3.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.248035][ T40] audit: type=1400 audit(218.116:345992): avc: denied { listen } for pid=15166 comm="syz.3.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 223.256080][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 224.207870][T15171] overlayfs: failed to resolve './file0': -2 [ 224.242184][T15173] netlink: 'syz.3.2900': attribute type 3 has an invalid length. [ 224.509834][T15179] netlink: 146804 bytes leftover after parsing attributes in process `syz.3.2903'. [ 224.512985][T15179] netlink: Unknown conntrack attr (type=2304, max=9) [ 224.881967][T15190] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 224.896344][ T40] audit: type=1400 audit(219.650:345993): avc: denied { map } for pid=15189 comm="syz.3.2907" path="socket:[59568]" dev="sockfs" ino=59568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.976391][T15193] overlayfs: missing 'lowerdir' [ 225.084741][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.084887][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.088913][ T50] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 225.096164][ T40] audit: type=1400 audit(219.846:345994): avc: denied { connect } for pid=15197 comm="syz.3.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.178110][T15198] netlink: 'syz.3.2910': attribute type 11 has an invalid length. [ 225.182694][ T40] audit: type=1400 audit(219.921:345995): avc: denied { setopt } for pid=15197 comm="syz.3.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.214185][ T40] audit: type=1400 audit(219.949:345996): avc: denied { append } for pid=15201 comm="syz.3.2911" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.275069][ T40] audit: type=1400 audit(220.005:345997): avc: denied { create } for pid=15205 comm="syz.3.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.598837][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 225.769058][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 225.774511][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 225.778993][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.783273][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 225.788128][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 225.796770][ T10] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 225.800456][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.804057][ T10] usb 8-1: Product: syz [ 225.805854][ T10] usb 8-1: Manufacturer: syz [ 225.807779][ T10] usb 8-1: SerialNumber: syz [ 225.816219][ T10] usb 8-1: config 0 descriptor?? [ 225.827344][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input30 [ 225.833511][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.838665][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.846198][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.851470][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.864579][T12670] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.879471][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.884092][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.889691][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 225.894349][ T5320] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 226.033468][T15211] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 226.114291][ T5872] usb 8-1: USB disconnect, device number 19 [ 228.286411][T15229] netlink: 'syz.3.2918': attribute type 4 has an invalid length. [ 228.289729][T15229] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2918'. [ 228.305581][T15229] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2918'. [ 228.311697][T15229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=15229 comm=syz.3.2918 [ 228.483629][T15236] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.487370][T15236] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.586957][T15236] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.590256][T15236] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.743534][T15236] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.746760][T15236] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.882902][T15236] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.886109][T15236] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.983532][ T6825] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.986482][ T6825] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.995285][ T6825] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.998162][ T6825] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.006087][ T6825] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.009361][ T6825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.017306][ T6825] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.020718][ T6825] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.256200][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 229.256213][ T40] audit: type=1400 audit(223.728:345999): avc: denied { write } for pid=15245 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 230.061346][ T40] audit: type=1400 audit(224.486:346000): avc: denied { ioctl } for pid=15249 comm="syz.3.2924" path="socket:[57634]" dev="sockfs" ino=57634 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.088611][ T40] audit: type=1400 audit(224.514:346001): avc: denied { bind } for pid=15252 comm="syz.3.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.095846][ T40] audit: type=1400 audit(224.514:346002): avc: denied { getopt } for pid=15252 comm="syz.3.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.103072][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 230.189795][ T40] audit: type=1400 audit(224.607:346003): avc: denied { connect } for pid=15256 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.515630][ T24] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 230.699927][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.703572][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.708355][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.711869][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 230.715337][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.721863][ T24] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 230.724690][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.727179][ T24] usb 8-1: Product: syz [ 230.728449][ T24] usb 8-1: Manufacturer: syz [ 230.730524][ T24] usb 8-1: SerialNumber: syz [ 230.738798][ T24] usb 8-1: config 0 descriptor?? [ 230.741308][T15259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.747705][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input31 [ 230.979037][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.982943][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.988561][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.991669][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.995822][ T40] audit: type=1400 audit(225.356:346004): avc: denied { read append } for pid=15258 comm="syz.3.2928" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 231.057003][ T24] usb 8-1: USB disconnect, device number 20 [ 231.773979][ T40] audit: type=1400 audit(226.085:346005): avc: denied { create } for pid=15267 comm="syz.3.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.805675][ T40] audit: type=1400 audit(226.113:346006): avc: denied { watch watch_reads } for pid=15269 comm="syz.3.2932" path="/176/file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 231.814059][ T40] audit: type=1400 audit(226.123:346007): avc: denied { mounton } for pid=15269 comm="syz.3.2932" path="/176/file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 231.904761][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'. [ 231.910010][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2934'. [ 231.912852][T15277] netlink: 'syz.3.2934': attribute type 12 has an invalid length. [ 233.018646][ T40] audit: type=1400 audit(227.255:346008): avc: denied { execute } for pid=15288 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 233.084266][T15292] fuse: Bad value for 'group_id' [ 233.086416][T15292] fuse: Bad value for 'group_id' [ 233.143080][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 233.179386][ T5286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.182235][ T5286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.184143][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.188118][ T5286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.191245][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.192443][ T5286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.200649][ T5286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.201123][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.203277][ T5286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.205983][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.217401][ T5934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.220972][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.223286][ T5937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.225840][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.228155][ T5937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.231632][ T5934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.234442][ T5934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.238138][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.246074][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.249641][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.291894][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 233.330036][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.334137][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.337822][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.343027][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.345818][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.423975][T15296] wg1 speed is unknown, defaulting to 1000 [ 233.521917][T15296] lo speed is unknown, defaulting to 1000 [ 233.556917][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.583883][T15295] wg1 speed is unknown, defaulting to 1000 [ 233.668995][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.725122][T15295] lo speed is unknown, defaulting to 1000 [ 233.737019][T15303] wg1 speed is unknown, defaulting to 1000 [ 233.742681][T15296] chnl_net:caif_netlink_parms(): no params data found [ 233.773436][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.857320][T15303] lo speed is unknown, defaulting to 1000 [ 233.876150][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.934210][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.936891][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.939956][T15296] bridge_slave_0: entered allmulticast mode [ 233.944312][T15296] bridge_slave_0: entered promiscuous mode [ 233.950189][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.953224][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.956468][T15296] bridge_slave_1: entered allmulticast mode [ 233.960455][T15296] bridge_slave_1: entered promiscuous mode [ 234.001504][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.025337][T15295] chnl_net:caif_netlink_parms(): no params data found [ 234.037055][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.082457][T15296] team0: Port device team_slave_0 added [ 234.118745][T15296] team0: Port device team_slave_1 added [ 234.218865][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.221761][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.231632][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.244369][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.247061][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.249594][T15295] bridge_slave_0: entered allmulticast mode [ 234.252448][T15295] bridge_slave_0: entered promiscuous mode [ 234.258164][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.260380][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.269603][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.280875][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.283118][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.285521][T15295] bridge_slave_1: entered allmulticast mode [ 234.288465][T15295] bridge_slave_1: entered promiscuous mode [ 234.359080][ T13] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 234.362437][ T13] ip6gretap1 (unregistering): left allmulticast mode [ 234.497223][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.506119][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.510250][ T13] bond0 (unregistering): Released all slaves [ 234.518581][ T13] bond1 (unregistering): Released all slaves [ 234.572171][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.584972][T15296] hsr_slave_0: entered promiscuous mode [ 234.588432][T15296] hsr_slave_1: entered promiscuous mode [ 234.591713][T15296] debugfs: 'hsr0' already exists in 'hsr' [ 234.594076][T15296] Cannot create hsr debugfs directory [ 234.604410][T15303] chnl_net:caif_netlink_parms(): no params data found [ 234.611434][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.633170][ T13] tipc: Disabling bearer [ 234.642985][ T13] tipc: Left network mode [ 234.673612][T15295] team0: Port device team_slave_0 added [ 234.729255][T15295] team0: Port device team_slave_1 added [ 234.766347][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.768553][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.776707][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.786556][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.789792][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.801657][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.818746][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.821533][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.826984][T15303] bridge_slave_0: entered allmulticast mode [ 234.831590][T15303] bridge_slave_0: entered promiscuous mode [ 234.858772][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.861327][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.863667][T15303] bridge_slave_1: entered allmulticast mode [ 234.866606][T15303] bridge_slave_1: entered promiscuous mode [ 234.896546][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.915517][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.933114][T15295] hsr_slave_0: entered promiscuous mode [ 234.935914][T15295] hsr_slave_1: entered promiscuous mode [ 234.938291][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 234.940189][T15295] Cannot create hsr debugfs directory [ 235.015725][T15303] team0: Port device team_slave_0 added [ 235.020051][T15303] team0: Port device team_slave_1 added [ 235.142672][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.145437][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.153550][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.158686][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.161087][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.169945][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.292603][ T13] hsr_slave_0: left promiscuous mode [ 235.296201][ T13] hsr_slave_1: left promiscuous mode [ 235.298510][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.300905][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.304141][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.307132][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.321849][ T13] veth1_macvtap: left promiscuous mode [ 235.323912][ T13] veth0_macvtap: left promiscuous mode [ 235.325800][ T13] veth1_vlan: left promiscuous mode [ 235.329220][ T13] veth0_vlan: left promiscuous mode [ 235.433443][ T5937] Bluetooth: hci1: command tx timeout [ 235.433474][ T5934] Bluetooth: hci5: command tx timeout [ 235.466682][ T13] team0 (unregistering): Port device team_slave_1 removed [ 235.473866][ T13] team0 (unregistering): Port device team_slave_0 removed [ 235.519073][ T5934] Bluetooth: hci0: command tx timeout [ 235.600460][T15303] hsr_slave_0: entered promiscuous mode [ 235.603450][T15303] hsr_slave_1: entered promiscuous mode [ 235.606763][T15303] debugfs: 'hsr0' already exists in 'hsr' [ 235.608962][T15303] Cannot create hsr debugfs directory [ 235.658672][T15296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.675855][T15296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.694192][T15296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.705664][T15296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.863114][T15295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.870467][T15295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.900565][T15295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.908333][T15295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.013729][T15303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.027330][T15303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.034055][T15303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.040943][T15303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.053002][T15296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.072964][T15296] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.084547][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.087702][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.116757][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.119849][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.190258][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.202821][T15303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.217614][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.239495][T15303] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.248452][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.251463][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.266138][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.269158][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.276823][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.280415][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.298816][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.301777][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.405689][T15296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.507455][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.532142][T15303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.554268][T15296] veth0_vlan: entered promiscuous mode [ 236.560353][T15296] veth1_vlan: entered promiscuous mode [ 236.580735][T15296] veth0_macvtap: entered promiscuous mode [ 236.585432][T15296] veth1_macvtap: entered promiscuous mode [ 236.594769][T15296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.604597][T15296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.611446][ T6805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.614188][ T6805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.616819][ T6805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.619593][ T6805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.689668][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.692391][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.725746][T15295] veth0_vlan: entered promiscuous mode [ 236.735906][T15295] veth1_vlan: entered promiscuous mode [ 236.751348][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.754757][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.763342][T15303] veth0_vlan: entered promiscuous mode [ 236.775736][T15303] veth1_vlan: entered promiscuous mode [ 236.776719][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 236.776730][ T40] audit: type=1400 audit(230.762:346012): avc: denied { mounton } for pid=15296 comm="syz-executor" path="/syzkaller.hTMBcM/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 236.784094][T15295] veth0_macvtap: entered promiscuous mode [ 236.796130][T15295] veth1_macvtap: entered promiscuous mode [ 236.797380][ T40] audit: type=1400 audit(230.781:346013): avc: denied { mounton } for pid=15296 comm="syz-executor" path="/syzkaller.hTMBcM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 236.813016][ T40] audit: type=1400 audit(230.781:346014): avc: denied { mounton } for pid=15296 comm="syz-executor" path="/syzkaller.hTMBcM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 236.817877][T15295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.822301][ T40] audit: type=1400 audit(230.800:346015): avc: denied { mounton } for pid=15296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 236.833321][ T40] audit: type=1400 audit(230.800:346016): avc: denied { mounton } for pid=15296 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 236.835531][T15303] veth0_macvtap: entered promiscuous mode [ 236.848218][T15295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.859243][ T6805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.863231][ T6805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.869041][T15303] veth1_macvtap: entered promiscuous mode [ 236.872801][ T6805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.877118][ T6805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.901558][T15303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.912613][T15303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.918421][ T6809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.925014][ T6809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.939919][ T6809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.943878][ T6809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.999797][ T6810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.005570][ T6810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.045194][ T6810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.052644][ T6810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.083857][ T6810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.086918][ T6810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.117198][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.120555][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.657754][ T5934] Bluetooth: hci5: command tx timeout [ 237.667975][ T5934] Bluetooth: hci1: command tx timeout [ 239.881297][ T5934] Bluetooth: hci1: command tx timeout [ 239.883394][ T5934] Bluetooth: hci5: command tx timeout [ 242.104627][ T5937] Bluetooth: hci5: command tx timeout [ 242.104642][ T5934] Bluetooth: hci1: command tx timeout [ 248.106430][ T5336] block nbd1: Possible stuck request ffff888029230000: control (read@0,1024B). Runtime 30 seconds [ 248.111691][ T5336] block nbd1: Possible stuck request ffff888029230200: control (read@1024,1024B). Runtime 30 seconds [ 248.116629][ T5336] block nbd1: Possible stuck request ffff888029230400: control (read@2048,1024B). Runtime 30 seconds [ 248.120079][ T5336] block nbd1: Possible stuck request ffff888029230600: control (read@3072,1024B). Runtime 30 seconds [ 248.124241][T15434] block nbd2: Possible stuck request ffff888029308000: control (read@0,1024B). Runtime 30 seconds [ 248.127830][T15434] block nbd2: Possible stuck request ffff888029308200: control (read@1024,1024B). Runtime 30 seconds [ 248.131261][T15434] block nbd2: Possible stuck request ffff888029308400: control (read@2048,1024B). Runtime 30 seconds [ 248.135237][T15434] block nbd2: Possible stuck request ffff888029308600: control (read@3072,1024B). Runtime 30 seconds [ 253.277197][ T40] audit: type=1400 audit(246.205:346017): avc: denied { ioctl } for pid=15453 comm="syz.5.2945" path="socket:[62641]" dev="sockfs" ino=62641 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.300863][T15458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2944'. [ 253.325413][T15467] tmpfs: Bad value for 'mpol' [ 253.559433][T15492] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 253.583308][T15496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12581 sclass=netlink_route_socket pid=15496 comm=syz.4.2957 [ 253.675888][T15488] wg1 speed is unknown, defaulting to 1000 [ 253.761730][T15488] lo speed is unknown, defaulting to 1000 [ 253.842207][T15501] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2961'. [ 253.855656][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 253.892610][ T40] audit: type=1400 audit(246.776:346018): avc: denied { read } for pid=15504 comm="syz.4.2962" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 253.896654][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2960'. [ 253.902571][ T40] audit: type=1400 audit(246.776:346019): avc: denied { open } for pid=15504 comm="syz.4.2962" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.044979][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.049626][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.053192][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.057783][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.065095][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.070705][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2963'. [ 254.142595][ T40] audit: type=1400 audit(247.010:346020): avc: denied { mounton } for pid=15515 comm="syz.3.2964" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.218337][T15520] openvswitch: netlink: Missing valid actions attribute. [ 254.221729][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.352241][T15534] xt_hashlimit: size too large, truncated to 1048576 [ 254.428403][ T40] audit: type=1400 audit(247.272:346021): avc: denied { write } for pid=15536 comm="syz.6.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.451068][T15533] veth3: entered promiscuous mode [ 254.620636][T15543] fuse: Unknown parameter '0x0000000000000008' [ 254.852393][ T40] audit: type=1400 audit(247.674:346022): avc: denied { create } for pid=15552 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 254.860054][ T40] audit: type=1400 audit(247.683:346023): avc: denied { ioctl } for pid=15552 comm="syz.5.2975" path="socket:[58280]" dev="sockfs" ino=58280 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 254.873757][T15551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 254.881185][ T40] audit: type=1400 audit(247.702:346024): avc: denied { execute } for pid=15552 comm="syz.5.2975" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=61666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 255.202693][T15567] overlay: filesystem on ./file1 not supported [ 255.205847][ T40] audit: type=1400 audit(248.001:346025): avc: denied { mounton } for pid=15566 comm="syz.5.2980" path="/bus" dev="autofs" ino=58295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 255.257033][T15567] overlayfs: missing 'lowerdir' [ 255.277107][ T40] audit: type=1400 audit(248.076:346026): avc: denied { write } for pid=15572 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 255.465572][T15592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15592 comm=syz.4.2987 [ 255.470468][T15592] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 255.470755][T15591] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 255.476473][T15591] overlayfs: failed to set xattr on upper [ 255.478419][T15591] overlayfs: ...falling back to redirect_dir=nofollow. [ 255.485160][T15591] overlayfs: ...falling back to index=off. [ 255.487133][T15591] overlayfs: ...falling back to uuid=null. [ 255.661395][T15611] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 255.808889][T15622] netlink: 'syz.4.2997': attribute type 4 has an invalid length. [ 255.831729][ T5872] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 256.003415][ T5872] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 256.013660][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.016601][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.020122][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.023265][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.027127][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.032031][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.035342][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.038173][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.041689][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.044839][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.051093][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.055073][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.059237][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.062608][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.066162][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.069504][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.073313][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.078743][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.083423][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.087527][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.093602][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.097710][ T5872] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.102020][ T5872] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.107013][ T5872] usb 11-1: config 0 interface 0 has no altsetting 0 [ 256.107232][T15626] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 256.112588][ T5872] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 256.117011][ T5872] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 256.121027][ T5872] usb 11-1: Product: syz [ 256.122783][ T5872] usb 11-1: Manufacturer: syz [ 256.124679][ T5872] usb 11-1: SerialNumber: syz [ 256.129505][ T5872] usb 11-1: config 0 descriptor?? [ 256.135420][ T5872] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 256.375792][ T10] usb 11-1: USB disconnect, device number 2 [ 256.379101][ T10] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 256.485986][T15637] overlayfs: failed to resolve './bus': -2 [ 256.557216][T15640] bridge_slave_1: left allmulticast mode [ 256.561527][T15640] bridge_slave_1: left promiscuous mode [ 256.564047][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.572248][T15640] bridge_slave_0: left allmulticast mode [ 256.574216][T15640] bridge_slave_0: left promiscuous mode [ 256.576167][T15640] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.983237][T15667] Bluetooth: MGMT ver 1.23 [ 257.277147][ T6803] Bluetooth: hci6: Frame reassembly failed (-84) [ 257.391271][T15705] SELinux: ebitmap: empty map [ 257.393471][T15705] SELinux: failed to load policy [ 257.395660][T15705] SELinux: ebitmap: empty map [ 257.397679][T15705] SELinux: failed to load policy [ 257.400298][T15705] SELinux: ebitmap: empty map [ 257.402755][T15705] SELinux: failed to load policy [ 257.406711][T15705] SELinux: ebitmap: empty map [ 257.408347][T15705] SELinux: failed to load policy [ 257.411042][T15705] SELinux: ebitmap: empty map [ 257.412953][T15705] SELinux: failed to load policy [ 257.416076][T15705] SELinux: ebitmap: empty map [ 257.417669][T15705] SELinux: failed to load policy [ 257.420315][T15705] SELinux: ebitmap: empty map [ 257.422281][T15705] SELinux: failed to load policy [ 257.424145][T15705] SELinux: ebitmap: empty map [ 257.426980][T15705] SELinux: failed to load policy [ 257.429980][T15705] SELinux: ebitmap: empty map [ 257.431784][T15705] SELinux: failed to load policy [ 257.434326][T15705] SELinux: ebitmap: empty map [ 257.438218][T15705] SELinux: failed to load policy [ 257.440854][T15705] SELinux: ebitmap: empty map [ 257.443118][T15705] SELinux: ebitmap: empty map [ 257.444801][T15705] SELinux: ebitmap: empty map [ 257.446898][T15705] SELinux: ebitmap: empty map [ 257.449209][T15705] SELinux: ebitmap: empty map [ 257.451972][T15705] SELinux: ebitmap: empty map [ 257.454394][T15705] SELinux: ebitmap: empty map [ 257.456939][T15705] SELinux: ebitmap: empty map [ 257.459349][T15705] SELinux: ebitmap: empty map [ 257.461776][T15705] SELinux: ebitmap: empty map [ 257.464243][T15705] SELinux: ebitmap: empty map [ 257.466911][T15705] SELinux: ebitmap: empty map [ 257.470038][T15705] SELinux: ebitmap: empty map [ 257.472216][T15705] SELinux: ebitmap: empty map [ 257.474455][T15705] SELinux: ebitmap: empty map [ 257.476903][T15705] SELinux: ebitmap: empty map [ 257.479660][T15705] SELinux: ebitmap: empty map [ 257.481520][T15705] SELinux: ebitmap: empty map [ 257.483376][T15705] SELinux: ebitmap: empty map [ 257.485176][T15705] SELinux: ebitmap: empty map [ 257.487000][T15705] SELinux: ebitmap: empty map [ 257.489229][T15705] SELinux: ebitmap: empty map [ 257.491179][T15705] SELinux: ebitmap: empty map [ 257.493281][T15705] SELinux: ebitmap: empty map [ 257.495168][T15705] SELinux: ebitmap: empty map [ 257.497003][T15705] SELinux: ebitmap: empty map [ 257.498856][T15705] SELinux: ebitmap: empty map [ 257.501363][T15705] SELinux: ebitmap: empty map [ 257.503165][T15705] SELinux: ebitmap: empty map [ 257.505105][T15705] SELinux: ebitmap: empty map [ 257.507075][T15705] SELinux: ebitmap: empty map [ 257.509018][T15705] SELinux: ebitmap: empty map [ 257.511045][T15705] SELinux: ebitmap: empty map [ 257.512803][T15705] SELinux: ebitmap: empty map [ 257.514566][T15705] SELinux: ebitmap: empty map [ 257.516335][T15705] SELinux: ebitmap: empty map [ 257.518302][T15705] SELinux: ebitmap: empty map [ 257.520109][T15705] SELinux: ebitmap: empty map [ 257.522069][T15705] SELinux: ebitmap: empty map [ 257.524022][T15705] SELinux: ebitmap: empty map [ 257.525828][T15705] SELinux: ebitmap: empty map [ 257.527553][T15705] SELinux: ebitmap: empty map [ 257.529298][T15705] SELinux: ebitmap: empty map [ 257.532173][T15705] SELinux: ebitmap: empty map [ 257.533970][T15705] SELinux: ebitmap: empty map [ 257.535683][T15705] SELinux: ebitmap: empty map [ 257.537529][T15705] SELinux: ebitmap: empty map [ 257.539763][T15705] SELinux: ebitmap: empty map [ 257.541623][T15705] SELinux: ebitmap: empty map [ 257.543638][T15705] SELinux: ebitmap: empty map [ 257.545422][T15705] SELinux: ebitmap: empty map [ 257.547671][T15705] SELinux: ebitmap: empty map [ 257.549650][T15705] SELinux: ebitmap: empty map [ 257.551380][T15705] SELinux: ebitmap: empty map [ 257.553385][T15705] SELinux: ebitmap: empty map [ 257.581809][T15708] 9pnet_virtio: no channels available for device syz [ 258.301216][ T29] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 258.461647][ T29] usb 11-1: device descriptor read/64, error -71 [ 258.750250][ T29] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 258.900438][ T29] usb 11-1: device descriptor read/64, error -71 [ 259.028492][ T29] usb usb11-port1: attempt power cycle [ 259.050848][T15751] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 259.061673][T15754] netlink: 'syz.5.3041': attribute type 5 has an invalid length. [ 259.063956][T15751] bond1: entered promiscuous mode [ 259.066114][T15751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.106214][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 259.106230][ T40] audit: type=1400 audit(251.649:346046): avc: denied { kexec_image_load } for pid=15755 comm="syz.5.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 259.173973][T15758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.175971][ T40] audit: type=1400 audit(251.715:346047): avc: denied { bind } for pid=15755 comm="syz.5.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.176520][T15758] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.184040][ T40] audit: type=1400 audit(251.715:346048): avc: denied { name_bind } for pid=15755 comm="syz.5.3042" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 259.186687][T15758] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 259.195773][ T40] audit: type=1400 audit(251.715:346049): avc: denied { node_bind } for pid=15755 comm="syz.5.3042" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 259.208862][T15758] bond1: (slave vxcan3): making interface the new active one [ 259.215463][T15758] vxcan3: entered promiscuous mode [ 259.218779][T15758] vxcan3: left promiscuous mode [ 259.391502][ T29] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 259.427060][ T29] usb 11-1: device descriptor read/8, error -71 [ 259.467253][ T5934] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 259.467613][ T5937] Bluetooth: hci6: command 0x1003 tx timeout [ 259.480480][T15769] __nla_validate_parse: 71 callbacks suppressed [ 259.480491][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3045'. [ 259.605986][T15782] (syz.3.3050,15782,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 259.614371][T15782] (syz.3.3050,15782,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 259.617475][T15782] (syz.3.3050,15782,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 259.620947][T15782] (syz.3.3050,15782,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 259.621304][T15784] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3052'. [ 259.627337][T15784] bond0: entered allmulticast mode [ 259.629229][T15784] bond_slave_0: entered allmulticast mode [ 259.631107][T15784] bond_slave_1: entered allmulticast mode [ 259.653355][ T40] audit: type=1400 audit(252.164:346050): avc: denied { getopt } for pid=15779 comm="syz.5.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.691228][ T29] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 259.725602][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.728814][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.731022][ T29] usb 11-1: device descriptor read/8, error -71 [ 259.853800][ T29] usb usb11-port1: unable to enumerate USB device [ 259.875496][T15806] kAFS: unparsable volume name [ 259.980827][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 260.052448][ T40] audit: type=1400 audit(252.538:346051): avc: denied { mount } for pid=15815 comm="syz.5.3059" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 260.155963][ T24] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.160443][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.164861][ T24] usb 9-1: Product: syz [ 260.166715][ T24] usb 9-1: Manufacturer: syz [ 260.168657][ T24] usb 9-1: SerialNumber: syz [ 260.178940][ T24] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 260.212969][ T40] audit: type=1400 audit(252.688:346052): avc: denied { firmware_load } for pid=6015 comm="kworker/2:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 260.239179][ T6015] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.497004][ T24] usb 9-1: USB disconnect, device number 2 [ 260.744595][T15828] Cannot find set identified by id 65534 to match [ 260.749337][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 260.754064][T15830] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 260.754120][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 260.826072][ T40] audit: type=1400 audit(253.268:346053): avc: denied { setattr } for pid=15833 comm="syz.3.3063" name="L2TP/IP" dev="sockfs" ino=62105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 260.904560][ T40] audit: type=1400 audit(253.333:346054): avc: denied { write } for pid=15833 comm="syz.3.3063" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.966137][ T40] audit: type=1400 audit(253.389:346055): avc: denied { ioctl } for pid=15839 comm="syz.5.3065" path="pid:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.010714][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3066'. [ 261.029012][T15842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.106270][T15842] vlan2: entered promiscuous mode [ 261.108051][T15842] bond1: entered promiscuous mode [ 261.109884][T15842] vlan2: entered allmulticast mode [ 261.111532][T15842] bond1: entered allmulticast mode [ 261.120141][T15842] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3066'. [ 261.130122][T15842] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 261.133432][T15842] batadv1: entered promiscuous mode [ 261.136133][T15842] batadv1: entered allmulticast mode [ 261.138900][T15842] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 261.347899][ T6015] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 261.351260][ T6015] ath9k_htc: Failed to initialize the device [ 261.355942][ T24] usb 9-1: ath9k_htc: USB layer deinitialized [ 261.464320][T15853] Cannot find add_set index 0 as target [ 261.468967][T15853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=15853 comm=syz.6.3070 [ 261.743227][T15863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=15863 comm=syz.3.3073 [ 261.749923][T15863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3073'. [ 261.755308][T15863] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3073'. [ 261.759472][T15863] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3073'. [ 261.829073][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 261.958596][T15872] x_tables: ip_tables: osf match: only valid for protocol 6 [ 261.992389][ T50] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 261.996250][ T50] usb 9-1: config 0 has no interfaces? [ 262.001321][ T50] usb 9-1: config 0 has no interfaces? [ 262.004526][ T50] usb 9-1: config 0 has no interfaces? [ 262.007678][ T50] usb 9-1: config 0 has no interfaces? [ 262.010900][ T50] usb 9-1: config 0 has no interfaces? [ 262.017185][ T50] usb 9-1: config 0 has no interfaces? [ 262.020483][ T50] usb 9-1: config 0 has no interfaces? [ 262.023864][ T50] usb 9-1: config 0 has no interfaces? [ 262.027958][ T50] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 262.031721][ T50] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 262.035587][ T50] usb 9-1: Product: syz [ 262.037166][ T50] usb 9-1: Manufacturer: syz [ 262.039144][ T50] usb 9-1: SerialNumber: syz [ 262.043228][ T50] usb 9-1: config 0 descriptor?? [ 262.234355][T15890] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3080'. [ 262.339749][T15903] overlayfs: workdir and upperdir must be separate subtrees [ 262.343255][T15903] kAFS: unparsable volume name [ 262.493102][T15861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.496395][T15861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.533339][T15861] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 262.769520][T15861] wg1 speed is unknown, defaulting to 1000 [ 262.855285][T15861] lo speed is unknown, defaulting to 1000 [ 262.943222][T15920] tmpfs: Unknown parameter '' [ 262.978534][T15922] kAFS: Can only specify source 'none' with -o dyn [ 263.087790][ T6015] usb 9-1: USB disconnect, device number 3 [ 263.175093][T15935] gfs2: not a GFS2 filesystem [ 263.586900][ T6015] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 263.678840][ T29] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 263.763001][ T6015] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.766660][ T6015] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 263.770808][ T6015] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.773873][ T6015] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.778415][ T6015] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 263.781996][ T6015] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.787698][ T6015] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.790928][ T6015] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.793736][ T6015] usb 11-1: Product: syz [ 263.795214][ T6015] usb 11-1: Manufacturer: syz [ 263.809077][T15938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 263.813704][ T6015] cdc_wdm 11-1:1.0: skipping garbage [ 263.815572][ T6015] cdc_wdm 11-1:1.0: skipping garbage [ 263.819305][ T6015] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 263.828487][ T29] usb 10-1: device descriptor read/64, error -71 [ 263.832906][ T6015] cdc_wdm 11-1:1.0: Unknown control protocol [ 263.919386][T15968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 264.029411][ C0] wdm_int_callback: 631 callbacks suppressed [ 264.029428][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 264.034037][ C0] wdm_int_callback: 631 callbacks suppressed [ 264.034051][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 264.038758][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 264.041066][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 264.043574][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 264.045916][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 264.048055][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 264.060075][ T50] usb 11-1: USB disconnect, device number 7 [ 264.106401][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 264.268372][ T29] usb 10-1: device descriptor read/64, error -71 [ 264.395914][ T29] usb usb10-port1: attempt power cycle [ 264.759252][ T29] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 264.795029][ T29] usb 10-1: device descriptor read/8, error -71 [ 264.938433][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 264.938453][ T40] audit: type=1400 audit(257.103:346069): avc: denied { write } for pid=16051 comm="syz.3.3123" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 264.938674][T16052] random: crng reseeded on system resumption [ 264.941208][ T40] audit: type=1400 audit(257.103:346070): avc: denied { open } for pid=16051 comm="syz.3.3123" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.047913][ T40] audit: type=1400 audit(257.215:346071): avc: denied { listen } for pid=16064 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.055674][ T40] audit: type=1400 audit(257.215:346072): avc: denied { accept } for pid=16064 comm="syz.3.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.068724][ T29] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 265.090587][ T29] usb 10-1: device descriptor read/8, error -71 [ 265.209204][ T29] usb usb10-port1: unable to enumerate USB device [ 265.214537][T16070] batman_adv: batadv0: Adding interface: gretap1 [ 265.217119][T16070] batman_adv: batadv0: Interface activated: gretap1 [ 265.295588][T16075] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 265.300953][T16075] __nla_validate_parse: 4 callbacks suppressed [ 265.300966][T16075] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3128'. [ 265.402959][ T40] audit: type=1400 audit(257.542:346073): avc: denied { map } for pid=16083 comm="syz.4.3131" path="pipe:[64748]" dev="pipefs" ino=64748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 265.447940][T16087] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16087 comm=syz.4.3132 [ 265.554651][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 265.557839][T16098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3135'. [ 265.619222][T16100] f2fs: Unknown parameter 'aclerdir' [ 265.759396][T16102] netlink: 'syz.6.3137': attribute type 16 has an invalid length. [ 265.763347][T16102] netlink: 'syz.6.3137': attribute type 17 has an invalid length. [ 265.791705][T16102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.804097][T16111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.873339][ T40] audit: type=1400 audit(257.982:346074): avc: denied { append } for pid=16117 comm="syz.4.3143" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.882866][ T40] audit: type=1400 audit(257.982:346075): avc: denied { map } for pid=16117 comm="syz.4.3143" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.891625][ T40] audit: type=1400 audit(257.982:346076): avc: denied { write execute } for pid=16117 comm="syz.4.3143" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.899950][ T40] audit: type=1400 audit(257.991:346077): avc: denied { sqpoll } for pid=16117 comm="syz.4.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 265.913754][T16118] netlink: 168656 bytes leftover after parsing attributes in process `syz.4.3143'. [ 265.982804][T16128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.186969][T16149] IPv6: NLM_F_REPLACE set, but no existing node found! [ 266.237984][ T40] audit: type=1400 audit(258.328:346078): avc: denied { lock } for pid=16152 comm="syz.4.3153" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 266.335455][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 266.458785][ T6015] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 266.545537][T16158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3155'. [ 266.630775][ T6015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 266.635318][ T6015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.650450][ T6015] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 266.657757][ T6015] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 266.671819][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.675156][ T6015] usb 8-1: Product: syz [ 266.677105][ T6015] usb 8-1: Manufacturer: syz [ 266.679316][ T6015] usb 8-1: SerialNumber: syz [ 266.695783][ T6015] usb 8-1: config 0 descriptor?? [ 266.720908][T16162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16162 comm=syz.5.3156 [ 266.811389][ T6018] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 266.850231][T16170] binder: BINDER_SET_CONTEXT_MGR already set [ 266.864310][T16170] binder: 16167:16170 ioctl 4018620d 200000000dc0 returned -16 [ 266.922473][ T6015] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 266.974507][ T6018] usb 9-1: device descriptor read/64, error -71 [ 267.048984][T16186] 9p: Bad value for 'rfdno' [ 267.121807][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3165'. [ 267.124679][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3165'. [ 267.186722][ T10] usb 8-1: USB disconnect, device number 21 [ 267.230070][ T6018] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 267.270858][T16211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3170'. [ 267.273991][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'. [ 267.276616][T16217] overlay: Unknown parameter 'fsmagic' [ 267.377478][ T6018] usb 9-1: device descriptor read/64, error -71 [ 267.389934][T16225] gfs2: error -5 reading superblock [ 267.442967][T16227] bond2: Removing last arp target with arp_interval on [ 267.446417][T16227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.477994][T16230] tmpfs: Unknown parameter 'usrquota ' [ 267.495233][ T6018] usb usb9-port1: attempt power cycle [ 267.526420][T16236] fuse: Bad value for 'fd' [ 267.640375][T16246] autofs: Unknown parameter '0x0000000000000000' [ 267.695734][T16249] autofs: Unknown parameter '0000000000000000000' [ 267.695745][T16247] autofs: Unknown parameter '0000000000000000000' [ 267.761378][T16254] ipt_ECN: cannot use operation on non-tcp rule [ 267.824936][T16238] kvm: pic: non byte write [ 267.880530][ T6018] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 267.902666][ T6018] usb 9-1: device descriptor read/8, error -71 [ 267.955369][T16259] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 267.961062][T16259] sit0: entered promiscuous mode [ 267.966895][T16259] netlink: 'syz.3.3184': attribute type 1 has an invalid length. [ 268.115356][ T6015] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 268.157942][ T6018] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 268.179841][ T6018] usb 9-1: device descriptor read/8, error -71 [ 268.297199][ T6018] usb usb9-port1: unable to enumerate USB device [ 268.297364][ T6015] usb 11-1: Using ep0 maxpacket: 32 [ 268.302726][ T6015] usb 11-1: config 0 has an invalid interface number: 196 but max is 0 [ 268.305966][ T6015] usb 11-1: config 0 has no interface number 0 [ 268.308096][ T6015] usb 11-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 268.311230][ T6015] usb 11-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 268.314610][ T6015] usb 11-1: config 0 interface 196 has no altsetting 0 [ 268.318899][ T6015] usb 11-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 268.322307][ T6015] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.325042][ T6015] usb 11-1: Product: syz [ 268.326374][ T6015] usb 11-1: Manufacturer: syz [ 268.327834][ T6015] usb 11-1: SerialNumber: syz [ 268.333660][ T6015] usb 11-1: config 0 descriptor?? [ 268.336254][T16257] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.555530][ T6015] ipheth 11-1:0.196: Unable to find endpoints [ 268.560014][ T6015] usb 11-1: USB disconnect, device number 8 [ 269.035383][ T6018] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 269.194908][ T6018] usb 11-1: Using ep0 maxpacket: 32 [ 269.199207][ T6018] usb 11-1: config 0 has an invalid interface number: 196 but max is 0 [ 269.202075][ T6018] usb 11-1: config 0 has no interface number 0 [ 269.204347][ T6018] usb 11-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 269.209251][ T6018] usb 11-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 269.212759][ T6018] usb 11-1: config 0 interface 196 has no altsetting 0 [ 269.217151][ T6018] usb 11-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 269.220386][ T6018] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.222980][ T6018] usb 11-1: Product: syz [ 269.224506][ T6018] usb 11-1: Manufacturer: syz [ 269.226218][ T6018] usb 11-1: SerialNumber: syz [ 269.230248][ T6018] usb 11-1: config 0 descriptor?? [ 269.232724][T16257] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 269.239590][ T6018] ipheth 11-1:0.196: Unable to find endpoints [ 269.390554][T16279] openvswitch: netlink: IP tunnel TTL not specified. [ 269.450572][T16281] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 269.566917][T16298] QAT: Invalid ioctl -2144835806 [ 269.680110][T16306] netlink: 'syz.5.3198': attribute type 10 has an invalid length. [ 269.784509][T16314] overlayfs: failed to resolve './file0': -2 [ 270.588356][T16310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.590904][T16310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 270.594341][T16310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 270.600163][T16310] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.602714][T16310] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 270.608249][T16310] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 270.884439][ T5995] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 270.902679][T16336] random: crng reseeded on system resumption [ 270.938544][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 270.938562][ T40] audit: type=1400 audit(262.724:346090): avc: denied { ioctl } for pid=16335 comm="syz.4.3208" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.946863][T16336] __nla_validate_parse: 7 callbacks suppressed [ 270.946885][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 271.031703][ T40] audit: type=1400 audit(262.799:346091): avc: denied { getopt } for pid=16340 comm="syz.4.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 271.044422][ T5995] usb 10-1: Using ep0 maxpacket: 16 [ 271.048646][ T5995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.054174][ T5995] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.057825][ T5995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.060526][ T5995] usb 10-1: Product: syz [ 271.062054][ T5995] usb 10-1: Manufacturer: syz [ 271.063731][ T5995] usb 10-1: SerialNumber: syz [ 271.074849][ T5995] usb 10-1: config 0 descriptor?? [ 271.078183][ T6018] usb 11-1: USB disconnect, device number 9 [ 271.106829][ T5995] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.110130][ T5995] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 271.179675][ T40] audit: type=1400 audit(262.939:346092): avc: denied { lock } for pid=16348 comm="syz.4.3212" path="socket:[67753]" dev="sockfs" ino=67753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 271.222906][ T40] audit: type=1400 audit(262.986:346093): avc: denied { accept } for pid=16350 comm="syz.4.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 271.282034][ T40] audit: type=1400 audit(263.042:346094): avc: denied { read } for pid=16354 comm="syz.4.3215" path="socket:[66893]" dev="sockfs" ino=66893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.442033][ T6812] Bluetooth: Error in BCSP hdr checksum [ 271.451603][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.454916][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.458282][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.461771][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.465378][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.468912][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.473285][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.476961][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.479813][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 271.493536][ T6018] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 271.707227][ T6018] usb 11-1: Using ep0 maxpacket: 8 [ 271.721558][ T6806] Bluetooth: Error in BCSP hdr checksum [ 271.723801][ T6018] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 271.727216][ T6018] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.731921][ T6018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.736017][ T6018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.740301][ T6018] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.746074][ T6018] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.751652][ T6018] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.752201][ T5995] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 271.756304][T16370] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 271.820643][T16373] netlink: 'syz.4.3219': attribute type 18 has an invalid length. [ 271.984696][ T6018] usb 11-1: usb_control_msg returned -32 [ 271.996018][ T6018] usbtmc 11-1:16.0: can't read capabilities [ 271.996298][ T6806] Bluetooth: Error in BCSP hdr checksum [ 272.041422][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.079462][T16394] Bluetooth: MGMT ver 1.23 [ 272.154957][ T40] audit: type=1400 audit(263.856:346095): avc: denied { bind } for pid=16398 comm="syz.3.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.209200][ T5995] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 272.215208][ T5995] em28xx 10-1:0.0: board has no eeprom [ 272.277473][T16407] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 272.280598][T16407] CPU: 2 UID: 0 PID: 16407 Comm: syz.4.3226 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.280620][T16407] Tainted: [L]=SOFTLOCKUP [ 272.280625][T16407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.280634][T16407] Call Trace: [ 272.280701][T16407] [ 272.280707][T16407] dump_stack_lvl+0x100/0x190 [ 272.281320][T16407] sysfs_warn_dup.cold+0x1c/0x28 [ 272.281434][T16407] sysfs_do_create_link_sd+0x113/0x140 [ 272.281635][T16407] sysfs_create_link+0x61/0xc0 [ 272.281652][T16407] device_add+0x675/0x1950 [ 272.281931][T16407] ? __pfx_device_add+0x10/0x10 [ 272.281946][T16407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.282082][T16407] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 272.282348][T16407] wiphy_register+0x1e5b/0x2d30 [ 272.282364][T16407] ? __rtnl_unlock+0xb9/0xf0 [ 272.282510][T16407] ? netdev_run_todo+0x7f0/0x12c0 [ 272.282551][T16407] ? __pfx_wiphy_register+0x10/0x10 [ 272.282566][T16407] ? __asan_memset+0x23/0x50 [ 272.282659][T16407] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 272.282790][T16407] ieee80211_register_hw+0x2cfd/0x4140 [ 272.282848][T16407] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 272.282863][T16407] ? __pfx___debug_object_init+0x10/0x10 [ 272.283016][T16407] ? find_held_lock+0x2b/0x80 [ 272.283077][T16407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.283098][T16407] ? __hrtimer_setup+0x178/0x280 [ 272.283152][T16407] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 272.283307][T16407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 272.283333][T16407] ? __asan_memcpy+0x3c/0x60 [ 272.283354][T16407] hwsim_new_radio_nl+0xc1f/0x1340 [ 272.283377][T16407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 272.283426][T16407] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 272.283477][T16407] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 272.283499][T16407] genl_family_rcv_msg_doit+0x214/0x300 [ 272.283518][T16407] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.283541][T16407] ? bpf_lsm_capable+0x9/0x10 [ 272.283629][T16407] ? security_capable+0x80/0x260 [ 272.283759][T16407] ? ns_capable+0xd2/0xf0 [ 272.283820][T16407] genl_rcv_msg+0x560/0x800 [ 272.283839][T16407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.283855][T16407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 272.283885][T16407] netlink_rcv_skb+0x159/0x420 [ 272.283899][T16407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.283920][T16407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.283942][T16407] ? netlink_deliver_tap+0x1ae/0xcc0 [ 272.283967][T16407] genl_rcv+0x28/0x40 [ 272.283982][T16407] netlink_unicast+0x5aa/0x870 [ 272.283999][T16407] ? __pfx_netlink_unicast+0x10/0x10 [ 272.284021][T16407] netlink_sendmsg+0x8b0/0xda0 [ 272.284039][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.284052][T16407] ? __might_fault+0x50/0x140 [ 272.284122][T16407] ____sys_sendmsg+0x9e1/0xb70 [ 272.284138][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.284153][T16407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.284173][T16407] ? __pfx_futex_wake_mark+0x10/0x10 [ 272.284235][T16407] ___sys_sendmsg+0x190/0x1e0 [ 272.284253][T16407] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.284293][T16407] __sys_sendmsg+0x170/0x220 [ 272.284316][T16407] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.284336][T16407] ? __x64_sys_futex+0x34f/0x4d0 [ 272.284363][T16407] do_syscall_64+0x106/0xf80 [ 272.284469][T16407] ? clear_bhb_loop+0x40/0x90 [ 272.284489][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.284504][T16407] RIP: 0033:0x7f621259c819 [ 272.284520][T16407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.284534][T16407] RSP: 002b:00007f621347e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.284592][T16407] RAX: ffffffffffffffda RBX: 00007f6212815fa0 RCX: 00007f621259c819 [ 272.284602][T16407] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 272.284610][T16407] RBP: 00007f6212632c91 R08: 0000000000000000 R09: 0000000000000000 [ 272.284620][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.284629][T16407] R13: 00007f6212816038 R14: 00007f6212815fa0 R15: 00007ffd41649d28 [ 272.284653][T16407] [ 272.284903][ T5995] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 272.288835][ T6812] Bluetooth: Error in BCSP hdr checksum [ 272.293635][ T5995] em28xx 10-1:0.0: dvb set to bulk mode. [ 272.352860][T16411] NILFS (nbd4): device size too small [ 272.356929][ T8485] em28xx 10-1:0.0: Binding DVB extension [ 272.360844][T16412] NILFS (nbd4): device size too small [ 272.372726][ T5995] usb 10-1: USB disconnect, device number 6 [ 272.468147][ T8485] em28xx 10-1:0.0: Registering input extension [ 272.495530][ T40] audit: type=1400 audit(264.174:346096): avc: denied { create } for pid=16416 comm="syz.4.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 272.509741][ T5995] em28xx 10-1:0.0: Disconnecting em28xx [ 272.512126][ T5995] em28xx 10-1:0.0: Closing input extension [ 272.571371][ T5995] em28xx 10-1:0.0: Freeing device [ 272.575671][ T13] Bluetooth: Error in BCSP hdr checksum [ 272.636033][T16426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16426 comm=syz.4.3230 [ 272.819414][ T5937] Bluetooth: hci5: command 0x0c1a tx timeout [ 272.852540][ T6811] Bluetooth: Error in BCSP hdr checksum [ 272.993771][ T5996] usb 11-1: USB disconnect, device number 10 [ 273.022640][ T5995] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 273.069154][ T40] audit: type=1400 audit(264.717:346097): avc: denied { connect } for pid=16438 comm="syz.5.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.086378][ T6018] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 273.182856][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 273.187480][ T5995] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.192021][ T5995] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.197967][ T5995] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 273.202340][ T5995] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.205924][ T5995] usb 9-1: Manufacturer: syz [ 273.210993][ T5995] usb 9-1: config 0 descriptor?? [ 273.257482][ T6018] usb 8-1: Using ep0 maxpacket: 8 [ 273.262852][ T6018] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.266822][ T6018] usb 8-1: config 179 has no interface number 0 [ 273.271291][ T6018] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.275862][ T6018] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 273.281285][ T6018] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.286258][ T6018] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 273.291462][ T6018] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 273.297290][ T6018] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 273.301611][ T6018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.308627][T16436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 273.332393][ T5938] Bluetooth: hci6: command 0x1003 tx timeout [ 273.336107][ T5934] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 273.553225][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input35 [ 273.580130][T16432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.582564][T16432] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 273.612933][T16432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 273.615068][T16432] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 273.628493][T16463] fuse: Bad value for 'user_id' [ 273.630106][T16463] fuse: Bad value for 'user_id' [ 273.661367][T16468] comedi comedi3: mpc624: I/O port conflict (0x3,16) [ 273.768047][T16473] syzkaller0: entered promiscuous mode [ 273.773108][T16473] syzkaller0: entered allmulticast mode [ 273.776395][ T10] usb 8-1: USB disconnect, device number 22 [ 273.778403][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 273.778474][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.805379][T16473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.818486][ T40] audit: type=1400 audit(265.418:346098): avc: denied { name_bind 0x1000000 } for pid=16431 comm="syz.4.3232" path="socket:[67985]" dev="sockfs" ino=67985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.829445][ T5995] usb 9-1: USB disconnect, device number 8 [ 274.149803][T16481] netlink: 'syz.5.3245': attribute type 39 has an invalid length. [ 274.408756][ T40] audit: type=1400 audit(265.961:346099): avc: denied { create } for pid=16488 comm="syz.5.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 274.434528][T16501] autofs: Unknown parameter './file0' [ 274.469800][T16506] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 274.472828][T16506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.480126][T16506] vhci_hcd vhci_hcd.0: Device attached [ 274.490447][T16507] vhci_hcd: connection closed [ 274.492713][ T6811] vhci_hcd vhci_hcd.5: stop threads [ 274.497931][ T6811] vhci_hcd vhci_hcd.5: release socket [ 274.508073][ T6811] vhci_hcd vhci_hcd.5: disconnect device [ 274.666005][T16520] netlink: 'syz.4.3257': attribute type 4 has an invalid length. [ 274.810020][T16528] syzkaller0: entered promiscuous mode [ 274.812360][T16528] syzkaller0: entered allmulticast mode [ 274.829707][ T8485] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 274.944404][T16530] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 274.991131][ T8485] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 274.991338][T16530] bond0: entered promiscuous mode [ 274.993977][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 274.995571][T16530] bond_slave_0: entered promiscuous mode [ 274.999069][ T8485] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.001854][T16530] bond_slave_1: entered promiscuous mode [ 275.005493][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 275.010682][T16530] batadv0: entered promiscuous mode [ 275.012542][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 275.015731][T16530] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 275.018450][ T8485] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 275.023357][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.023400][T16530] bond0: left promiscuous mode [ 275.026789][ T8485] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.028826][T16530] bond_slave_0: left promiscuous mode [ 275.033877][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 275.033899][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 275.034729][ T8485] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 275.037285][T16530] bond_slave_1: left promiscuous mode [ 275.040521][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 275.052172][ T8485] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.052232][T16530] batadv0: left promiscuous mode [ 275.055801][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 275.060734][ T8485] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 275.067296][ T8485] usb 8-1: string descriptor 0 read error: -22 [ 275.069311][ T8485] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 275.072141][ T8485] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.082124][ T8485] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 275.118298][T16532] bond4: (slave bond_slave_1): Device is not our slave [ 275.120652][T16532] bond4: option active_slave: invalid value (bond_slave_1) [ 275.125008][T16532] bond4 (unregistering): Released all slaves [ 275.217011][T16543] usb usb7: usbfs: process 16543 (syz.4.3263) did not claim interface 0 before use [ 276.124247][T16610] cgroup: Unknown subsys name 'subj_user' [ 276.528901][ T8485] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 276.690746][ T8485] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.694517][ T8485] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.697949][ T8485] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.702373][ T8485] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.705459][ T8485] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.715439][ T8485] usb 11-1: config 0 descriptor?? [ 277.779995][ T5872] usb 8-1: USB disconnect, device number 23 [ 278.063203][T16635] affs: No valid root block on device nullb0 [ 278.242703][T16644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.247475][T16644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.252761][T16644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.321454][T16644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.402003][T16642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.436577][ T5996] libceph: connect (1)[c::]:6789 error -101 [ 278.439045][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 278.686305][T16663] input: syz0 as /devices/virtual/input/input36 [ 278.722534][ T5996] libceph: connect (1)[c::]:6789 error -101 [ 278.725147][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 278.734552][T16665] sp0: Synchronizing with TNC [ 278.771283][T16669] 9p: Unknown access argument 18446744073709551615: -34 [ 278.810716][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 278.810728][ T40] audit: type=1400 audit(270.086:346105): avc: denied { map } for pid=16670 comm="syz.5.3290" path="socket:[66508]" dev="sockfs" ino=66508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 278.827756][ T40] audit: type=1400 audit(270.104:346106): avc: denied { write } for pid=16664 comm="syz.3.3288" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 278.835770][ T40] audit: type=1400 audit(270.104:346107): avc: denied { write } for pid=16664 comm="syz.3.3288" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 278.848746][ T40] audit: type=1400 audit(270.104:346108): avc: denied { open } for pid=16664 comm="syz.3.3288" path="/273/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 278.903015][T16665] [U] [ 278.950452][T16673] netlink: 'syz.5.3291': attribute type 8 has an invalid length. [ 278.953567][T16673] __nla_validate_parse: 85 callbacks suppressed [ 278.953581][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3291'. [ 278.977214][T16673] bond0: entered promiscuous mode [ 278.979697][T16673] bond_slave_0: entered promiscuous mode [ 278.982874][T16673] bond_slave_1: entered promiscuous mode [ 278.990091][T16673] gretap0: entered promiscuous mode [ 278.994770][T16673] veth0_to_batadv: entered promiscuous mode [ 279.000248][T16673] hsr1: entered promiscuous mode [ 279.093955][ T40] audit: type=1400 audit(270.348:346109): avc: denied { execute } for pid=16676 comm="syz.3.3292" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 279.128307][T16679] netlink: 'syz.3.3292': attribute type 62 has an invalid length. [ 279.213630][T16642] ceph: No mds server is up or the cluster is laggy [ 279.234909][T16682] netlink: 'syz.5.3293': attribute type 6 has an invalid length. [ 279.235424][T16681] netlink: 'syz.5.3293': attribute type 6 has an invalid length. [ 279.243583][T16682] netlink: 'syz.5.3293': attribute type 21 has an invalid length. [ 279.244343][T16681] netlink: 'syz.5.3293': attribute type 21 has an invalid length. [ 279.270292][ T5996] libceph: connect (1)[c::]:6789 error -101 [ 279.276070][ T5996] libceph: mon0 (1)[c::]:6789 connect error [ 279.364451][T16692] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3296'. [ 279.366479][ T40] audit: type=1400 audit(270.600:346110): avc: denied { getattr } for pid=16689 comm="syz.3.3295" name="/" dev="9p" ino=79692183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 279.367239][T16690] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.378743][ T40] audit: type=1400 audit(270.610:346111): avc: denied { setattr } for pid=16689 comm="syz.3.3295" name="file1" dev="overlay" ino=79692187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.378854][T16692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3296'. [ 279.386370][ T40] audit: type=1400 audit(270.610:346112): avc: denied { write open } for pid=16689 comm="syz.3.3295" path=2F202864656C6574656429 dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.391033][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.397970][ T40] audit: type=1400 audit(270.610:346113): avc: denied { link } for pid=16689 comm="syz.3.3295" name="#1507" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.401911][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.454181][T16700] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 279.458613][T16700] qnx6: wrong signature (magic) in superblock #1. [ 279.460710][T16700] qnx6: unable to read the first superblock [ 279.462863][ T40] audit: type=1400 audit(270.694:346114): avc: denied { unlink } for pid=13554 comm="syz-executor" name="file1" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 279.527216][T16710] fuse: Invalid rootmode [ 279.537369][T16713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 279.602593][ T10] usb 11-1: USB disconnect, device number 11 [ 279.727851][T15019] udevd[15019]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.962254][T16738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3307'. [ 280.249823][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.261096][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3322'. [ 280.274246][T15434] block nbd1: Possible stuck request ffff888029230000: control (read@0,1024B). Runtime 60 seconds [ 280.279334][T15434] block nbd1: Possible stuck request ffff888029230200: control (read@1024,1024B). Runtime 60 seconds [ 280.284012][T15434] block nbd1: Possible stuck request ffff888029230400: control (read@2048,1024B). Runtime 60 seconds [ 280.284698][T15019] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 280.287617][T15434] block nbd1: Possible stuck request ffff888029230600: control (read@3072,1024B). Runtime 60 seconds [ 280.295153][ T5336] block nbd2: Possible stuck request ffff888029308000: control (read@0,1024B). Runtime 60 seconds [ 280.302339][ T5336] block nbd2: Possible stuck request ffff888029308200: control (read@1024,1024B). Runtime 60 seconds [ 280.308266][ T5336] block nbd2: Possible stuck request ffff888029308400: control (read@2048,1024B). Runtime 60 seconds [ 280.313008][ T5336] block nbd2: Possible stuck request ffff888029308600: control (read@3072,1024B). Runtime 60 seconds [ 280.353000][T16790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16790 comm=syz.6.3322 [ 280.358374][T16770] [ 280.359217][T16770] ====================================================== [ 280.372618][T16770] WARNING: possible circular locking dependency detected [ 280.375087][T16770] syzkaller #0 Tainted: G L [ 280.388155][T16770] ------------------------------------------------------ [ 280.391164][T16770] syz.3.3315/16770 is trying to acquire lock: [ 280.393172][T16770] ffff88802893eb98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x1c/0x300 [ 280.397377][T16770] [ 280.397377][T16770] but task is already holding lock: [ 280.399926][T16770] ffff888028f2e4f0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 280.403424][T16770] [ 280.403424][T16770] which lock already depends on the new lock. [ 280.403424][T16770] [ 280.406688][T16770] [ 280.406688][T16770] the existing dependency chain (in reverse order) is: [ 280.409558][T16770] [ 280.409558][T16770] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 280.412328][T16770] __mutex_lock+0x1a2/0x1b90 [ 280.414369][T16770] elevator_change+0x1bc/0x530 [ 280.416134][T16770] elevator_set_none+0x92/0xf0 SYZFAIL: failed to recv rpc [ 280.417986][T16770] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 280.419976][T16770] nbd_start_device+0x1a6/0xbd0 [ 280.421846][T16770] nbd_genl_connect+0xff2/0x1a40 [ 280.423546][T16770] genl_family_rcv_msg_doit+0x214/0x300 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.425608][T16770] genl_rcv_msg+0x560/0x800 [ 280.427337][T16770] netlink_rcv_skb+0x159/0x420 [ 280.429236][T16770] genl_rcv+0x28/0x40 [ 280.430853][T16770] netlink_unicast+0x5aa/0x870 [ 280.432677][T16770] netlink_sendmsg+0x8b0/0xda0 [ 280.434525][T16770] ____sys_sendmsg+0x9e1/0xb70 [ 280.436287][T16770] ___sys_sendmsg+0x190/0x1e0 [ 280.437981][T16770] __sys_sendmsg+0x170/0x220 [ 280.439644][T16770] do_syscall_64+0x106/0xf80 [ 280.441273][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.443389][T16770] [ 280.443389][T16770] -> #5 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 280.446242][T16770] blk_alloc_queue+0x610/0x790 [ 280.447908][T16770] blk_mq_alloc_queue+0x174/0x290 [ 280.449814][T16770] __blk_mq_alloc_disk+0x29/0x120 [ 280.451724][T16770] nbd_dev_add+0x492/0xb10 [ 280.453609][T16770] nbd_init+0x291/0x2b0 [ 280.455363][T16770] do_one_initcall+0x11d/0x760 [ 280.457205][T16770] kernel_init_freeable+0x6e5/0x7a0 [ 280.459020][T16770] kernel_init+0x1f/0x1e0 [ 280.460606][T16770] ret_from_fork+0x754/0xd80 [ 280.462317][T16770] ret_from_fork_asm+0x1a/0x30 [ 280.464143][T16770] [ 280.464143][T16770] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 280.466924][T16770] fs_reclaim_acquire+0xc4/0x100 [ 280.469128][T16770] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 280.471373][T16770] __alloc_skb+0x140/0x710 [ 280.473029][T16770] __ip6_append_data+0x36c0/0x4dc0 [ 280.475030][T16770] ip6_append_data+0x10b/0x410 [ 280.476715][T16770] rawv6_sendmsg+0x169c/0x4420 [ 280.478451][T16770] inet_sendmsg+0x11c/0x140 [ 280.480130][T16770] ____sys_sendmsg+0x98d/0xb70 [ 280.481811][T16770] ___sys_sendmsg+0x190/0x1e0 [ 280.483474][T16770] __sys_sendmsg+0x170/0x220 [ 280.485331][T16770] do_syscall_64+0x106/0xf80 [ 280.487075][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.489189][T16770] [ 280.489189][T16770] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 280.491705][T16770] lock_sock_nested+0x41/0xf0 [ 280.493370][T16770] inet_shutdown+0x67/0x410 [ 280.495095][T16770] nbd_mark_nsock_dead+0xae/0x5c0 [ 280.496940][T16770] recv_work+0x5fb/0x8c0 [ 280.498466][T16770] process_one_work+0xa23/0x19a0 [ 280.500344][T16770] worker_thread+0x5ef/0xe50 [ 280.502025][T16770] kthread+0x370/0x450 [ 280.503618][T16770] ret_from_fork+0x754/0xd80 [ 280.505446][T16770] ret_from_fork_asm+0x1a/0x30 [ 280.507222][T16770] [ 280.507222][T16770] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 280.509784][T16770] __mutex_lock+0x1a2/0x1b90 [ 280.511405][T16770] nbd_queue_rq+0x428/0x1080 [ 280.513033][T16770] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 280.515017][T16770] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 280.517488][T16770] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 280.519873][T16770] blk_mq_run_hw_queue+0x23c/0x670 [ 280.521726][T16770] blk_mq_dispatch_list+0x51d/0x1360 [ 280.523569][T16770] blk_mq_flush_plug_list+0x130/0x600 [ 280.525525][T16770] __blk_flush_plug+0x2c4/0x4b0 [ 280.527223][T16770] __submit_bio+0x584/0x6c0 [ 280.528813][T16770] submit_bio_noacct_nocheck+0x562/0xc10 [ 280.530788][T16770] submit_bio_noacct+0xd17/0x2010 [ 280.532626][T16770] submit_bh_wbc+0x59c/0x770 [ 280.534499][T16770] block_read_full_folio+0x264/0x8e0 [ 280.536623][T16770] filemap_read_folio+0xfc/0x3b0 [ 280.538497][T16770] do_read_cache_folio+0x2d7/0x6b0 [ 280.540307][T16770] read_part_sector+0xd1/0x370 [ 280.542032][T16770] adfspart_check_ICS+0x93/0x910 [ 280.543793][T16770] bdev_disk_changed+0x7f8/0xc80 [ 280.545744][T16770] blkdev_get_whole+0x187/0x290 [ 280.547570][T16770] bdev_open+0x2c7/0xe40 [ 280.549220][T16770] blkdev_open+0x34e/0x4f0 [ 280.550848][T16770] do_dentry_open+0x6d8/0x1660 [ 280.552576][T16770] vfs_open+0x82/0x3f0 [ 280.554097][T16770] path_openat+0x208c/0x31a0 [ 280.555769][T16770] do_file_open+0x20e/0x430 [ 280.557442][T16770] do_sys_openat2+0x10d/0x1e0 [ 280.559214][T16770] __x64_sys_openat+0x12d/0x210 [ 280.560945][T16770] do_syscall_64+0x106/0xf80 [ 280.562551][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.564599][T16770] [ 280.564599][T16770] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 280.566879][T16770] __mutex_lock+0x1a2/0x1b90 [ 280.568590][T16770] nbd_queue_rq+0xba/0x1080 [ 280.570370][T16770] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 280.572408][T16770] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 280.574742][T16770] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 280.576851][T16770] blk_mq_run_hw_queue+0x23c/0x670 [ 280.578417][T16770] blk_mq_dispatch_list+0x51d/0x1360 [ 280.580111][T16770] blk_mq_flush_plug_list+0x130/0x600 [ 280.581990][T16770] __blk_flush_plug+0x2c4/0x4b0 [ 280.583825][T16770] __submit_bio+0x584/0x6c0 [ 280.585635][T16770] submit_bio_noacct_nocheck+0x562/0xc10 [ 280.587833][T16770] submit_bio_noacct+0xd17/0x2010 [ 280.589641][T16770] submit_bh_wbc+0x59c/0x770 [ 280.591261][T16770] block_read_full_folio+0x264/0x8e0 [ 280.593105][T16770] filemap_read_folio+0xfc/0x3b0 [ 280.594851][T16770] do_read_cache_folio+0x2d7/0x6b0 [ 280.596588][T16770] read_part_sector+0xd1/0x370 [ 280.598288][T16770] adfspart_check_ICS+0x93/0x910 [ 280.600028][T16770] bdev_disk_changed+0x7f8/0xc80 [ 280.601822][T16770] blkdev_get_whole+0x187/0x290 [ 280.603774][T16770] bdev_open+0x2c7/0xe40 [ 280.605667][T16770] blkdev_open+0x34e/0x4f0 [ 280.607349][T16770] do_dentry_open+0x6d8/0x1660 [ 280.609096][T16770] vfs_open+0x82/0x3f0 [ 280.610614][T16770] path_openat+0x208c/0x31a0 [ 280.612232][T16770] do_file_open+0x20e/0x430 [ 280.613892][T16770] do_sys_openat2+0x10d/0x1e0 [ 280.615534][T16770] __x64_sys_openat+0x12d/0x210 [ 280.617229][T16770] do_syscall_64+0x106/0xf80 [ 280.618888][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.621007][T16770] [ 280.621007][T16770] -> #0 (set->srcu){.+.+}-{0:0}: [ 280.623375][T16770] __lock_acquire+0x14b8/0x2630 [ 280.625392][T16770] lock_sync+0x9d/0x110 [ 280.626918][T16770] __synchronize_srcu+0xa2/0x300 [ 280.628640][T16770] blk_mq_quiesce_queue+0x149/0x1c0 [ 280.630463][T16770] elevator_switch+0x353/0x7e0 [ 280.632107][T16770] elevator_change+0x352/0x530 [ 280.633853][T16770] elevator_set_none+0x92/0xf0 [ 280.635516][T16770] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 280.637509][T16770] nbd_start_device+0x1a6/0xbd0 [ 280.639204][T16770] nbd_genl_connect+0xff2/0x1a40 [ 280.640915][T16770] genl_family_rcv_msg_doit+0x214/0x300 [ 280.642849][T16770] genl_rcv_msg+0x560/0x800 [ 280.644530][T16770] netlink_rcv_skb+0x159/0x420 [ 280.646321][T16770] genl_rcv+0x28/0x40 [ 280.647903][T16770] netlink_unicast+0x5aa/0x870 [ 280.649626][T16770] netlink_sendmsg+0x8b0/0xda0 [ 280.651289][T16770] ____sys_sendmsg+0x9e1/0xb70 [ 280.652963][T16770] ___sys_sendmsg+0x190/0x1e0 [ 280.654603][T16770] __sys_sendmsg+0x170/0x220 [ 280.656217][T16770] do_syscall_64+0x106/0xf80 [ 280.657829][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.659868][T16770] [ 280.659868][T16770] other info that might help us debug this: [ 280.659868][T16770] [ 280.663078][T16770] Chain exists of: [ 280.663078][T16770] set->srcu --> &q->q_usage_counter(io)#52 --> &q->elevator_lock [ 280.663078][T16770] [ 280.667323][T16770] Possible unsafe locking scenario: [ 280.667323][T16770] [ 280.669685][T16770] CPU0 CPU1 [ 280.671414][T16770] ---- ---- [ 280.673159][T16770] lock(&q->elevator_lock); [ 280.674672][T16770] lock(&q->q_usage_counter(io)#52); [ 280.677197][T16770] lock(&q->elevator_lock); [ 280.679499][T16770] sync(set->srcu); [ 280.680797][T16770] [ 280.680797][T16770] *** DEADLOCK *** [ 280.680797][T16770] [ 280.683343][T16770] 7 locks held by syz.3.3315/16770: [ 280.685050][T16770] #0: ffffffff906c0970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 280.687684][T16770] #1: ffffffff906c0a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 280.690590][T16770] #2: ffff8880290af9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 280.694126][T16770] #3: ffff8880290af8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 280.697516][T16770] #4: ffff888028f2dfb0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 280.701137][T16770] #5: ffff888028f2dfe8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 280.704834][T16770] #6: ffff888028f2e4f0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 280.707888][T16770] [ 280.707888][T16770] stack backtrace: [ 280.709984][T16770] CPU: 3 UID: 0 PID: 16770 Comm: syz.3.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.710001][T16770] Tainted: [L]=SOFTLOCKUP [ 280.710005][T16770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.710012][T16770] Call Trace: [ 280.710064][T16770] [ 280.710070][T16770] dump_stack_lvl+0x100/0x190 [ 280.710090][T16770] print_circular_bug.cold+0x178/0x1c7 [ 280.710109][T16770] check_noncircular+0x146/0x160 [ 280.710168][T16770] __lock_acquire+0x14b8/0x2630 [ 280.710182][T16770] ? __synchronize_srcu+0x1c/0x300 [ 280.710194][T16770] lock_sync+0x9d/0x110 [ 280.710203][T16770] ? __synchronize_srcu+0x1c/0x300 [ 280.710215][T16770] __synchronize_srcu+0xa2/0x300 [ 280.710269][T16770] ? __pfx___synchronize_srcu+0x10/0x10 [ 280.710286][T16770] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 280.710304][T16770] ? synchronize_srcu+0xa8/0x380 [ 280.710315][T16770] blk_mq_quiesce_queue+0x149/0x1c0 [ 280.710328][T16770] elevator_switch+0x353/0x7e0 [ 280.710341][T16770] elevator_change+0x352/0x530 [ 280.710353][T16770] elevator_set_none+0x92/0xf0 [ 280.710366][T16770] ? __pfx_elevator_set_none+0x10/0x10 [ 280.710378][T16770] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 280.710394][T16770] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 280.710412][T16770] ? __mutex_unlock_slowpath+0x15c/0x790 [ 280.710425][T16770] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 280.710444][T16770] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 280.710575][T16770] nbd_start_device+0x1a6/0xbd0 [ 280.710713][T16770] nbd_genl_connect+0xff2/0x1a40 [ 280.710725][T16770] ? __pfx_nbd_genl_connect+0x10/0x10 [ 280.710737][T16770] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 280.710751][T16770] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 280.710765][T16770] genl_family_rcv_msg_doit+0x214/0x300 [ 280.710778][T16770] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 280.710790][T16770] ? genl_get_cmd+0x3ef/0x720 [ 280.710802][T16770] ? kasan_save_track+0x14/0x30 [ 280.710855][T16770] ? __kasan_slab_alloc+0x89/0x90 [ 280.710864][T16770] ? __radix_tree_lookup+0x217/0x2b0 [ 280.710914][T16770] genl_rcv_msg+0x560/0x800 [ 280.710926][T16770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.710938][T16770] ? __pfx_nbd_genl_connect+0x10/0x10 [ 280.710949][T16770] ? __lock_acquire+0x4a5/0x2630 [ 280.710960][T16770] netlink_rcv_skb+0x159/0x420 [ 280.710970][T16770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.710981][T16770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.710994][T16770] ? netlink_deliver_tap+0x1ae/0xcc0 [ 280.711011][T16770] genl_rcv+0x28/0x40 [ 280.711021][T16770] netlink_unicast+0x5aa/0x870 [ 280.711032][T16770] ? __pfx_netlink_unicast+0x10/0x10 [ 280.711044][T16770] netlink_sendmsg+0x8b0/0xda0 [ 280.711054][T16770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.711063][T16770] ? __might_fault+0x50/0x140 [ 280.711121][T16770] ____sys_sendmsg+0x9e1/0xb70 [ 280.711133][T16770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.711143][T16770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.711156][T16770] ? __pfx_futex_wake_mark+0x10/0x10 [ 280.711208][T16770] ___sys_sendmsg+0x190/0x1e0 [ 280.711220][T16770] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.711240][T16770] __sys_sendmsg+0x170/0x220 [ 280.711255][T16770] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.711270][T16770] ? __x64_sys_futex+0x34f/0x4d0 [ 280.711288][T16770] do_syscall_64+0x106/0xf80 [ 280.711298][T16770] ? clear_bhb_loop+0x40/0x90 [ 280.711310][T16770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.711321][T16770] RIP: 0033:0x7f251ed9c819 [ 280.711331][T16770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.711343][T16770] RSP: 002b:00007f251fc60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.711390][T16770] RAX: ffffffffffffffda RBX: 00007f251f015fa0 RCX: 00007f251ed9c819 [ 280.711397][T16770] RDX: 000000002400c0d0 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 280.711403][T16770] RBP: 00007f251ee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 280.711409][T16770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.711415][T16770] R13: 00007f251f016038 R14: 00007f251f015fa0 R15: 00007ffcc35e9188 [ 280.711425][T16770] [ 281.009655][T15019] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 281.030405][T16770] nbd3: detected capacity change from 0 to 127 [ 281.127826][ T5934] block nbd3: Receive control failed (result -104) [ 281.130522][ T5937] block nbd3: Receive control failed (result -32) [ 281.318038][ T6806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.398440][ T6806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.524725][ T6806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.581806][ T6806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.688420][ T6806] bridge_slave_1: left allmulticast mode [ 281.690308][ T6806] bridge_slave_1: left promiscuous mode [ 281.692936][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.697238][ T6806] bridge_slave_0: left allmulticast mode [ 281.699121][ T6806] bridge_slave_0: left promiscuous mode [ 281.701318][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.815889][ T6806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.824683][ T6806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.829382][ T6806] bond0 (unregistering): Released all slaves [ 282.309605][ T6806] hsr_slave_0: left promiscuous mode [ 282.312276][ T6806] hsr_slave_1: left promiscuous mode [ 282.314871][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.317786][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.321349][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.334366][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.340887][ T6806] veth1_macvtap: left promiscuous mode [ 282.342722][ T6806] veth0_macvtap: left promiscuous mode [ 282.344680][ T6806] veth1_vlan: left promiscuous mode [ 282.346415][ T6806] veth0_vlan: left promiscuous mode [ 282.418657][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 282.424319][ T6806] team0 (unregistering): Port device team_slave_0 removed [ 282.959734][ T6806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.034651][ T6806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.097331][ T6806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.151215][ T6806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.300537][ T6806] gretap0 (unregistering): left promiscuous mode [ 283.312552][ T6806] bond0 (unregistering): left promiscuous mode [ 283.315129][ T6806] bond_slave_0: left promiscuous mode [ 283.317223][ T6806] bond_slave_1: left promiscuous mode [ 283.325553][ T6806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.332592][ T6806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.337008][ T6806] bond0 (unregistering): Released all slaves [ 283.349233][ T6806] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 283.353231][ T6806] batadv1: left promiscuous mode [ 283.355379][ T6806] batadv1: left allmulticast mode [ 283.358331][ T6806] bond1 (unregistering): Released all slaves [ 283.392122][ T6806] bond2 (unregistering): Released all slaves [ 283.787969][ T6806] veth0_to_batadv: left promiscuous mode [ 283.795338][ T6806] hsr_slave_0: left promiscuous mode [ 283.797645][ T6806] hsr_slave_1: left promiscuous mode [ 283.800367][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.802964][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.805969][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.808330][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.817116][ T6806] veth1_macvtap: left promiscuous mode [ 283.819126][ T6806] veth0_macvtap: left promiscuous mode [ 283.821664][ T6806] veth1_vlan: left promiscuous mode [ 283.823950][ T6806] veth0_vlan: left promiscuous mode [ 283.899444][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 283.904822][ T6806] team0 (unregistering): Port device team_slave_0 removed [ 287.760076][ T5337] udevd[5337]: worker [13056] /devices/virtual/block/nbd1 is taking a long time [ 287.763883][ T5337] udevd[5337]: worker [12766] /devices/virtual/block/nbd2 is taking a long time