last executing test programs: 1m29.932208289s ago: executing program 3 (id=76): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) vmsplice(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)='e', 0x1}], 0x2, 0x3) chdir(&(0x7f0000000180)='.\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 1m29.87340404s ago: executing program 3 (id=79): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) recvmmsg$unix(r1, &(0x7f0000006f00)=[{{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 1m29.784077387s ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x48, 0x19, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0x1, 0xfe, 0x0, 0xff, 0xa, 0x400}, [@RTA_DST={0x8, 0x1, {0x1}}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x1, "b71c0d48f1ecf5e7832a91762ed9"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 1m29.783049035s ago: executing program 3 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}]}) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m29.682165651s ago: executing program 3 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x28, 0x18, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x30, 0xc, r1}}]}, 0x28}}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x100000000000f7) read$watch_queue(r3, &(0x7f0000000000)=""/3, 0x3) keyctl$revoke(0x3, r2) socket$nl_route(0x10, 0x3, 0x0) 1m29.37334961s ago: executing program 3 (id=90): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x113840, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x7, 0x80000000, 0x0, 0x80001, 0xffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) pipe(&(0x7f0000000140)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000200)={0x2, r6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000480)={0x1ff, 0x7, 0x3, 0x0, 0x2000000000000008, 0xc, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x3f84, 0x1, 0xfffffffffffffffc, 0xe, 0xa86, 0x80000000000000, 0xcc6, 0x6, 0x1, 0x94d6, 0x0, 0xfffffffffffffffc, 0x809, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x3, 0x2000000000009}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 1m29.360237959s ago: executing program 32 (id=90): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x113840, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x7, 0x80000000, 0x0, 0x80001, 0xffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) pipe(&(0x7f0000000140)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000200)={0x2, r6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000480)={0x1ff, 0x7, 0x3, 0x0, 0x2000000000000008, 0xc, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x3f84, 0x1, 0xfffffffffffffffc, 0xe, 0xa86, 0x80000000000000, 0xcc6, 0x6, 0x1, 0x94d6, 0x0, 0xfffffffffffffffc, 0x809, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x3, 0x2000000000009}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 1m20.750673309s ago: executing program 0 (id=238): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4080, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x86, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x8, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x1, 0x2, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x0, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xfffffffd, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x4, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x18, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c19, 0x7, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket(0x22, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008041}, 0x40800) fchdir(r0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xfffffffffffffd0c}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200480d0) 1m19.73341075s ago: executing program 0 (id=260): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffbfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x8, 0x1) (async) r5 = fanotify_init(0x8, 0x1) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000000180)={0x9, 0x7, 0x5, 0x4, 0x6, 0x7fffffff}) r7 = syz_open_dev$evdev(&(0x7f0000001040), 0x3215, 0x101000) syz_usb_disconnect(r7) (async) syz_usb_disconnect(r7) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)=0x7) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000001080)=ANY=[], 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000001080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x4004550a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x32, 0x6, "51bd5d3c7a0f41a964eb5c6d40a9fbc6d9dbab39ddeff1dfba50a92314326c47a7ae123785af8500000000000000"}]}, @NFT_MSG_NEWSET={0x174, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xca9f}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x103, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1e4}, 0x1, 0x0, 0x0, 0xc821}, 0x800) tee(r9, r0, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x0, {0x1, 0x0, 0x3}, 0x1}, 0x18) 1m18.933420037s ago: executing program 0 (id=275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x23, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0xc4) connect$netrom(r1, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf6b3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x830) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x4808, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x60) 1m18.801279614s ago: executing program 0 (id=277): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x198) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write$P9_RREAD(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) 1m18.630787486s ago: executing program 0 (id=279): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000006c0)="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", 0x382}, {&(0x7f0000000580)="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", 0x126}, {&(0x7f00000002c0)="a524478df502ad185484734aee290ebc177798ae7df57a94f42d7becdd258bb1487aebde75fa8277114003f7c4247787bad99ee0d08f118a5250362eb7e140c88530756d26c185620d432210298ede3852c2c15cf2d0472097c97c7fdc26b0aebf36cd51faadb70c4be96393258e0ec10967592ed15fdc63b01ceb35882afbacc90c0cef1cf078353820816efc423d296c73adc2b9c09564870f6e9df8e3b09e70639ec2c351925a59bf0064ba7de581c2f01246113ca6cdabf18fd948bc13134594c4d099f78b5dd44e5ca71a", 0xcd}, {&(0x7f0000002200)="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", 0xa7a}], 0x5, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x80001) recvmmsg(r3, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) (async) recvmmsg(r3, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/134, 0xbd}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xaf0, &(0x7f0000000040)={0x0, 0x16d, 0x400, 0x1, 0xfa}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000a80)=""/69, 0x45}, {&(0x7f0000000b80)=""/207, 0xcf}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000c80)=""/68, 0x44}, {&(0x7f0000000d80)=""/178, 0xb2}, {&(0x7f0000000280)}], 0x7, &(0x7f00000001c0)}, 0x100) sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)='3', 0x1}], 0x1}}], 0x1, 0x2408c0c5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x10002218, 0x7721, 0x54, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "110000e6c8000008", "cac9e9877c1600e65e99ffffffffff02", 'LP3F', "f7ffffffff0100"}, 0x28) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) setsockopt$inet6_tcp_int(r6, 0x11a, 0x5, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r6, 0x11a, 0x5, 0x0, 0x0) dup(r0) mmap(&(0x7f00004d2000/0x4000)=nil, 0x4000, 0x3000000, 0x110, 0xffffffffffffffff, 0x978d9000) (async) mmap(&(0x7f00004d2000/0x4000)=nil, 0x4000, 0x3000000, 0x110, 0xffffffffffffffff, 0x978d9000) 1m18.570815702s ago: executing program 0 (id=283): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000005c0)=[{0x3, 0x5, 0x1000}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x6, 0xe7, 0x6, 0x0, 0x7, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x33, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8, 0x2) timer_gettime(r2, &(0x7f00000000c0)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000057c0)) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xe, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0x7}) 1m3.520342492s ago: executing program 33 (id=283): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000005c0)=[{0x3, 0x5, 0x1000}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x6, 0xe7, 0x6, 0x0, 0x7, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x33, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8, 0x2) timer_gettime(r2, &(0x7f00000000c0)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000057c0)) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xe, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000540)={0xb6, 0x0, 0x7}) 1m0.853755424s ago: executing program 5 (id=586): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r4, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e23, 0xff, @loopback, 0x4}}}, &(0x7f0000000100)=0x84) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000240)={0x9, 0x101, 0x4, {0x0, 0x10000000, 0x1, 0x5}}) 1m0.853257901s ago: executing program 5 (id=588): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100001) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0x9c0000, 0x80, 0x9, r3, 0x0, &(0x7f0000000140)={0x990a71, 0x4, '\x00', @value=0x2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f0000000200)=0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000003c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001640)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x24, r7, 0x629, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x40000) (async) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x24, r7, 0x629, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) r9 = memfd_secret(0x80000) openat$cgroup(r2, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) (async) r10 = openat$cgroup(r2, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x9c) poll(&(0x7f0000000500)=[{r0}, {r2, 0xe2}, {r9, 0x2}, {r2, 0xa0}, {r0, 0x40}, {r10, 0x4031}], 0x6, 0x883) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) (async) r13 = openat$selinux_status(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) read(r13, 0x0, 0x0) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r14, 0x0, 0x2, 0x0, &(0x7f0000001200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0xa8ae3399c433be75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0xa8ae3399c433be75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}) 1m0.751939866s ago: executing program 5 (id=591): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x8, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vfat\x00', 0x300002, 0x0) 1m0.693410766s ago: executing program 5 (id=593): io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x1fffff, 0x3, 0x1d6}) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180800e5cf4e24eb7e801dff0000000045884f0000000000008510000006000000180000008d7141420488f8698dbb5107a5277e97c8feeefcc5c615955d02761c4ce87381960e0ef99741ee102be1711e144a3f0f9dcc7f9d55", @ANYRES32, @ANYBLOB="00000000000000006408000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x3, 0x5, 0x0, 0x670}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$isdn(0x22, 0x3, 0x21) setsockopt(r3, 0x6, 0x7, &(0x7f0000000180)="84123a9e707affcde2ead899dbc4faca0a8cda4d207b3815c7b84d0c644deb66b2976510046183e561565a5306d80c1051e5bbb6bb35a86b3ab6e99366a2cf8e6f39b862184a88fbbb9ee263f84957c8ec56622f4523e147886c7e35fee08e8f2a97273dcf940e7de0c20473db0238985a7031091663eb6e646972638f308cf2163de88deb71f09aeacca5c5f4f74d7b2d02c4b1256b19e990a79208eab65f474cca07d573b29c9868f4b29ae0249b7b078019e3ba3848048f2540a8178a549fbca038c427f9e1e568743f1eca215a62734e7ab67c19a85c196ccdd2a2aae310ffbcf941aeccf1a9dfc680e06f47a1f5d29c707aa3e93cf2e5f6726c59bca1", 0xff) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) 1m0.678442821s ago: executing program 5 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = io_uring_setup(0x666, &(0x7f0000000100)={0x0, 0x43d3, 0x40, 0x0, 0x235}) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = socket(0x28, 0x801, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000004c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000fc0)='./file0/file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000001080)='./file0/file0\x00', 0x800, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x30400, &(0x7f00000000c0)={[{@favordynmods}], [{@obj_role={'obj_role', 0x3d, '\t$\x02$/*'}}, {@obj_type}]}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) 1m0.513756016s ago: executing program 5 (id=597): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r2, 0x31f, &(0x7f0000000080)={0x22, 0x1, 0xde, 0x1}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x10, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x124}}, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 37.492127254s ago: executing program 34 (id=597): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r2, 0x31f, &(0x7f0000000080)={0x22, 0x1, 0xde, 0x1}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x10, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x124}}, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 37.179741668s ago: executing program 4 (id=794): unshare(0x20020000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00', 0x1}) (async) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 37.123169122s ago: executing program 4 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x4) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/file0\x00', 0x4040, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = syz_io_uring_setup(0x130, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x3d6}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x4913, 0x770e, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r8 = socket(0x40000000015, 0x5, 0x0) r9 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x100000}, &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) io_uring_register$IORING_REGISTER_FILES(r9, 0x14, &(0x7f00000003c0), 0x2) (async) io_uring_register$IORING_REGISTER_FILES(r9, 0x14, &(0x7f00000003c0), 0x2) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r8, 0x0, &(0x7f0000000380)) (async) getsockname$packet(r8, 0x0, &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in=@multicast2, 0x4e21, 0x0, 0x4e22, 0x3c, 0xa, 0x0, 0x1a0, 0x3b}, {0x7c80, 0x0, 0x8, 0x3, 0x7, 0x6, 0x2}, {0x7fff, 0x8, 0x2, 0x1ff}, 0x6, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}, {{@in=@private=0xa010101, 0x4d6, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x2, 0x0, 0xd, 0xfe000000}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r10}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r10}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x70, r11, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe9}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 37.052001435s ago: executing program 4 (id=800): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg/2:0:0:0\x00', 0x20400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x10001ff}, 0xa}, 0x10) r2 = socket(0x200000000000011, 0x2, 0xd) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/165) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r6, &(0x7f0000004800)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x11b000}) r10 = socket(0x2a, 0x2, 0x0) r11 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0xd9a1c5cbd61e4900) ioctl$FE_GET_PROPERTY(r11, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000001600)=[{0x1c, '\x00', @st={0x4, [{0x0, @svalue=0x904a}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x5}]}}]}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x8, 0x4, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x1e8, 0x2c, 0xd09, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {0xa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1bc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_ACT={0x19c, 0x4, [@m_mirred={0x198, 0x11, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0xffffffffffffffff, 0x5, 0xffff}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7fffffff, 0xffffffffffffffff, 0x8}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x916f, 0x4, 0x3, 0x2, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x60, 0x1, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x0, 0xffff, 0xa000}, 0x9a4c20fabfceac3e, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb8, 0x0, 0x10000000, 0x2, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x200, 0x2, 0x7ff, 0x654a}, 0x4, r12}}]}, {0x8a, 0x6, "ca3be23203450d726e7c98504df5467842d0c75f0b61562c5138b3a6e9f9d3c4529efd968f3ea09a133f9210afc7a4986001ba847b92771dcd84fb284f35ba12bae0bdf79a7e8bbc9c1a5897ceac82a9371bdde6a81051cc8d46f5bd788a64829f5afa4388363bf5fe17d36f79263b2870fa2246f2659bcada05ef85cb304bea21d9c40b97af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) r15 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r15, r14, 0x0) 36.7931742s ago: executing program 4 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) read(r1, &(0x7f0000000280)=""/142, 0x8e) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) read(r1, &(0x7f0000000280)=""/142, 0x8e) (async) socket$inet(0x2, 0x2000000080002, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa) (async) 36.672844848s ago: executing program 4 (id=808): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xcd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x60c280) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmmsg(r2, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x5000000}, 0x80, 0x0}}], 0x1, 0x80) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0x7, @time={0xfd, 0x9}, {0x6, 0x2}, {0xfe, 0x80}, @result}], 0x1c) 36.543606243s ago: executing program 4 (id=813): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0xe, 0x0, "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"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) listen(r3, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x6, 0x8}, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 36.499631173s ago: executing program 35 (id=813): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0xe, 0x0, "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"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) listen(r3, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x6, 0x8}, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x0) 27.402688794s ago: executing program 6 (id=982): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) futex(0x0, 0x18b, 0x800000, 0x0, &(0x7f0000000100), 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000400)=""/222, 0xde}], 0x7, &(0x7f0000000500)=""/255, 0xff}, 0xfffffff3}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000700)=""/38, 0x26}, {&(0x7f0000000800)=""/113, 0x71}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/24, 0x18}], 0x6}, 0xfa9f}, {{&(0x7f00000009c0)=@alg, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f0000000ac0)=@ax25={{0x3, @netrom}, [@bcast, @null, @null, @default, @remote, @bcast, @bcast, @rose]}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/184, 0xb8}, {&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f0000000c80)=""/6, 0x6}, {&(0x7f0000000cc0)=""/171, 0xab}, {&(0x7f0000000d80)=""/229, 0xe5}, {&(0x7f0000000e80)=""/116, 0x74}, {&(0x7f0000000f00)=""/142, 0x8e}, {&(0x7f0000000fc0)=""/136, 0x88}], 0x8, &(0x7f0000001100)=""/215, 0xd7}, 0x7}, {{&(0x7f0000001200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/163, 0xa3}, {&(0x7f0000002340)=""/232, 0xe8}, {&(0x7f0000002440)=""/61, 0x3d}, {&(0x7f0000002480)=""/68, 0x44}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/41, 0x29}, 0x3}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000035c0)=""/127, 0x7f}], 0x1, &(0x7f0000003680)=""/215, 0xd7}, 0x2}, {{&(0x7f0000003780)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003800)=""/222, 0xde}, {&(0x7f0000003900)=""/246, 0xf6}], 0x2}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003a40)=""/9, 0x9}, {&(0x7f0000003a80)=""/182, 0xb6}, {&(0x7f0000003b40)=""/29, 0x1d}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/64, 0x40}, {&(0x7f0000004bc0)=""/122, 0x7a}, {&(0x7f0000004c40)=""/46, 0x2e}, {&(0x7f0000004c80)=""/218, 0xda}], 0x8, &(0x7f0000004e00)=""/100, 0x64}, 0x76bf}], 0x8, 0x40010003, 0x0) exit(0x10000000401) 26.533482343s ago: executing program 6 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), &(0x7f0000000380), 0x2, 0x1) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={r1, 0x1, &(0x7f0000000180)=[0x8], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x4, 0xd8ab]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), &(0x7f0000000380), 0x2, 0x1) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={r1, 0x1, &(0x7f0000000180)=[0x8], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x4, 0xd8ab]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) 26.531472367s ago: executing program 6 (id=996): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x0, 0x0, 0x89, 0xd, @buffer, &(0x7f0000000040)="07d8b98288c79816baf12a72093de5950a62481d7714db8340898f545308a567fc5a4783d6e60bffe2016bd7eee3ffdd14b56f8a0c3dd20d0fa426e1790b9c846e144b469e7495a6258839f552fe145c60d8fa993274194f9d13fecb45aae9dcb1bcf4cc573be6d7187bfadb8db5b73b97516008b3ae1f4cd15d2b40e5cf8c0e6583e4079eeb203088", &(0x7f0000000100)=""/17, 0x2, 0x10012, 0xffffffffffffffff, &(0x7f0000000140)}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @multicast1}, &(0x7f0000000280)=0xc) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x21, 0x4, 0xf, 0x1, 0x4, r1, 0x8af1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x17, "4d92820d4f99e5ae91c4f475e8b14cb71c4fb08e33c310"}, &(0x7f0000000380)=0x1f) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r4, 0x4}, &(0x7f0000000400)=0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async, rerun: 32) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000540)={@mcast1, r2}, 0x14) (async) r6 = accept$ax25(r0, &(0x7f0000000580)={{0x3, @rose}, [@bcast, @rose, @rose, @rose, @bcast, @netrom, @rose, @rose]}, &(0x7f0000000600)=0x48) sendmsg$inet(r6, &(0x7f0000000900)={&(0x7f0000000640)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000680)="fae5e00b0d913bc3f2a3c6a99dc88938ba1c15ddeb2b009f93611f257fdf4df1d86a9bd2a9286c013e1e1535c00783b6f5d6354bd141762d93e778fa3b2b1fa5642925b5bce3f53882e6995eb311586c18e643fc5d53cb90e6d3cb167a67baab5950a0c22cf419b62f772a419ccf1d3d93fc0738b86ed3d2543bac5c92db403256c720d26562d2cc3a7bdbd0c3b0432c72110d32", 0x94}, {&(0x7f0000000740)="286c7fd8bfa982e753339735202a03aef380387b191b141f5a679a36098736c00f325debefdaa34d89380a2b1ed4c1a7c6a7fe588aa7368dd6520a1e6db96749caac55a0b770cc818d80f6d19fb7fac69fa12c35de2301018db8462ed79713001d0c5340b989754523ce8ca938481e823dd378c5c9352051c1310de3", 0x7c}, {&(0x7f00000007c0)="7b1875ae989200d8af60513516f16ba1e33b37e4c227d82dff9ac33695dbb878b57a67c1021cd4ac27b43ee0e3474c4cc8f0b0c042e4948f91f32321c048e9534fc7b890c336605e4436d616ef4b5759e9bd620be5304f3e3e0831b18588f7c4fc42d606e91094877765c6230656de460c2f84d9ed225bbcdcfb263f66a70be4c73e14ac9346cdb693e8ffad1d41031a0cab403cc46518bc3f4a2d7fd8f85dbcd2e1e271c2f18603d6e2453a6b7d3e74cddf659eb656ad", 0xb7}], 0x3, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x53}}], 0x18}, 0x2050) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x48000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7fff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r8 = socket(0x11, 0x800, 0x3) ioctl$RTC_PIE_OFF(r0, 0x7006) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000012c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000b40)={0x718, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%:,(&,\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x900}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30b6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$%.,@]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\+\xa8e\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33d4e29b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\']\'@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '})\'*\xd1+,#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x204, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "cca6e6a8eca8baebbe17587b39cb267dee5649f795aa3e8d5525fedea3009cdfe0e3d6cd22c2b841472f5277aa83b21b596c36310505390e39c340190c38675183929e24d017c417165eecff5b8c383a5d5a76a270560f0df46d7dbe207e3b5640752ca0f26645b6e19cea04f8b3aa3ae96340eeb1f3d134e5613cb60ed539b305defd04dda894185ac96609ea124eb5dca52733305463b4dde0e127e58bca6678eb8bbc684505e49d28651a3f9cd862e7d0eed40a0b089a8215a126134e9565a717097399dcf66c7bc16f97ffed45903ff2b3c6be6f152a397f1cd80a60463dc0c5077c0b14823d8e5f79c7713e881d86"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x2e0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ac}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ')\xe4}-\\$+@*\\(:-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '$@}&[[+)#{\\*]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf3d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',}\xcf+*{(5[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '5*-*,[!@-\',[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "5710da97c341baa944628bd66d34f47d8efeb6139724cbd36eba247c83d216f531aea3a4dda839e4cfbf19b10d92bcb24e7ba708dea03fcef32f9a6c684f5607741bf06eae240f619d83d9f3779e14583b0d502bdd19285f83904b7738f8d51721445f692820363199e5d6ba145e4059c8118817240dc92ac4820234513ee3964404d68a1836197ad930fd93ef89c2ef304cc0bd5b738b3de70b1b50b1728d3e8b0a"}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "bbbbf3b7a005b98d402cccf9b585b5ffcf43a7acc1b386c3b401a8883767df0039960f8dfbf45e87f66d55c79f4d8ee05fe667734fd5a153568f00f0353ebc8933c113c004e81f93b166ad6d41df7f4c57542dc40c7599d9be9eb40bea16bc49d6096957992796c65b5bf232ed96adabe654d2480ec34ad373638c686378284360f86297f22582bc5b7c72525135a0970cee5eeb06488726df8747511775780ffb19aa30ed1fc64844f654f58a920284e257f4653e2f5c89970dfd34c03d0a7378daf40085ecaed7d030df6f31e42ce3b23015ce813ce44565d04dbe0384fafc69067452c5bc"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x718}, 0x1, 0x0, 0x0, 0x40000}, 0x81) (async, rerun: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000001300)) (async, rerun: 32) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000001340)={{0x2, @addr=0x6}, 0x8, 0x5, 0xfffffffffffffffe}) (async) write$P9_RFSYNC(r1, &(0x7f0000001380)={0x7, 0x33, 0x2}, 0x7) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000013c0)={r5, 0x7}, &(0x7f0000001400)=0x8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x8f) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001480)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) setsockopt$MRT6_DONE(r10, 0x29, 0xc9, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000014c0)={0x3, @pix_mp={0x8, 0x9, 0x36314d4e, 0x4, 0x1, [{0x3, 0x7fffffff}, {0xbc1, 0x4f14}, {}, {0x7, 0xfffff39d}, {0x6, 0x3}, {0x200, 0x80}, {0x5, 0xb3}, {0x2d, 0xfffffffc}], 0xc1, 0x5, 0x2, 0x1, 0x6}}) 26.443533167s ago: executing program 6 (id=997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES16=r4, @ANYBLOB="25f8894451e0d9d153b3690574e54b508261fb133393737e6202c827cb711735bfc3f9cd010566855a3ef1b58ba56220c5c0f01904350be03c9beacab873fe5164d9b6ed5d463d568fe118a5b58c0af7055aefa52e792b00d25cf15a5bec91051b2940608079395bbea71a7ebebb3bd2551babfef56b2250470b23549b0edc10f6b1c01266d2c0648427d21354a89bf6cad0730cf79a698a8c22ad2fb25459dee15aa1cbb5649a957c637c0d428c"], 0x3c}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000016000200f8ff07000400000001000000040048800c00018008000b000000000008000200", @ANYRES32=r7, @ANYBLOB="57a746dfac1dbe8de5453d4f88764170287a15b27d853dcc58266722262cbbb6ca62e04290fe44d791c2c1263317872ac5fb23ef00684d52c74d3639de720c7c387626874adf02f394ce21a620135256c171cf076ee0306eb7cffc14e7b42000f7daf8aeb2082f7490c50e992ca4403fa23ff608eeaebf41490911a72d921ad7939005e0aaa6bd"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 26.443001958s ago: executing program 6 (id=998): clock_gettime(0xb, &(0x7f0000000040)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28860}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) (async) read(r0, 0x0, 0x0) (async) r2 = syz_clone(0x80900000, &(0x7f0000000040)="457b9c91e0064554010b97876f5d30b14345bd40b12e787a5e0612d19c75c07f3db7649076b2f2e656e9c08034172fc1994c5aa196d3885cf1f94539f6625ec650841eafa45a209cc20905db6c7247a5d5405a3e2fd8ba6b7338", 0x5a, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="c4f4b1c62f6c47b38a7914f744cbcd986b6038123421aa73a1d620df5b606861fe191700e08f9973b62d285807a3fc5270502ef41a98860be75d0907763d39389489f9c17aa1f0ff9459919d392bd91f6eab4391fa93") ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000001c0)={0x0, 0x0, 0xa, 0x8, 0xfffffffa, 0x3}) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/udplite\x00') read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) 26.022939293s ago: executing program 6 (id=1009): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xb1c414c03cdf1f7d}, 0x8000800) socket$inet_smc(0x2b, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 25.898412706s ago: executing program 36 (id=1009): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xb1c414c03cdf1f7d}, 0x8000800) socket$inet_smc(0x2b, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.103445841s ago: executing program 1 (id=1326): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="01883db4ef"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x80000001) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d3078303030303030303030303030313030302c"]) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000600)={0x9, "206ee60d49d71f62f517fe6658e2eb678ae03d3ba2687f74ea87eefc3a28ab34020fefd5ba202b7db620d0d82df9f2d6b4bbf268c08f0f2b645ebc2e5cd5eb889782f11344636421f174e99f02ca08942241b2c03f6ab0168962cb0b1defe742f7b210186bb6ff1b36844f8b6e823b61ddbd97ec32270d43260ad41594f8b404e0c7b9bf40d4f5427ef37e7ed88adb08fa420794d66f2d5ea8b67f7599b2d93b49c08d2e5f3b3fc5b6a316062f232f988aeb0a3e0b7b50fa9c20123e0bf7f14c87ca82acef1309561355aa189072360e2104990505442d7ce7beff53f74e7b24ab22cfa16b33e6bec49d20b4a0dd768cf7f7770c7dbe9994a0e6d482336432af664cadd70db080f54469d9a28066ef9e00b6b2aaf55a473c55626630c858c509dd8b11402dc6fab346f9fbd085b4e63e04a5d94c1760f70f2c42a76160fd0c52b46eb83753b2674ec307bcafd50ff19b8580d8c97b92d83b75b16e9bc3bb301e6ea9dbc77815ad00c14f0dcff20f7d11cb6313de6e0a5a789e6ab9ccbcdbbd866158ed345700ab283cec4c337651454cc1459ee6996873d00d2b331bc0b08fe54be90a97fbbbf7afa29b72e981abd3c4e435ad12b2773054ec90022700a1c6665c1fa96ec7e2732b45322e8f0d9f453ce97b8e6d216bf4293f3e5378c98bc6b8f852e4b09890106e9454177581cf97c3c2be7553da6bb9df4f164fbdd4e6b476"}) 3.873401942s ago: executing program 1 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000080)='netem\x00', 0x2000, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x100]}, {0x4, 0x1, 0x80000001, 0x9}}, 0x97, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0x9}) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000340)={"5623993b0dde085e7debf1862726c92af9e81ffa3a42ba88a5b0edd02495", 0x7fc, 0x1, 0x1, 0x9, 0x1, 0x8, 0x7, 0x2, [0x29c, 0x8, 0x0, 0x8, 0x5, 0x2, 0xfffffffc, 0x6ccc, 0x5, 0x9, 0x8, 0x6, 0x7, 0x1000, 0x0, 0xb5dade9, 0x5, 0x81, 0x7]}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "50b3"}]}}}]}, 0x54}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.803561027s ago: executing program 1 (id=1335): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3.797692957s ago: executing program 1 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000440), 0x8a0043, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000680)=0x2) ptrace(0x4207, r2) write$binfmt_script(r1, &(0x7f0000000040), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x55c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) ioprio_set$uid(0x3, 0xee00, 0x0) 3.723260706s ago: executing program 1 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200)={0x4}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.433440179s ago: executing program 1 (id=1343): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x0, 0xb, 0x0, "e52d5681b6b5b040ff0f000000000000ed1135eb8b547b3d07db99c11fc1a8e4"}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x5, 0x4c2, 0x7, 0xffffffff}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x1, 0x1, @start={0x40000ec}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2}) 3.405675536s ago: executing program 37 (id=1343): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x0, 0xb, 0x0, "e52d5681b6b5b040ff0f000000000000ed1135eb8b547b3d07db99c11fc1a8e4"}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x5, 0x4c2, 0x7, 0xffffffff}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000080)={0x1, 0x1, @start={0x40000ec}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2}) 2.513100627s ago: executing program 7 (id=1361): r0 = syz_open_dev$dri(&(0x7f0000001000), 0x1ff, 0x2) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001080)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="27f3ffadfbce8d284e0ef9c04eab8bf62d0107", @ANYRESOCT=r2, @ANYRES32=r2], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, &(0x7f0000000000)={{0x101, 0x8, 0x10000000, 0x9}}, 0x2, 0x0, 0x9}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0xd6b, 0x5c1020) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000000140)={0x1}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) r8 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000180)={0x3, 0x3}) r9 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xe4, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xb4, 0x2, {{0x6, 0x4f24c00d, 0xff, 0x7, 0x4378, 0xfffffff1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x6, 0x80000001, 0x2000e35}}, @TCA_NETEM_DELAY_DIST={0x58, 0x2, "4a1aba5c0c99c96a2d18b6938892f1696eed73287f89d62cb975b7cd71f16611457a779f15b976e0dd79cde43df60dea5df4852cbdc65d76a160947625cee5a1386582bd0b8978708dcdc6bb62098c3880ee76ff"}, @TCA_NETEM_REORDER={0xc, 0x3, {0xffffffff, 0x2}}, @TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x81, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x45d3, 0x2}}]}}}]}, 0xe4}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00052cbd7000fcdbdf2501000000180001800c000700290000002e00000008000800080000001c0001805800020000000000060004004e23deff050001000a00000008000600abbc8247"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x2, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x90f8, 0x4f75, 0x828ab1af306a077d}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf86}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x0) 2.203272014s ago: executing program 2 (id=1362): setrlimit(0xf, &(0x7f0000000000)={0x0, 0x9}) timer_create(0x3, 0x0, &(0x7f0000000300)) r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) (async) timer_create(0x6, &(0x7f0000000180)={0x0, 0x17, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.4828878s ago: executing program 7 (id=1363): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50}}]}}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = msgget$private(0x0, 0x100) msgctl$IPC_STAT(r7, 0x2, &(0x7f00000006c0)=""/4096) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(r6, 0x80205871, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="17200000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf250700000004000680080004000900000004000180"], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24008080) 1.482410619s ago: executing program 8 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xfe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250300000014000700fc0200000000000000000000000000fe14000900fe880000000000000000000000000001930a9f4a98782e607b34a5ba463cee1f57e5dc19953569bd8422744781ff2ddd7b500b62dabb7848a13d39978e1a617aefc51a447c5849ca5f4a690b878d0180d4173fb80a72d1336a477798e2ca12c6ff807a3e4a8dac32c81154d776f2d5547c1e06b1f960e16c71d2470156b8e671688d57c0ab20367d30d9c56b41bb4c53b6d85e4f6a4fefb02820ebcd18f5046d39bcf63298eb25e9417bd277e2e9cc12fade475ab3870f92ce619633a87f007d490deb30e5154f"], 0x3c}, 0x1, 0x0, 0x0, 0x200484c1}, 0x80) 1.312428848s ago: executing program 2 (id=1365): move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.252112564s ago: executing program 8 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x2, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0xb, 0x70, 0x37, 0x74]}}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31, 0x46, 0x6b, 0x2d, 0x31, 0x31]}}]}) 1.251444784s ago: executing program 2 (id=1367): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x7}) (rerun: 64) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) unlink(&(0x7f0000000400)='./file0\x00') (async) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000440)) sendmsg$alg(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="ebc0ef2e44a62564c34b7c099424def65b441259917f542e9571809dba398d7875412acb0bfaf5f65a188ddc9a37a620284229463a4156e28d2bae163e58e07cdebf0932a8e74aba2b8eb4a294b4a935f76d0a35c4852fb18c16b496136c236942ebfb8fbca5fb7086c77f7eac225342f688a2b36845f25b2c9f9f9ac6d21b506c0944292ab6c1ce249b7988bb3e14792593f52b3a75cd62fbe66e610d7827baa203a0a30c0a0885ab819967cf5120193bb0e949957503e0628c965f33b85468ee065395749b0b7479a730095c0cb6b58965d38531c1c0b1d76ee203004e68b5b5346362c602b0f799282cb74e3e8c997b5e42bed081ba629cfc3dd3c1447494163d19c89f9c918081c9d42738e643f4571c254145b09d7c6ea39fa9e05a3c8a8434b0cc413ec5b465bf5830d709cc69c07e2729e9dc47d5ac5eac4301e923841792aeececf71472b4ab6462f60c4b9486cb3ca1c674739be0139c1a222d2f00e4e3c064da940bbff118ba9f392f5ed4f91d0ad8c2e849e67c35883d3025e6186a99a80a1f21b5aeaddbb0a9b342228d654b3b3cfc5b38a95f4ffb69a91ec9435f3337c661120f246f97e88924a7812ede65289afafa8e64ec0df4fca103999307ae8c683163c3cdb160c184cac8227a194e910adf1aae7975740a7113e92b2093f8040ab7480354abd53c0849bff4008a506230cd62942fc66f7d3066f7a1c46a698a23dfb44dc409a40a0e3e8aa3b367235514c1c2ebb1cda6c3be491810b4fdd405de958eab0b5f21f1facbfb50e2ee1ee99759f273feeaad73a5fa580cd8276030715a9b6e95e2a69be3db16879a5d72926ec09b0aff006062ced9f959365576fa8047ecd836e65c1d303f00248a44f73d52e32ec3a03071b574d8c6a8d41623e915d3b7dfa4fe0a122275d6460f5a93dfe24c760443da5cf2ef0193be014d6e7de4244715633814f18f1d5354c1b06969fc4c90c39c3a232efbf64710c31ad9f4e540f66b152b6b8ba01ef5468f1ca961f4ae24bff06d51fa8757e5198e845d78bcc1a0e9d315effcc5b0286351b489243f7f84aafe3a19374981707a97042bf36e3bd5e83fb060d74d818710dc7553b21f99e295b050a0043ec792f292babab9c9b0cc366459fdaf1fcb00cd9a19d05a369f554083794225f14833b106165180af9909ea0d261765c1e486f18737691e00f314fd0a911f7a5d2750ab9ed8763a310a521c8bc9d5879ab51cedb0537ab83f31e56846d98605fd8a7b8aa8bff4c37f90a9e3286089a28d7ea43068523d4dd2f11a8d8b03aa4d130c985b5da20980ccda60e8b8ef3fbee9fc4c2845cd890f445897e2f577d42e14bc4d5338a470cd4490574fb4b4f5c2682b541c0ae124b2b6cd8adce74ab4a9bcc6050db029c4b3801564d36ccc1efaadc97a737ed9c09a7417fa4a48221058a5e47a6bc284eb5085518fa9199623a35bf1029f59fc2cc6ee68c939d44ca55c79511b1a188a01bce3835db047101125ce06e90d0ce04cc598e45f46abd8636fc308f72161931eda117fa2aaeb58b64b6eb13d343c5678824d112d39b17da447ccb9854b5bf1c18cfdb540d906af9c2eb8e7cb0312c22d8bfcf3f604e9318c94d1b2c6d1eb8558584dceddf0c868cb80d1f9db5d79c6a88b1c7203a8cdd6d32e9ce58b7d57c982afa76d60b070319e8d292a9332b8d034774068e45fe918510e98e255837dbbc70a563031cec95294056e15e0d79830e2c2b17254f780266a6a9b2ed329322eca3a856ead2edaf15dd61e920c14684408a7fff61aa7adc8be0dfc41887bc0ed56a4bfbb2d5d825c149f76f8383b1b2beee79c15152be43dc51f99a302c6b932f11206e4d3df6540d8457b6e97ab36c1ebf56a08424d1d990a997db42078916a58088639ce325b9bd5291feb6b48d5ebb75d59962aa1e4058f00ccdf2cd438674ae6bd22f96de91154f2c953c962c0afa3e126e04bf02aa7b3dbf64bda5dbecd7bf73bc92a5a5de7e0ab60d18060eabbdf8ef7a30f606a0a8dbcc905aae174cb465825265c10cfe53c951223d713b4c1e783a2bc6a6b4290acfbb579d6310a2f0a668293846f29bea0ecc3b4d006d6f873073c3b9878a75057928fe99f89978df461535a567d5709c8f7e83f5e3c7b707c9c2ca0fc3832853f70e3b7ee6ab771c5d4815fdfd296ec87a709496acd4849fc9afd569e22d5568b285cc34c71e08cf93278f365cadfd9ff2d4aeebf0da8dee5a8e090c0ba2a19e9940c807c48d4fb756c0bcedbaf193b94b863f7279f525104cd1f808416546cf37a0d99562dcdc13c3caee940443707a8ebf2cf7e85d0652e384f875cceba8e6dcd43e46ee1ecc26c8765839093013ccc82e2df58e63e0a9214dc9a0fd533c057a3b457f2e2f30995f10d9a4dfbb92156fb6e0639e738ec4d936a535f0d8d732d084e986e3304764ee538e396711bdfbe64e3817de8f338ba075a78976ea0b653729f8986bb8c2f50c1d5192c60e072d0298c6b46194f3f1911d4560224532a3765dd73bdb605fd2023098d506c6ad013689b76e9a73aebe9063c65bfc9ebe8fa1f895fcde889105453cb2f2567746a5bf93d3d9be5a2c24faaa5ccebe5f049439a5b1d17f23c72196a168dbf9bac87f008271995e48ddca3746325768878d84990faeb73e78ca9f6c3894cde0673680b6a7346d47259bba9d852c4142481fd27428ef59638b8c277341c2266c10e92d4e83cdb8fa5a3d8b7d68fa8d0ae2c0cd549360258e9519613184eaacc6b7008ea768f20a0c8ceaa66ef88383b3100492123db9adb724e83d30bb664c1491fe266f75c17fa2fe3a75774c584d4c018cfbab4afbdde3bb56f30f5d084d3f5558162b3431fea70766bbd4864e47a976b6d2f9a2e364dbae596983e383067d10990c04a88b4867177ec80c2e074f993fc16ccc8e271a7f4d645526c99c1d5e9878cd4bed45966a4e0fc17918e63a7ccb7ccfcebe2ddc633729624a305fb4a43efb9412bdaba599262b80f460b13c5f120ebf7d3bf16834c5652b125d443f80c75ff7f52da65b9bb318843f41a276fb35dfe91682dbfb7b4ff52ed21ccb78ef3fd812a71304d023e169d6a58c4dddd91dbf727e169b82464a11845c3a56b57eae9c0c438415da1aa3b56643299d2c121d76483f710e54e6d890ae715d8c87c7339a93414f25a1facd77cbb229213327bd88cb0aadbcbf9e7f14f2fbcf75617d6fde5519c9408a41c4647830d8fdf5a07b6ac25160a3602dd7a0c5ccbe3b1df34b8c2699da1681e85a7332a0292983ef54536990ee2f6e88ae7c5d1b9a676e51572bb7baf4a605a9b2d904cade4312f759fdbfe73485a15f2d331bdecabbbc4883f88f6885729f716738ba7f8fa081f9e6e261e1e9f97705e9083db18d45c7f30c134549349a9bdbe383f58ee8b940ce4f5701f09b2a74d42cc85db0e23408fe41eb9f8cea5c9a459774ffd92eeb89d7e3d411c868f48403eb1300880e684788918cb004ffafe9db140448da8e91bf3d0c33251bf24b4442d53311aed7f78d93489e3cef63ee558a72932e339d9ececfd7061ebc2098992d76e4fb1d845f9d5400eac75ec866b709cc0a926be64c80444e2d32e879fecf1f5b35960d2b85c4bcb10a023b437abfed088e0fce5031ee3e07ddae545387cda6d097b3ee06653e15dd8ac2df625dc26cb323f39973e7b37fde42c702a6c289b0f0a5e861c32b82685f7018e429332cb8c5d917a22d1265330f56f2324bfa4e4dcac0bcae02861da282e2e71a7d32609e74a1146bb8ccdef7c468dfd3704f19d94048aabf2af607d9471c92ff363194b2e3fe3176a72cb0c47b11aa5dbac6cfc17ef9bf2038e38fb8c387f6df641e9daa3f6c0761394ac759975109ebf657e4af304f26962ebe12869cf42852b24dd7075b697253415ee2c36331b4bfcb6f59a58fa1754b0f168e0ea7e9bd31c100cc8a975d8a876b5228ab038358ddea5aad011b5056dcb2abcb2ed05a70c70e440962c4b178cfaa4797d222f9398349a851988da6ff6d4ad80921d89b1efd89f5728b1eac49ed0f498ceb9ea885609c11fc4181a61fb31ed555134e335c804331045e2578d6b15fc8cbfdc321c18997995104598ba5d5dd4b15a0bf25f0cc48cdd2a8c0fd60d5d786757205fc73c539ebcb1f1ad1ccbec3272e26137c13c47975e8ccb2451389023ded61d6f6f3d774e780b1f60fdd0c22637534cd0a7a3fc04a3836fa39794ec0badd66ab3579e0c8eb1476b26d2d94a7013dc37cec9a3e768223d82325ce0f4f7f7c61ddaef4c38d371203cfb92a64975a4d34aef2be9f1c65b4e11a7f8aa42688ee61e2b9b226264504b79d97d598efa2eaba27b388488dc435c115642ae56e71d8c762056663024286ee95e65050b727dae0705fe89d619f22d42babea9d0c1997d037e7574f861312f96019b9de3cac9d9dc665f75dc7532bc84c140205ff9f19a330712bc67f12406f93cb85f24724758cf7d55d04f4478669826949f617cb791d7e6d7a44440674a33084db774b059c42fcc8dbd6230c487e330e7b309686970c78ea7eca96f336e9629ab6e6a484964cd1ffdb2d1a9190469b0da1fa1e8796748bbf3cb63a0e980307b6d78bd4ee6d6059824fe72329799927c6c8e65185f8f23c5cb01a7d806b7410dde4e9055758b37e709e2af511fa0601f12fd181481eb84659507965ec3723ead9afb387b641b1f9d9892634b3ff342395091ed3a6fc820b219f7e90627366003c0a5993810875cb8a5828a0e949d2581849a1afa9eb3e12251fb40ccb44b27590e6e9a38a283fc9e5191840529dba46fa911530554791112f43e1a86454471892e0c4a1cacdf9fdb1482a0a887515110c8b2049def6a8763158a6bd45d0041071c694de10ed51b89d6b0439c691934f8a61eab0d7f13aeb722967f81f4dca2452b18a05eba9d53fc57ab20bab515c62495c06af7082696ea37962b67b95e9d240e37f353428559a8c8b75841cb768f0689caf024a50635ccd5789c2ee38947ae4859c0d8fbc1c7e50212980664d1db92456e716f2b92fba7258030285c3e005df0d4234f67cebb2c09910c39e13215d6418706e552cece763ba4201593aa1a15129b010016a696ea5601600c43a969bce4b49c91fe2e614b05de56fc2fd199b727cd0fbecde9a30d0c43c19b1ac5f31f0451d7291fc1af97c1b4f6d450a3b422c8370b81b1f7f44a967c1b5de2569ab43885f468a822fff54144a7c91771b0b715d425814bf67086edeca45d01a0baffb1ed2be65e115491fdce1175cc001ad0958ae974e65c790e2cff0cb13e799ee3668b1292f9eda565b8bf9d44c0ae517e84b933b24fd8a3ecba87dba3cd528532c36fb3abe51a6c314c0df8c08cfe7eddbefd7b4ae8d4d2c28a37a960b6c7b92f6251c12a48c24f6ed2ab82cb74fbfa8700afb7bbd3f8b1f859f62a4a2cc6efda7d91bd9db7b08aaef86c32f5ba11ae834efed5ecbc5766f374aed7b8af262786a378b361903a6c61ebfdda66c385b6470b7409111d36156a2db42f759d8ff1abb43fe191aa524e3814a2a1840e59738d1a3ccc3b443e5e472925ff35c892dd05b3b5717b4ad1a90e4180824294425a5a5ad1bd04f004dba578cc533c673cf2345130cec4352d19c2812db858a929fac96e4b25cd6a5bb0a62382d43b50706fc3e1e8903deef86e6d4d478552f6af03ccefb0a7be7198c8b9e75967259612bf1a318857221cd73bb976255b39a40e5aa19b1150c28000a442e290aa61d9c1f625fc6a0afa5d978cf5590ab99e3d580ce4", 0x1000}, {&(0x7f00000014c0)="7bc89bbea71af26537e13a1f90476ba7c0e169e2e98f855de4a8caeafd1271e500221158536650aefd6b4918374e3e227af3f1243c6b10dcbb41f6d46fdf6451ae22581f6e7483033f379f18fbb67de335a318dd3beb5edc8cb39dede180d88f4960667e57ca20dc82b72330b41421221e0912b49aec4a3a93e0e2a7f0a0b4b68822e1bc000fa18dc6ecfdff3e0ff663bc32514fe083cec9830d00f41a0160ef9cadd93a250543c8d31e9c49fe1a4574", 0xb0}, {&(0x7f0000001580)="f3715a195724df059238fbed6a4134e34205ea69a568a891643b51e3194fe1718e0afe8e237f9646c9d5ee570aa2198d5d28a61a835dd95f0e0b8ec6f8afd4d491a211f3057662f3918cafe5dff157d7a6b9f466bcf717db3c72705a95a9696d007766b73726e633b9a3497b1ef69885559d706b292b372dfcae6cc61dca1b8f42a5605e113afcea27d634c9890b4fc6b4af7314719382fa2537c1a18f997172c7f11af64f783a322619ab6e38b62e5511373216a80952a3786b733d7546f9ea1576c4fc16969465a77eb3e90ede7570062949c303e9b908694b69541547c28e42a7feea07504ba2450ab2190780f248bc7c94b3436612feaca859e3f299effb124fc8a6c8d62c9129643ae780b982ed611d965a4f1fb7bc0a46ed6d68b513def184856cac3aab03ecbe0d0fe70954bc1706d652ca8abb897b1a05bc1b40d0334fdf555e732d87d4287c57b494630a847bb524e52f55e7d1b773753f23cde9c545f4017ab8b2a71aa82b23181907413227e8d1cedccd38a54dea2ba09d3bcdd33fccc3cca4cd3a91cf97bfbd889ecabfd124350bc0eafbf30f24413fc4e6a3dcbb0eb92cb2aeec8fdf6d3a711d57342f19e1e37f2e30b259c26e84532e1a20103ea0bc90fb51d33ca08add583d9857513d7bc772fa82e0ac9cf5bdd56402cf99ac713a257f45df8e7849b0ba02389fe2fcb72b02293ff0639efb87954eab99cf83a8db713ff70400df2c81e92c52ff6e53dd6fa5297ffa5d463e865d058acc37884d67d1ed2f025facabfaa4f58a96cfde012512339837aa41fbb570cb1a5ba39d9bd5a0d5d88ab0a37c7bf459c81a0a5954221e3191c9d0d243c2cbf8227dfdf6d5ce7b0a0f5b7a09b260df8057b02ccb2f5da6e361430c56fa0f3d68fa78cf3c2676f44d7314017a3b413643b7c82bfce5e647297d2c499c5e5eb76c5c735c61e3183a8122dd8c7fbf0920301bbe4995b0747524ca8a280250c8cf1a86c535a780991ba615636bfc0ce9a249c6a075aeae0be5bb327ecfea0d51fa2258289af79edad8acf76c0883d1bf46e1b4c884492086abb8024005c539ea3f5374ab66d317ae7a7a6371177d4a69c04c7c01aa07b5be837a919b7c6c5269f730253c15e417da853cbde5a1dbf928943b7bfbd260d1116bbaa7386cab16ff10ebb819d976dceb2d637e3a7db5f314bcf1bd621820324e1906e7d63759fd606e8d48c42c5921fbeaf45e23f3340d2a43857b10de1a8d2f1d9bc2cb65c0f71fc9949436a1b0509c09e08e642fcb6309f647bcb790d61378417e09fd8f1c80f85c7613ea180a51435974b15255c5f312f21a77e1ee1286c8489069f495fff4fe2ded1ae1033d962b2d28cce532532668e1d65bb9ec1d784e76e8debab05628ad87de179adf41727bafb3f6c34e67aacada99ed18f9bf2ca99bc3a8ea7b2cc410842d84908493024d395aa4911f72ffaa089688a3c548b797dcaa2dbd3486019d98db6c8d3f4bc345b9d44ecd3b0749aba79088777a91ac8ad4071d6a829799cf8c970b15a7449af791b09a35b0b55bd002498b9a1690a2df146c54e2d9793d8963688b8de6c0fba38d110ae8b663dae78cc08db61709c9c7256aefbb6931ba6a30cd51b2992c825e1d4d9e227811bb9b15542a6315a3d663cfa11839a52b80d4d511a260552babb34d1909b9a10c97745225901e436d2d7075eb3e81249888bf0b159775d7c3e001d358ebe3fe4760d47f849d46ac339b3d0e8e6cd83b2d6263d0dc4f2bf612946c9beafddf35ec985ef03ea64396c428baa52ddf3f60adc56136370c4a7adcd8672bbea0356a3b36e441a0ebce253408777103e4cd94703acfc58f5bbe4a45e2d23df10e98ba406fa4e75e7be23cee57a901ec531db8495844cd00b8236e196b8537cc7425ee5357e0b1405f8f5ec8ca46b093f09ffbe9a09a2476f5f26e2d3e1c5978de6b5f23e2fed6df6935949c7f7f1e1eac875508cdd117b1fda39b2fe44f03e24f919763594fa5abc823136a3eed18c4850acd8e10cc87ce6d04daf28e04c74edc95ef99403dc59274bb808779c4ba35f040129f6c05029ae9bd7865681865d40e31b632c3cb448626768f64f3fe9d952451a4f667296913bb3ff7fdcfa41e9df39ba39f3659ab8d94df010a8ad6eaa4e88dfbb5e4f5d50429be4de808822f567f340453bfb87cae18fa5c00a521f895b336345f3963d25b82ef0cbc5f35a03de81720bad81ca5214848dbc29359bb1bacbeefe2edf782fef85a23ae69075cf7afa285631333debb18b1e39ac30648dfb6ef51b263db0d35d1e323601503a054251012fa94a831ac1abb3a26c41bc7863512f261c17ad9426da98158e239536cece88e9fb47462a029783448b9b856204dd1293132e6e6b0c17068ae62cf9eb3fa36bf285f1215136983947cd1a3711c30b50e2d23a3a551205b7b7c2b07d5c51da6a3ec86f8c6905100c7412c8d8254907863709cf3989639bfa312c3114c3bb79c625f927d7d9477d0e3cd619e4637d799c723730b6b4dede90badbdd8f0f35d899a9329361a66226c2c7b587e6d6dd7a4cd8d13cbce1423f0be3d027879e478b17d9433b9e76fa22e22a7f96ec40c162344831ea9f8f44c3e5b702e2f43b9fae2aa8741de3529418f1e4c690e353c360f4f4bc54a6aea06938ebc02efc5e914212a8797a57cf904f7182bd887068521b9804dc959378c6a64001df9010cd51fef536106a8d95425a997d802e425a68aa531e7e382741ac397919fcef085ca463b258011e42746401f3832f412638e52f51f5fc383890b05d8b1d2992a1c4f8890d9f12bfa830f86b5f7fafb4926814c72af70be9eaac333ed2fab913070d2e528dbbcc0429f61ba4d2ae200dcd6d245852b732b1a4cea9851c271d128ec23ccc6330761399edf096d708571780de034702906992cd104249bd19493bd537c9f8ed691585852f48ab355b23ca00e9d351ca8e5be9ccda2af992cf24c170bb7a8b9c37bddc9368cd44e48e64719d32c46f6978f7d17e25ee88f7727cf9865b4713b630f0341f883e5629433ddfa84781f498064ea6900fee911b3776079c4ef9c427359696f7a7fd546279476b51cb9940ed2405989a7d2ae495801df5edbd5480f08451ac13d8dcca73254a616cf3bba97ee895c1e19f82963804e359567889f65f0b407f430a3c640fe75ee60b152627af29a6c043df1b8070eda344eb6136ada1263e5203ed43b6736e964e850bea40f590ea2a6f361d122fb8cb19e8fd00805ae8a85412db56e2cce931542451dd8dbf357ab078abf3a84ea9c8c473d2b86d85cafff5fbc2305ecddfd221612e3f502fe7384f0ee8bb32ec518c388dbc63a987b3a633b31447392668d90934fe2506fdd368748172375dffb06be370d31b6e18ac1c6977e05cb140bd0a53c063d593ec876dad1551b73a3a097ac57dffc2a9ddeb41ed2d9a32c0cb9ade52585da13e1c692026264c7be30b756c4ba6e179b3e96141f8eb2e961cd95c110149a12e5985acd9084ac43215a6335446b00e45ce51f862ed8181eef418e59d53c1b89411fb2b90d3e819a08c75df877fb36d042b5dbf8434659629a50e010be59f540b89bc2f5e55a3a026bcd0704d9e9b397fac98f6af2c9ed34810a54f09e152de2c52864710e0e4c328e20ff67be3292cdaeb2cd1f512f161174327fe5e5b2c98a9e35481b4eaa23ef1135986e2d93e9f80bd0bfbfb62452a8d9de10c6f4995a214b660ba755af26c996350438b67db61ba884773e6f25282091e6646d7fcb1741a1dfe723ed989ca2a19ca99f8df8b9a5cb30cf20cf2cc5e0cec855dc37bbf51519d2839c51eb75893c58fe06c5f1dc2d94d65ca35b38ee39150616fe6f98e6b50e33ce132b02ed9b79d9f5645a76c90b4d48a75e0f880791a6b58e4130c8e31f2ddd4a0af02ed6012fa3b9efd2992cb7cbb5791c2987be57e12f5cd3ad94b4cadf14f53581ea1807abf352bf6e9a2e3e50c1e1dcb723e707a99e22ad1ba9256d2ee853eb890cc2169801588a86059dcc47b5dc6c663eb213728d96edc86f84f447a04d3a238e20cf19820cb3349cc53365b0992e3b8d7e5f57471efc567e518d0765df6266a98524cbd56ac264836a6326faf191e8826595f664c81a7bfb9b8ff79cdb2245fae463a57b82f1b5bcf79e19fe8ee783aabba18e7e9acbb59fdcaea8caa35411bdb8790e94e1196512822fad950de6d88230e81ba3e68f9914d32d9d720ce3ec735c6418110dd5367cc99c9698f495aba907b8af84a99aa160b3224a16bf812f65a47b35474c3b980fc50ebd0c9169dccad1030de9509f1457743f9992477b7e8e4f7c879985208e1cac5009762915c334d47ad541b563d309ac14d6aa8f7161646709610dd366191b8d82534e6f81c3a12bb158275b2dc7a18edeecfa6feaabe8d9badad0850de8fe40c6a9239990807cf0ba1ff992cb0d2adc7ecf27a67e88768fea2c5e4bf7e609154c5796cfd22b53dd062e20c509d792662f8b8b6bffa035b5f3b6f5cc864c0dc84941c5bb2c515c0b5995246168a47e4695d36219dd91a699ccd626ecc85f9e98e87f67895979646691571f5ad6b3bf34cd96b93c6296fe4bc61e20db9c0d4f307cb114b07c091593ee4b7d7e8ca14dbe6b7b7ebce22d474ca955582337935b067e531a378eaef54573448b2383f68e24dee040a8e25552530e5c0cef1591f1850915f536a2b46dc764839e98f5b874d2bb83d78a5517b1cf4d53caa50fd99d15fa5c7e089efa69f50ebef04e032efd3bbb5f9e585fb09aa35b5512162dc7f3595a9365169972693fbae936a433a29dc820db9f581a7b99849cae72b801653c692c3fb0045ea2707d39884e0c67a00c774435aa8258dfee6a760887ab4c0f745fade568f8d23d524828814ce394f6d1010fea8fffdfba712b24dca2d896046ab2ab456d90556a0f05f114f4234347b12c9f4d5fc9f003fe883166c2e1bf5a1d235bc8874b25e5fc94412be63a5697a8df27198d36f676ee783869ce6f344998ecd86a0a653f8de8e8db27f024d9d77009ae49f76e494c666f540825a4889678bed173ee278164853a6fb1429b8829641f227b22d8231510d1e0759173ce7282116853786c36fe1f6a7fd2fd6547708cbf60101cff38039ee52b550b2be613f30bf8c7f1073529829db044a5b22b853c33f2ecdbe19527c1e6c6546f57324f4eedd29604b41c4f4f135add63d58c0b115040d7cf2265c20979df465cb525822e8ecb92a42b46fa0aa0c39d63b472ed9d534ba85553a3ba160d22f8065acc933698aa328320805cab2c4b1d6f6de5c0e1e882d3ebeb18ccfafa324f60eb0a4c5cfd84351d31f543e105b6512ccbb952c04dafe63486eb5a9af04a37f76d876360f220edd5b9885281470e5dcb3613b3902dc03a83e7f7e626b5bf0214b884786f588915d250e7adb2f8c77462fc5848ca46548bb051bd80af4c598f8ddfa8d85ae1d1372c9ee138a9fe1d5ef41e141c31ed8de7105b9a7e4bc8c0d8f534f9a2770b137a48aaae2e491229b6788f227537d2ec3870d35c877d90fabd33bb431d0b4648e7237d9502ee256965ec650fa7210a71a92159cbcd1f9d67248373af29200badbee06d1ccfb81737d09460e322bee9ee6aeb04dce09d65f5d6b4917c6646f8e7b1bfeec50dfad1f6599c39fc6a5b56734a8b9e9b1ae148dabdd570d322290e2833d7498d884a3483805bc78c16c4a1322fb87610e3ad570e3efc79da2eb16e3218df06c43ea2c371961b8c64586570ddb0edb574fa7ea524b13561", 0x1000}, {&(0x7f0000002580)="3c732dcbd95206eb18c9b32557ff35a50ea6e8dfc254e635e45f89562256756b260edbd6d537ba14f1773fcae47751b782fb5e6d2215cfb1e268ebcd2867ad080957974c4fe8826726efb0fccf0b69ac25540ae991f6149d9e1a4f5a01259b330945db5ff138", 0x66}], 0x5, 0x0, 0x0, 0x80}, 0x24000001) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000002700)={&(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000002780)=r3) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002800)={0xe4, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5c4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd32}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2000000000000}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000002980)={0x10000, 0xa000, 0x5, 0x9, 0x20}) (async, rerun: 32) rt_sigsuspend(&(0x7f00000029c0)={[0xc]}, 0x8) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a80)={{r1, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b40)={{r1, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)=r1}, 0x20) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000002b80)) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000002bc0)="ee527bf1645a2eff6c87f36802879803f23d4c2b8e1be7a8a66cf080849ec2f12b4668fd6558fc3a2bb8b48cfa2b3305303d2584f533ec492600d2951cf644fb12aaad4821885c858bf1f43c3b7175965d5e42354df50fb5d24a212702d94e5c68b6ec89681e1beaafb7758d6cef689fa128b616f1626bcb63d885d9a65b46b393524ac1856bd3101f71301f0ddcfab9819bde13d7ddbebe2d333dcaa2a97335a4ec1a809c06e4f76b80e559e62ef4e7f7", 0xb1) (async, rerun: 32) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000002c80)={0x3}, 0x4) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048085) (async) rt_sigtimedwait(&(0x7f0000002dc0)={[0x8000]}, &(0x7f0000002e00), &(0x7f0000002e80)={0x0, 0x3938700}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000002ec0)) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) write$P9_RSETATTR(r1, &(0x7f0000002f00)={0x7, 0x1b, 0x2}, 0x7) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002f40)) (async, rerun: 32) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003080)={0x0, &(0x7f0000002f80)=[@uexit={0x0, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xf, 0x3}}, @wrmsr={0x65, 0x20, {0x34b, 0x2}}, @code={0xa, 0x7a, {"b805000000b9005000000f01d9470f01ca420f350f01f8deefc7442400a3000000c744240200600000ff1c2448b8ff000000000000000f23d00f21f8351000000c0f23f8660f388055ba66baf80cb8e0a5d182ef66bafc0c66ed66baf80cb8b816a683ef66bafc0cec"}}], 0xe2}) (rerun: 32) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f00000030c0)={0x2, 0x0, [{0xb, 0x5, 0x4, 0xe872, 0x4, 0xffff, 0x2}, {0x4, 0x1, 0x2, 0x10, 0x3, 0x80, 0x1}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000003140)={[0xffffffff, 0x10, 0x0, 0x7c85, 0x5, 0x4, 0x80000000, 0x2, 0xfff, 0x1, 0x6, 0x4, 0x401, 0x4, 0x8000000000000000, 0xb0c], 0xd000, 0x10}) (async, rerun: 32) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000003200)={0xf24dbfd, 0x1}) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000003240)={0x0, 0x3d6, [0x1, 0x8, 0x9, 0x3, 0xb, 0x14c]}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000032c0)) 1.19231386s ago: executing program 7 (id=1368): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800000000000000001c140000fe00000100000000040012000000f1b9a81797008d68a0328c49d2ee"], 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000040)={0x8, 0x8, 0x9a, 0x3, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x1010, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000140)={0x9, 0xfbff, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) write$binfmt_misc(r0, &(0x7f0000000000)="7e45fbf7c5ab3046dd9d41fee7", 0xd) 1.191486279s ago: executing program 8 (id=1369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0xb}, {0xfd, 0x2}, {0xa}, @raw32={[0x2002, 0x0, 0x8080000]}}, {0x2, 0x0, 0x4, 0x83, @tick=0x3, {0xfd, 0x40}, {}, @result={0x7, 0x5}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @raw32={[0x6, 0x7, 0x77]}}], 0x54) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES64=r3, @ANYRESOCT=r4], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r6, r10, 0x25, 0x0, @void}, 0xffffffffffffffd8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0x7}, {0x0, 0x4}, {0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20009050}, 0x4000900) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) r12 = syz_usbip_server_init(0x5) write$usbip_server(r12, &(0x7f0000000000)=ANY=[], 0x3696) 1.19091225s ago: executing program 2 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0xfffffffd, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0xc0) 1.190592773s ago: executing program 7 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000280)={'trans=virtio,', {[{@cache_mmap}]}}) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)) 1.079482179s ago: executing program 7 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000280)={'trans=virtio,', {[{@cache_mmap}]}}) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)) 942.006183ms ago: executing program 2 (id=1373): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ppoll(&(0x7f0000000b00)=[{r0, 0x4009}], 0x1, 0x0, 0x0, 0x0) 802.742073ms ago: executing program 7 (id=1374): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) pwrite64(r0, &(0x7f0000000300)="db9a6b34824c58033b3a5d4ce7954dcfc1985d01305e3091a8ef4eb0304decfb7d864dd255cefd127faaf981a50023ef2ffe334c569e03f52cb31a46c1408b29fc4668260177e2c7e3e82ab420e98a24d061477880ffc0855ca0111e1908243e641e9019c8c06b79e815b4a3713181439cf86ee240fceeb1e48d2a997b020f8544d483599174f7e757d62674b7cbb4fb6bb4ec4e5b1955a4615f582e20d4d5d0658110e101b5ba39a9f98344af1dc62baa82d25d185d9ab9b3d6908e159f0fdceed7165f74e2cf8e6808513c1b58a628526c37b4e42f", 0xd6, 0x2) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) close(r0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xee) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000100)={0x900}) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2) 331.715268ms ago: executing program 8 (id=1375): r0 = socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000cc0)='id_legacy\x00', &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000d40)='.,\x00', 0xfffffffffffffffe) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$xdp(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x6c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) 212.046475ms ago: executing program 8 (id=1376): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c28100000000000000bb0800450000380068721f38c44dc732412f5c8019b6000000019078ac1e0001ac1414aa03059078000003a345f500090083001c0833000800000000ac1414bb3cd05c1dcc7bb678"], 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x1004020, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRESHEX=r4]) (async) statfs(&(0x7f0000000040)='./file0\x00', 0x0) 211.643034ms ago: executing program 8 (id=1377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 72.965604ms ago: executing program 2 (id=1378): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x2) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003b00), 0x40000, 0x0) ppoll(&(0x7f0000004500)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 0s ago: executing program 9 (id=1344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8f70120b0a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmmsg$inet6(r1, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x81, @mcast2, 0x83}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="ea2331114f39aa748c577685c0f88e9e76c5b832744b8f5baefa98a1", 0x1c}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="2bc35c593f719c071e64f5bd1125b50132b5a979d2e9ab89f23009bd801b02b80c334a0b919ac95d19e351cfddc29548b3b339cfd8fcdb9c649c09e2559ed089103324c9ed148f4152a46fb936bfb0911cd6bb34f28d73db813ba6feb343dad0e978d06c7a7e2e175bd8512271d0e57217ea95b40f34304f", 0x78}, {&(0x7f0000001600)="bf8fc302716f87241f09b9945a90b050dbe86ded547cf278a7ed88c26481bd1bc8440048fee0d1a8c8d7b00fc6a635040744460c640638ac63728bc14ac1baf5e21659053da18a85f9c9b7ed35a97ea1bf5dbbd1692badddb191aa6a975586dd8e0f4b053fa8170dd1f6eec6da20bfa055104c71c6ab8eb68a5a58e36b10f43d4c665a2209adbc7994ac41323757e7192ef8551fdbcca2a5806873598075f10a9712f39d95dcbf89275426728a48f94f7c69a972dd98c66996ccc994ecc062a929c5c726ddebfbb3417b2d77e38dcf9c793f39bad592209c1731ba899efe4cfb58", 0xe1}], 0x4, &(0x7f0000001700)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x2, 0x1b, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0xf9, 0xbe, "919da69d7a84173eba154a02bd5d58bd4eecc46bc40ddffc19a1941f91451b1df0a3321a9014debc9f63c7b31b505bcf875d47bee1acf2891268ffd5795d761bd01d3ef6869a398611a3e40451c4a858d204ae280eb43c44e2ca5dc189b9c809a15a3c779a6ba61461eafbcef16661613bba5042b70699872e873059b43012a8ae0d84d86ddaa805ef10156e25bc6e77d0cb3fd94f19b99aa601ed6976a99e0cc3d961883ff0a1a5e3fc6de4e72f51c4872a7c1e8c6b338e5e6551955536"}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x1, 0x9, 0x0, [@mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4ca3}}], 0x170}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000400)="2d1f9e40a42510a30ff3d349e4639afcd7f92d5b4fdaa3f6159b62c3a6229699370847b366e1eafbcb344fe75dbab23fdd4ad930f69073dbe3b69a41fe7af43084a87755d9142931adf0245b8884731244903f7de3fd66a6f83fef0baa20a6fd2c9b8c77c2009ae834cbfc84be2e5f3f6f26d1a28834065c9b2532a558ae55bb42fa5478a9cefd37bfa991bde8e6492253f8d2404cb6317f094181332b4be3f1523a9a7f9e36753c11e08b19733b141716138b217305f9", 0xb7}, {&(0x7f0000000540)="d8560c24580bbf915b03c14769780307d2293500f378fac4c40caeaf0359a3319a73adf5bae6c1b1e59e542276e927fe79e200efa36b4eb3cfa3", 0x3a}, {&(0x7f0000001880)="340d77b66abfcea965145feae4240331aa1b6dce5ada782fba895ba03dea752765030e90646ee2cde054e70c661dd8860f1c07d21c2cf8811bd1b3d51fe840b8de5075", 0x43}], 0x3}}], 0x2, 0x40040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884", 0x35}], 0x2}], 0x1, 0x40800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 53.108616][ T40] audit: type=1400 audit(1774409438.391:61): avc: denied { siginh } for pid=5858 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:58214' (ED25519) to the list of known hosts. [ 55.000389][ T40] audit: type=1400 audit(1774409440.301:62): avc: denied { name_bind } for pid=5920 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.030153][ T40] audit: type=1400 audit(1774409440.331:63): avc: denied { execute } for pid=5921 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.037604][ T40] audit: type=1400 audit(1774409440.331:64): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.221952][ T40] audit: type=1400 audit(1774409442.521:65): avc: denied { mounton } for pid=5921 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.230491][ T40] audit: type=1400 audit(1774409442.531:66): avc: denied { mount } for pid=5921 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.232347][ T5921] cgroup: Unknown subsys name 'net' [ 57.379983][ T5921] cgroup: Unknown subsys name 'cpuset' [ 57.385077][ T5921] cgroup: Unknown subsys name 'rlimit' [ 57.606410][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.311352][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.429559][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.429570][ T40] audit: type=1400 audit(1774409446.731:82): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.582264][ T40] audit: type=1400 audit(1774409446.881:83): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.597273][ T40] audit: type=1400 audit(1774409446.881:84): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.604835][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.606462][ T40] audit: type=1400 audit(1774409446.881:85): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.610150][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.618989][ T40] audit: type=1400 audit(1774409446.891:86): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[3841]" dev="sockfs" ino=3841 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.622383][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.625109][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.625515][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.625988][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.626358][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.626623][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.628270][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.628974][ T5293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.637002][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.639471][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.641143][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.642489][ T5293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.649158][ T40] audit: type=1400 audit(1774409446.941:87): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.649186][ T40] audit: type=1400 audit(1774409446.941:88): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.649207][ T40] audit: type=1400 audit(1774409446.941:89): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.649228][ T40] audit: type=1400 audit(1774409446.941:90): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.649244][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.657898][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.665604][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.677788][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.688924][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.700336][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.876397][ T40] audit: type=1400 audit(1774409447.171:91): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.911632][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 61.926854][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 62.026044][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 62.099329][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.101945][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.104238][ T5938] bridge_slave_0: entered allmulticast mode [ 62.106988][ T5938] bridge_slave_0: entered promiscuous mode [ 62.112018][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.115155][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.118242][ T5938] bridge_slave_1: entered allmulticast mode [ 62.121576][ T5938] bridge_slave_1: entered promiscuous mode [ 62.134406][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.136719][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.139336][ T5947] bridge_slave_0: entered allmulticast mode [ 62.142701][ T5947] bridge_slave_0: entered promiscuous mode [ 62.159640][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 62.165663][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.168336][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.170770][ T5947] bridge_slave_1: entered allmulticast mode [ 62.173489][ T5947] bridge_slave_1: entered promiscuous mode [ 62.207167][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.216549][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.235419][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.263901][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.268668][ T5938] team0: Port device team_slave_0 added [ 62.279169][ T5938] team0: Port device team_slave_1 added [ 62.293573][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.296370][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.299099][ T5939] bridge_slave_0: entered allmulticast mode [ 62.302997][ T5939] bridge_slave_0: entered promiscuous mode [ 62.316369][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.319542][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.322684][ T5939] bridge_slave_1: entered allmulticast mode [ 62.326162][ T5939] bridge_slave_1: entered promiscuous mode [ 62.353957][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.356685][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.359779][ T5951] bridge_slave_0: entered allmulticast mode [ 62.363868][ T5951] bridge_slave_0: entered promiscuous mode [ 62.372809][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.375977][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.379324][ T5951] bridge_slave_1: entered allmulticast mode [ 62.383913][ T5951] bridge_slave_1: entered promiscuous mode [ 62.403884][ T5947] team0: Port device team_slave_0 added [ 62.407728][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.410211][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.419732][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.434235][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.436688][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.446601][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.458710][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.462834][ T5947] team0: Port device team_slave_1 added [ 62.465927][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.472191][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.489653][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.540148][ T5951] team0: Port device team_slave_0 added [ 62.561503][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.564077][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.573979][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.580094][ T5951] team0: Port device team_slave_1 added [ 62.586528][ T5938] hsr_slave_0: entered promiscuous mode [ 62.590301][ T5938] hsr_slave_1: entered promiscuous mode [ 62.594716][ T5939] team0: Port device team_slave_0 added [ 62.597818][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.600341][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.610883][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.634544][ T5939] team0: Port device team_slave_1 added [ 62.648606][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.651058][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.659858][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.665267][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.667719][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.676033][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.704576][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.707532][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.718010][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.747191][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.750091][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.761048][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.768705][ T5947] hsr_slave_0: entered promiscuous mode [ 62.770984][ T5947] hsr_slave_1: entered promiscuous mode [ 62.773202][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 62.775073][ T5947] Cannot create hsr debugfs directory [ 62.815418][ T5951] hsr_slave_0: entered promiscuous mode [ 62.818047][ T5951] hsr_slave_1: entered promiscuous mode [ 62.820138][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 62.822188][ T5951] Cannot create hsr debugfs directory [ 62.881175][ T5939] hsr_slave_0: entered promiscuous mode [ 62.884487][ T5939] hsr_slave_1: entered promiscuous mode [ 62.887682][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 62.890130][ T5939] Cannot create hsr debugfs directory [ 63.153537][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.159869][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.165014][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.179207][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.216273][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.224190][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.230923][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.242495][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.301254][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.307935][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.312069][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.316452][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.385574][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.390440][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.399085][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.411769][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.416794][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.442750][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.449910][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.461926][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.465036][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.484827][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.487502][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.505732][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.515273][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.518170][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.532619][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.544211][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.546486][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.584496][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.604550][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.606848][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.625206][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.628117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.648621][ T5942] Bluetooth: hci0: command tx timeout [ 63.656276][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.658839][ T5942] Bluetooth: hci2: command tx timeout [ 63.674299][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.686135][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.694825][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.697233][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.703544][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.705977][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.727142][ T63] Bluetooth: hci3: command tx timeout [ 63.729308][ T5942] Bluetooth: hci1: command tx timeout [ 63.746866][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.793890][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.810588][ T5938] veth0_vlan: entered promiscuous mode [ 63.834922][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.844046][ T5938] veth1_vlan: entered promiscuous mode [ 63.866881][ T5939] veth0_vlan: entered promiscuous mode [ 63.891089][ T5938] veth0_macvtap: entered promiscuous mode [ 63.895446][ T5939] veth1_vlan: entered promiscuous mode [ 63.899280][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.902407][ T5938] veth1_macvtap: entered promiscuous mode [ 63.930858][ T5947] veth0_vlan: entered promiscuous mode [ 63.934866][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.942292][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.952288][ T5947] veth1_vlan: entered promiscuous mode [ 63.961551][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966427][ T5939] veth0_macvtap: entered promiscuous mode [ 63.971746][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.974868][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.982940][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.989681][ T5939] veth1_macvtap: entered promiscuous mode [ 64.009893][ T5947] veth0_macvtap: entered promiscuous mode [ 64.022036][ T5947] veth1_macvtap: entered promiscuous mode [ 64.028954][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.031970][ T5951] veth0_vlan: entered promiscuous mode [ 64.038115][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.049843][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.052658][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.070261][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.073004][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.077682][ T5951] veth1_vlan: entered promiscuous mode [ 64.084456][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.087718][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.088160][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.108042][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.126283][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.129458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.151475][ T5951] veth0_macvtap: entered promiscuous mode [ 64.169266][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172618][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.182058][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.190115][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.190388][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.193053][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.195712][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.201968][ T5951] veth1_macvtap: entered promiscuous mode [ 64.234881][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.238482][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.240890][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.246345][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.275595][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.280597][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.308582][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.329492][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.343196][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.345768][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.350587][ T106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.353581][ T106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.379110][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.386763][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.410786][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5'. [ 64.416606][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.419789][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.550277][ T6048] hpfs: hpfs_map_sector(): read error [ 64.616239][ T6053] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 64.622385][ T6053] Zero length message leads to an empty skb [ 64.916599][ T6070] input: syz0 as /devices/virtual/input/input5 [ 65.473751][ T6089] syz.1.18: attempt to access beyond end of device [ 65.473751][ T6089] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 65.517567][ T6089] gfs2: error -5 reading superblock [ 65.744831][ T5942] Bluetooth: hci2: command tx timeout [ 65.746541][ T5942] Bluetooth: hci0: command tx timeout [ 65.813147][ T63] Bluetooth: hci1: command tx timeout [ 65.813198][ T5942] Bluetooth: hci3: command tx timeout [ 66.023179][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 66.026849][ T6103] sch_tbf: burst 88 is lower than device veth0_to_batadv mtu (1514) ! [ 66.132352][ T6105] mmap: syz.1.22 (6105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.241898][ T6107] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 66.248074][ T6107] xt_hashlimit: size too large, truncated to 1048576 [ 66.248206][ T120] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.253235][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.330229][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 66.937791][ T40] kauditd_printk_skb: 87 callbacks suppressed [ 66.937804][ T40] audit: type=1400 audit(1774409452.241:179): avc: denied { create } for pid=6045 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.951393][ T40] audit: type=1400 audit(1774409452.251:180): avc: denied { setopt } for pid=6045 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.317827][ T40] audit: type=1400 audit(1774409452.621:181): avc: denied { append } for pid=6136 comm="syz.3.29" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.318562][ T6137] dlm: no locking on control device [ 67.331028][ T6138] dlm: no locking on control device [ 67.342960][ T40] audit: type=1400 audit(1774409452.641:182): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.416123][ T40] audit: type=1400 audit(1774409452.711:183): avc: denied { read write } for pid=6141 comm="syz.3.30" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.426390][ T40] audit: type=1400 audit(1774409452.711:184): avc: denied { open } for pid=6141 comm="syz.3.30" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 67.437928][ T40] audit: type=1400 audit(1774409452.731:185): avc: denied { create } for pid=6141 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.448086][ T40] audit: type=1400 audit(1774409452.751:186): avc: denied { setopt } for pid=6141 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.466343][ T40] audit: type=1400 audit(1774409452.751:187): avc: denied { write } for pid=6141 comm="syz.3.30" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.474284][ T40] audit: type=1400 audit(1774409452.751:188): avc: denied { map } for pid=6141 comm="syz.3.30" path="socket:[8090]" dev="sockfs" ino=8090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.572470][ T6149] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 67.575750][ T6149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.764129][ T1145] Bluetooth: hci5: Frame reassembly failed (-84) [ 67.802496][ T6169] overlay: ./file0 is not a directory [ 67.807993][ T5948] Bluetooth: hci2: command tx timeout [ 67.809882][ T5952] Bluetooth: hci0: command tx timeout [ 67.812055][ T6169] overlay: ./file0 is not a directory [ 67.816219][ T6169] overlay: ./file0 is not a directory [ 67.820881][ T6169] overlay: ./file0 is not a directory [ 67.823726][ T6169] overlay: ./file0 is not a directory [ 67.826773][ T6169] overlay: ./file0 is not a directory [ 67.832032][ T6169] overlay: ./file0 is not a directory [ 67.834814][ T6169] overlay: ./file0 is not a directory [ 67.842890][ T6169] overlay: ./file0 is not a directory [ 67.846047][ T6169] overlay: ./file0 is not a directory [ 67.849916][ T6169] overlay: ./file0 is not a directory [ 67.852244][ T6169] overlay: ./file0 is not a directory [ 67.854361][ T6169] overlay: ./file0 is not a directory [ 67.857909][ T6169] overlay: ./file0 is not a directory [ 67.860519][ T6169] overlay: ./file0 is not a directory [ 67.863929][ T6169] overlay: ./file0 is not a directory [ 67.866645][ T6169] overlay: ./file0 is not a directory [ 67.869025][ T6169] overlay: ./file0 is not a directory [ 67.885101][ T6169] overlay: ./file0 is not a directory [ 67.887323][ T5948] Bluetooth: hci3: command tx timeout [ 67.887949][ T6169] overlay: ./file0 is not a directory [ 67.889404][ T5952] Bluetooth: hci1: command tx timeout [ 67.897412][ T6169] overlay: ./file0 is not a directory [ 67.905805][ T6169] overlay: ./file0 is not a directory [ 67.908256][ T6169] overlay: ./file0 is not a directory [ 67.910549][ T6169] overlay: ./file0 is not a directory [ 67.912926][ T6169] overlay: ./file0 is not a directory [ 67.916304][ T6169] overlay: ./file0 is not a directory [ 67.919129][ T6169] overlay: ./file0 is not a directory [ 67.922702][ T6169] overlay: ./file0 is not a directory [ 67.927646][ T6169] overlay: ./file0 is not a directory [ 67.930650][ T6169] overlay: ./file0 is not a directory [ 67.933821][ T6169] overlay: ./file0 is not a directory [ 67.937453][ T6169] overlay: ./file0 is not a directory [ 67.940520][ T6169] overlay: ./file0 is not a directory [ 68.019432][ T6184] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 68.062714][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.067187][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.070835][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.094078][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.116599][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.149319][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.191304][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 68.287660][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.518399][ T6223] FAULT_INJECTION: forcing a failure. [ 68.518399][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.524178][ T6223] CPU: 2 UID: 0 PID: 6223 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(full) [ 68.524202][ T6223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.524212][ T6223] Call Trace: [ 68.524220][ T6223] [ 68.524227][ T6223] dump_stack_lvl+0x100/0x190 [ 68.524261][ T6223] should_fail_ex.cold+0x5/0xa [ 68.524285][ T6223] _copy_from_iter+0x1f4/0x1690 [ 68.524307][ T6223] ? __asan_memset+0x23/0x50 [ 68.524332][ T6223] ? __pfx__copy_from_iter+0x10/0x10 [ 68.524351][ T6223] ? __pfx___alloc_skb+0x10/0x10 [ 68.524408][ T6223] netlink_sendmsg+0x808/0xda0 [ 68.524439][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.524464][ T6223] ? __might_fault+0x20/0x140 [ 68.524496][ T6223] ____sys_sendmsg+0x9e1/0xb70 [ 68.524523][ T6223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.524560][ T6223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.524599][ T6223] ___sys_sendmsg+0x190/0x1e0 [ 68.524619][ T6223] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.524664][ T6223] __sys_sendmsg+0x170/0x220 [ 68.524689][ T6223] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.524727][ T6223] do_syscall_64+0x106/0xf80 [ 68.524752][ T6223] ? clear_bhb_loop+0x40/0x90 [ 68.524774][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.524791][ T6223] RIP: 0033:0x7ff0ee39c799 [ 68.524805][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.524823][ T6223] RSP: 002b:00007ff0ef2cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.524842][ T6223] RAX: ffffffffffffffda RBX: 00007ff0ee616090 RCX: 00007ff0ee39c799 [ 68.524852][ T6223] RDX: 00000000200480d0 RSI: 0000200000006040 RDI: 0000000000000004 [ 68.524862][ T6223] RBP: 00007ff0ef2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 68.524871][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.524882][ T6223] R13: 00007ff0ee616128 R14: 00007ff0ee616090 R15: 00007ffdcfdf4a18 [ 68.524906][ T6223] [ 68.653702][ T6237] ªªªªª: renamed from lo (while UP) [ 68.702294][ T6242] 0·: renamed from hsr0 (while UP) [ 68.709116][ T6242] 0·: entered allmulticast mode [ 68.716251][ T6242] hsr_slave_0: entered allmulticast mode [ 68.720577][ T6242] hsr_slave_1: entered allmulticast mode [ 68.723926][ T6242] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 68.768318][ T6245] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 68.802720][ T6251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.806902][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.821808][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.988246][ T6272] lo: entered allmulticast mode [ 69.067868][ T6276] FAULT_INJECTION: forcing a failure. [ 69.067868][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 69.072993][ T6276] CPU: 3 UID: 0 PID: 6276 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) [ 69.073015][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.073024][ T6276] Call Trace: [ 69.073031][ T6276] [ 69.073037][ T6276] dump_stack_lvl+0x100/0x190 [ 69.073080][ T6276] should_fail_ex.cold+0x5/0xa [ 69.073117][ T6276] should_failslab+0xc2/0x120 [ 69.073138][ T6276] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 69.073163][ T6276] ? skb_clone+0x190/0x400 [ 69.073199][ T6276] skb_clone+0x190/0x400 [ 69.073222][ T6276] netlink_deliver_tap+0xaed/0xcc0 [ 69.073253][ T6276] netlink_unicast+0x650/0x870 [ 69.073283][ T6276] ? __pfx_netlink_unicast+0x10/0x10 [ 69.073317][ T6276] netlink_sendmsg+0x8b0/0xda0 [ 69.073347][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.073370][ T6276] ? __might_fault+0x20/0x140 [ 69.073402][ T6276] ____sys_sendmsg+0x9e1/0xb70 [ 69.073428][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.073455][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.073495][ T6276] ___sys_sendmsg+0x190/0x1e0 [ 69.073515][ T6276] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.073562][ T6276] __sys_sendmsg+0x170/0x220 [ 69.073585][ T6276] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.073623][ T6276] do_syscall_64+0x106/0xf80 [ 69.073652][ T6276] ? clear_bhb_loop+0x40/0x90 [ 69.073674][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.073692][ T6276] RIP: 0033:0x7fea75b9c799 [ 69.073707][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.073722][ T6276] RSP: 002b:00007fea769e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.073744][ T6276] RAX: ffffffffffffffda RBX: 00007fea75e15fa0 RCX: 00007fea75b9c799 [ 69.073755][ T6276] RDX: 00000000200480d0 RSI: 0000200000006040 RDI: 0000000000000004 [ 69.073765][ T6276] RBP: 00007fea769e5090 R08: 0000000000000000 R09: 0000000000000000 [ 69.073778][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.073788][ T6276] R13: 00007fea75e16038 R14: 00007fea75e15fa0 R15: 00007ffd404d41e8 [ 69.073812][ T6276] [ 69.483134][ T6308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.817106][ T5952] Bluetooth: hci5: command 0x1003 tx timeout [ 69.817736][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 69.841989][ T6327] FAULT_INJECTION: forcing a failure. [ 69.841989][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 69.847391][ T6327] CPU: 3 UID: 0 PID: 6327 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 69.847413][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.847422][ T6327] Call Trace: [ 69.847428][ T6327] [ 69.847434][ T6327] dump_stack_lvl+0x100/0x190 [ 69.847467][ T6327] should_fail_ex.cold+0x5/0xa [ 69.847491][ T6327] should_failslab+0xc2/0x120 [ 69.847510][ T6327] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 69.847537][ T6327] ? __alloc_skb+0x140/0x710 [ 69.847563][ T6327] __alloc_skb+0x140/0x710 [ 69.847588][ T6327] ? __alloc_skb+0x5b7/0x710 [ 69.847608][ T6327] ? __pfx___alloc_skb+0x10/0x10 [ 69.847636][ T6327] netlink_ack+0x117/0xb80 [ 69.847685][ T6327] netlink_rcv_skb+0x333/0x420 [ 69.847711][ T6327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.847737][ T6327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.847768][ T6327] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.847795][ T6327] netlink_unicast+0x5aa/0x870 [ 69.847821][ T6327] ? __pfx_netlink_unicast+0x10/0x10 [ 69.847853][ T6327] netlink_sendmsg+0x8b0/0xda0 [ 69.847881][ T6327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.847905][ T6327] ? __might_fault+0x20/0x140 [ 69.847935][ T6327] ____sys_sendmsg+0x9e1/0xb70 [ 69.847961][ T6327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.847987][ T6327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.848025][ T6327] ___sys_sendmsg+0x190/0x1e0 [ 69.848044][ T6327] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.848090][ T6327] __sys_sendmsg+0x170/0x220 [ 69.848114][ T6327] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.848150][ T6327] do_syscall_64+0x106/0xf80 [ 69.848174][ T6327] ? clear_bhb_loop+0x40/0x90 [ 69.848195][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.848212][ T6327] RIP: 0033:0x7f72dab9c799 [ 69.848227][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.848242][ T6327] RSP: 002b:00007f72dba66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.848259][ T6327] RAX: ffffffffffffffda RBX: 00007f72dae15fa0 RCX: 00007f72dab9c799 [ 69.848270][ T6327] RDX: 00000000200480d0 RSI: 0000200000006040 RDI: 0000000000000004 [ 69.848280][ T6327] RBP: 00007f72dba66090 R08: 0000000000000000 R09: 0000000000000000 [ 69.848289][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.848298][ T6327] R13: 00007f72dae16038 R14: 00007f72dae15fa0 R15: 00007ffee528c638 [ 69.848322][ T6327] [ 69.887265][ T63] Bluetooth: hci0: command tx timeout [ 69.887279][ T5952] Bluetooth: hci2: command tx timeout [ 69.916472][ T6339] futex_wake_op: syz.0.77 tries to shift op by -1; fix this program [ 69.956697][ T6339] __nla_validate_parse: 29 callbacks suppressed [ 69.956709][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 69.962973][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'. [ 69.967185][ T5952] Bluetooth: hci1: command tx timeout [ 69.967841][ T63] Bluetooth: hci3: command tx timeout [ 70.040313][ T6353] ======================================================= [ 70.040313][ T6353] WARNING: The mand mount option has been deprecated and [ 70.040313][ T6353] and is ignored by this kernel. Remove the mand [ 70.040313][ T6353] option from the mount to silence this warning. [ 70.040313][ T6353] ======================================================= [ 70.055947][ T6353] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 70.059134][ T6353] netlink: 'syz.3.82': attribute type 2 has an invalid length. [ 70.240191][ T6364] FAULT_INJECTION: forcing a failure. [ 70.240191][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.245273][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 70.245290][ T6364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.245296][ T6364] Call Trace: [ 70.245300][ T6364] [ 70.245305][ T6364] dump_stack_lvl+0x100/0x190 [ 70.245329][ T6364] should_fail_ex.cold+0x5/0xa [ 70.245345][ T6364] _copy_to_user+0x32/0xd0 [ 70.245369][ T6364] simple_read_from_buffer+0xcb/0x170 [ 70.245383][ T6364] proc_fail_nth_read+0x1af/0x230 [ 70.245400][ T6364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.245418][ T6364] ? rw_verify_area+0xce/0x6d0 [ 70.245435][ T6364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.245452][ T6364] vfs_read+0x1e4/0xb30 [ 70.245472][ T6364] ? __pfx_vfs_read+0x10/0x10 [ 70.245489][ T6364] ? __fget_files+0x215/0x3d0 [ 70.245509][ T6364] ? __fget_files+0x21f/0x3d0 [ 70.245525][ T6364] ksys_read+0x12a/0x250 [ 70.245535][ T6364] ? __pfx_ksys_read+0x10/0x10 [ 70.245549][ T6364] do_syscall_64+0x106/0xf80 [ 70.245565][ T6364] ? clear_bhb_loop+0x40/0x90 [ 70.245580][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.245592][ T6364] RIP: 0033:0x7f72dab5cfce [ 70.245602][ T6364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.245613][ T6364] RSP: 002b:00007f72dba44fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.245624][ T6364] RAX: ffffffffffffffda RBX: 00007f72dba456c0 RCX: 00007f72dab5cfce [ 70.245631][ T6364] RDX: 000000000000000f RSI: 00007f72dba450a0 RDI: 0000000000000005 [ 70.245638][ T6364] RBP: 00007f72dba45090 R08: 0000000000000000 R09: 0000000000000000 [ 70.245644][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.245650][ T6364] R13: 00007f72dae16128 R14: 00007f72dae16090 R15: 00007ffee528c638 [ 70.245665][ T6364] [ 70.406114][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.485022][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.544455][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.551151][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.554131][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.559431][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.562021][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.608938][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.700831][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 70.759721][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.789650][ T6401] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 70.803152][ T6401] netlink: 156 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.808145][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.813323][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.816320][ T6401] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 70.821134][ T6380] bridge_slave_0: entered allmulticast mode [ 70.823986][ T6380] bridge_slave_0: entered promiscuous mode [ 70.827380][ T6401] netlink: 156 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.830724][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.836870][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.843515][ T6380] bridge_slave_1: entered allmulticast mode [ 70.846490][ T6380] bridge_slave_1: entered promiscuous mode [ 70.869222][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.886360][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.928146][ T6380] team0: Port device team_slave_0 added [ 70.940105][ T13] bridge_slave_1: left allmulticast mode [ 70.942118][ T13] bridge_slave_1: left promiscuous mode [ 70.944951][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.952202][ T13] bridge_slave_0: left allmulticast mode [ 70.954055][ T13] bridge_slave_0: left promiscuous mode [ 70.955985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.217355][ T6006] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 71.233168][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.247580][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.252299][ T13] bond0 (unregistering): Released all slaves [ 71.254761][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 71.259875][ T6380] team0: Port device team_slave_1 added [ 71.279097][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 71.295691][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.298746][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.306931][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.312151][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.314405][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.337718][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.378777][ T6380] hsr_slave_0: entered promiscuous mode [ 71.383680][ T6380] hsr_slave_1: entered promiscuous mode [ 71.386095][ T6380] debugfs: 'hsr0' already exists in 'hsr' [ 71.389519][ T6380] Cannot create hsr debugfs directory [ 71.393319][ T106] tipc: Subscription rejected, illegal request [ 71.397602][ T6444] capability: warning: `syz.0.106' uses 32-bit capabilities (legacy support in use) [ 71.405636][ T6446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.479595][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 71.574058][ T6461] i2c i2c-1: dtv_property_process_set: SET cmd 0xd45e5620 undefined [ 71.620455][ T6470] netlink: 512 bytes leftover after parsing attributes in process `syz.0.113'. [ 71.673620][ T6380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.699215][ T6380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.712865][ T6380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.749952][ T13] hsr_slave_0: left promiscuous mode [ 71.752486][ T13] hsr_slave_1: left promiscuous mode [ 71.755582][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.758458][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.761854][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.764148][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.790692][ T13] veth1_macvtap: left promiscuous mode [ 71.792617][ T13] veth0_macvtap: left promiscuous mode [ 71.794899][ T13] veth1_vlan: left promiscuous mode [ 71.802735][ T13] veth0_vlan: left promiscuous mode [ 71.959695][ T13] team0 (unregistering): Port device team_slave_1 removed [ 71.967640][ T13] team0 (unregistering): Port device team_slave_0 removed [ 72.004140][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 72.004152][ T40] audit: type=1400 audit(1774409457.301:306): avc: denied { map } for pid=6517 comm="syz.1.125" path="socket:[9188]" dev="sockfs" ino=9188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.015210][ T40] audit: type=1400 audit(1774409457.301:307): avc: denied { read } for pid=6517 comm="syz.1.125" path="socket:[9188]" dev="sockfs" ino=9188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.022329][ T40] audit: type=1400 audit(1774409457.301:308): avc: denied { create } for pid=6517 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.032844][ T40] audit: type=1400 audit(1774409457.311:309): avc: denied { getopt } for pid=6517 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.044425][ T6380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.109065][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.117667][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.141189][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.143465][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.150867][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.153261][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.157939][ T40] audit: type=1400 audit(1774409457.461:310): avc: denied { create } for pid=6529 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.174122][ T6380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.177087][ T40] audit: type=1400 audit(1774409457.461:311): avc: denied { read } for pid=6529 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.177963][ T6380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.206655][ T40] audit: type=1400 audit(1774409457.501:312): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.293535][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.309764][ T40] audit: type=1400 audit(1774409457.611:313): avc: denied { listen } for pid=6549 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.442501][ T40] audit: type=1400 audit(1774409457.741:314): avc: denied { name_bind } for pid=6566 comm="syz.2.131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.457822][ T40] audit: type=1400 audit(1774409457.741:315): avc: denied { node_bind } for pid=6566 comm="syz.2.131" saddr=::ffff:0.0.0.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.493932][ T6380] veth0_vlan: entered promiscuous mode [ 72.505189][ T6380] veth1_vlan: entered promiscuous mode [ 72.512387][ T6575] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 72.532055][ T6380] veth0_macvtap: entered promiscuous mode [ 72.534873][ T6575] block device autoloading is deprecated and will be removed. [ 72.536486][ T6380] veth1_macvtap: entered promiscuous mode [ 72.545882][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.553026][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.566116][ T106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.583861][ T106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.609802][ T5952] Bluetooth: hci0: command tx timeout [ 72.611794][ T6582] sctp: [Deprecated]: syz.0.135 (pid 6582) Use of int in maxseg socket option. [ 72.611794][ T6582] Use struct sctp_assoc_value instead [ 72.622906][ T106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.626405][ T106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663327][ T6584] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 72.717106][ T120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.719541][ T120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.746424][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.749800][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.875168][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 72.879375][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 72.899022][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.901839][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.905590][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.912741][ T6600] netlink: 'syz.4.139': attribute type 21 has an invalid length. [ 72.916253][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.916791][ T6600] overlayfs: missing 'workdir' [ 73.080031][ T6608] team0: Port device team_slave_0 removed [ 73.192812][ T6624] netlink: 'syz.1.145': attribute type 3 has an invalid length. [ 73.195945][ T6624] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 73.225187][ T6633] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 73.225187][ T6633] program syz.1.146 not setting count and/or reply_len properly [ 73.288542][ T6638] netlink: 'syz.2.148': attribute type 21 has an invalid length. [ 73.289012][ T6639] netlink: 'syz.2.148': attribute type 21 has an invalid length. [ 73.291079][ T6638] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.655907][ T6671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21803 sclass=netlink_route_socket pid=6671 comm=syz.1.155 [ 73.769184][ T6692] bridge1: entered promiscuous mode [ 73.771094][ T6692] bridge1: entered allmulticast mode [ 73.856234][ T6703] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.941384][ T6713] process 'syz.4.160' launched '/dev/fd/4' with NULL argv: empty string added [ 74.687313][ T5952] Bluetooth: hci0: command tx timeout [ 76.289892][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.292102][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.534429][ T6668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.629313][ T6783] __nla_validate_parse: 12 callbacks suppressed [ 76.629317][ T6781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.172'. [ 76.629329][ T6783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.172'. [ 76.631441][ T6784] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 76.642950][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.172'. [ 76.777237][ T5952] Bluetooth: hci0: command tx timeout [ 76.806346][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.903909][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 76.907886][ T6805] openvswitch: netlink: Flow actions attr not present in new flow. [ 77.024824][ T6829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.185'. [ 77.029498][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.032619][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.039426][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 77.039436][ T40] audit: type=1400 audit(1774409462.341:352): avc: denied { write } for pid=6828 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.049658][ T40] audit: type=1400 audit(1774409462.351:353): avc: denied { mount } for pid=6830 comm="syz.0.186" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.181640][ T40] audit: type=1400 audit(1774409462.481:354): avc: denied { create } for pid=6835 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.216378][ T40] audit: type=1400 audit(1774409462.481:355): avc: denied { ioctl } for pid=6835 comm="syz.0.188" path="socket:[10232]" dev="sockfs" ino=10232 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.233204][ T40] audit: type=1400 audit(1774409462.491:356): avc: denied { connect } for pid=6833 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.239894][ T40] audit: type=1400 audit(1774409462.531:357): avc: denied { read } for pid=6842 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.258096][ T40] audit: type=1400 audit(1774409462.561:358): avc: denied { read } for pid=6844 comm="syz.1.190" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.265433][ T40] audit: type=1400 audit(1774409462.561:359): avc: denied { open } for pid=6844 comm="syz.1.190" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.273839][ T40] audit: type=1400 audit(1774409462.561:360): avc: denied { ioctl } for pid=6844 comm="syz.1.190" path="socket:[12227]" dev="sockfs" ino=12227 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.282626][ T40] audit: type=1400 audit(1774409462.561:361): avc: denied { ioctl } for pid=6844 comm="syz.1.190" path="socket:[12231]" dev="sockfs" ino=12231 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.326371][ T6859] netlink: 348 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.331952][ T6859] netlink: 348 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.332987][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.344088][ T6864] dlm: no locking on control device [ 77.351661][ T6859] netlink: 348 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.353403][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.197'. [ 77.390968][ T6873] /dev/sg0: Can't lookup blockdev [ 77.414131][ T6878] loop6: detected capacity change from 0 to 2640 [ 77.488949][ T6878] loop6: detected capacity change from 2640 to 524287999 [ 77.491614][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.494499][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.499197][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.501720][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.504092][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.506638][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.510154][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.512703][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.515167][ T6358] ldm_validate_partition_table(): Disk read failed. [ 77.517316][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.520348][ T6358] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.523224][ T6358] Dev loop6: unable to read RDB block 0 [ 77.525103][ T6358] loop6: unable to read partition table [ 77.534261][ T6878] ldm_validate_partition_table(): Disk read failed. [ 77.536478][ T6878] Dev loop6: unable to read RDB block 0 [ 77.538999][ T6878] loop6: unable to read partition table [ 77.543825][ T6878] loop_reread_partitions: partition scan of loop6 (ážXHuù£¨ÃÒJíˆý[¼d‚¾wÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5) [ 77.672968][ T6897] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 77.709886][ T6901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6901 comm=syz.2.208 [ 77.718345][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.878418][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 77.882266][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.887335][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.891475][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.894614][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.898566][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.901683][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.905251][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.909382][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.913083][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.916821][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.924101][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.928613][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.935081][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.939616][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.944590][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.949201][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 77.954892][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 77.959291][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 77.963084][ T9] usb 5-1: Product: syz [ 77.964939][ T9] usb 5-1: Manufacturer: syz [ 77.966882][ T9] usb 5-1: SerialNumber: syz [ 77.978198][ T9] usb 5-1: config 0 descriptor?? [ 78.066466][ T6937] can: request_module (can-proto-0) failed. [ 78.177164][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.185111][ T6891] warning: `syz.0.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.190910][ T9] usb 5-1: USB disconnect, device number 2 [ 78.327262][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 78.330398][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.333638][ T34] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.338119][ T34] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 78.341064][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.343859][ T34] usb 7-1: Product: syz [ 78.345596][ T34] usb 7-1: Manufacturer: syz [ 78.347371][ T34] usb 7-1: SerialNumber: syz [ 78.350676][ T34] usb 7-1: config 0 descriptor?? [ 78.586262][ T6963] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 78.586762][ T34] usb 7-1: USB disconnect, device number 2 [ 78.848493][ T5952] Bluetooth: hci0: command tx timeout [ 79.074015][ T6993] trusted_key: syz.1.237 sent an empty control message without MSG_MORE. [ 79.131822][ T6996] syzkaller1: entered promiscuous mode [ 79.133648][ T6996] syzkaller1: entered allmulticast mode [ 79.289496][ T7007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=7007 comm=syz.2.242 [ 79.594961][ T7032] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 79.960930][ T7044] x_tables: duplicate underflow at hook 2 [ 80.016277][ T7063] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 80.018886][ T7063] netlink: 'syz.4.258': attribute type 3 has an invalid length. [ 80.024626][ T7063] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 80.027495][ T7063] netlink: 'syz.4.258': attribute type 3 has an invalid length. [ 80.320607][ T7076] overlayfs: missing 'lowerdir' [ 80.443347][ T7084] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 80.443347][ T7084] program syz.1.264 not setting count and/or reply_len properly [ 80.706842][ T7107] tipc: Started in network mode [ 80.708841][ T7107] tipc: Node identity 7f000001, cluster identity 4711 [ 80.711433][ T7107] tipc: Enabling of bearer rejected, failed to enable media [ 80.723780][ T7107] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 80.726919][ T7107] tipc: Enabled bearer , priority 10 [ 80.771829][ T7112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 80.773969][ T7112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.778946][ T7112] vhci_hcd vhci_hcd.0: Device attached [ 80.783125][ T7113] vhci_hcd: connection closed [ 80.783605][ T120] vhci_hcd vhci_hcd.4: stop threads [ 80.788321][ T120] vhci_hcd vhci_hcd.4: release socket [ 80.790293][ T120] vhci_hcd vhci_hcd.4: disconnect device [ 80.806278][ T7116] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 80.811010][ T7116] exFAT-fs (nullb0): invalid boot record signature [ 80.813053][ T7116] exFAT-fs (nullb0): failed to read boot sector [ 80.815027][ T7116] exFAT-fs (nullb0): failed to recognize exfat type [ 81.487567][ T7173] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.718984][ T39] tipc: Node number set to 2130706433 [ 81.817274][ T6006] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.824261][ T7186] __nla_validate_parse: 74 callbacks suppressed [ 81.824273][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 81.998608][ T6006] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.001384][ T6006] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 82.004624][ T6006] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.005727][ T7196] io-wq is not configured for unbound workers [ 82.007611][ T6006] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.013523][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 82.017256][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.021767][ T6006] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.024658][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.028196][ T6006] usb 9-1: Product: syz [ 82.029575][ T6006] usb 9-1: Manufacturer: syz [ 82.034516][ T7175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.043944][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 82.045634][ T6006] cdc_wdm 9-1:1.0: skipping garbage [ 82.051250][ T6006] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 82.053156][ T6006] cdc_wdm 9-1:1.0: Unknown control protocol [ 82.129047][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 82.129059][ T40] audit: type=1400 audit(1774409467.431:476): avc: denied { getopt } for pid=7203 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.168905][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 82.218699][ T7212] mkiss: ax0: crc mode is auto. [ 82.250083][ T40] audit: type=1400 audit(1774409467.551:477): avc: denied { read write } for pid=7174 comm="syz.4.290" name="cdc-wdm0" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 82.251005][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.259053][ T40] audit: type=1400 audit(1774409467.551:478): avc: denied { open } for pid=7174 comm="syz.4.290" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 82.260998][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.271294][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.273437][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.275493][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.277572][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.280112][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.282251][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.284332][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.286550][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.288809][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.290955][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.292974][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.295049][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.297133][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.299221][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.301273][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.303400][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.305560][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 82.307539][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 82.318717][ T40] audit: type=1400 audit(1774409467.621:479): avc: denied { create } for pid=7174 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.337142][ T40] audit: type=1400 audit(1774409467.621:480): avc: denied { getopt } for pid=7174 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.343400][ T40] audit: type=1400 audit(1774409467.621:481): avc: denied { create } for pid=7174 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.352986][ T40] audit: type=1400 audit(1774409467.621:482): avc: denied { getopt } for pid=7174 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.367968][ T40] audit: type=1326 audit(1774409467.671:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7215 comm="syz.2.301" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea75b9c799 code=0x0 [ 82.391423][ T6006] usb 9-1: USB disconnect, device number 2 [ 82.448038][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.450752][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.453654][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.456301][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.456419][ T7233] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.460750][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.460816][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.460832][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.470829][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'. [ 82.552829][ T7244] veth1_macvtap: left promiscuous mode [ 82.554718][ T7244] macsec0: entered allmulticast mode [ 82.559901][ T7243] veth1_macvtap: entered promiscuous mode [ 82.562138][ T7243] veth1_macvtap: entered allmulticast mode [ 82.566415][ T7243] macsec0: left allmulticast mode [ 82.568241][ T7243] veth1_macvtap: left allmulticast mode [ 82.589476][ T7247] futex_wake_op: syz.2.309 tries to shift op by -1; fix this program [ 82.676985][ T40] audit: type=1400 audit(1774409467.971:484): avc: denied { append } for pid=7257 comm="syz.2.312" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.852833][ T7273] netlink: 'syz.1.317': attribute type 30 has an invalid length. [ 82.881405][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.884735][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.921062][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.924633][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.054063][ T7297] netlink: 'syz.1.323': attribute type 9 has an invalid length. [ 83.068679][ T7298] netlink: 'syz.1.323': attribute type 9 has an invalid length. [ 83.197090][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.246744][ T40] audit: type=1400 audit(1774409468.541:485): avc: denied { read } for pid=7312 comm="syz.1.329" path="socket:[15975]" dev="sockfs" ino=15975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.371898][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.375765][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.379453][ T9] usb 7-1: Product: syz [ 83.381209][ T9] usb 7-1: Manufacturer: syz [ 83.383132][ T9] usb 7-1: SerialNumber: syz [ 83.390657][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.425030][ T6005] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.869831][ T9] usb 7-1: USB disconnect, device number 3 [ 84.211749][ T7322] bond1: option downdelay: invalid value (18446744073709551615) [ 84.214931][ T7322] bond1: option downdelay: allowed values 0 - 2147483647 [ 84.224903][ T7322] bond1 (unregistering): Released all slaves [ 84.248509][ T7324] Bluetooth: MGMT ver 1.23 [ 84.583381][ T7351] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 84.687417][ T6005] usb 7-1: Service connection timeout for: 256 [ 84.689718][ T6005] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 84.693130][ T6005] ath9k_htc: Failed to initialize the device [ 84.697515][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 84.987185][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.004880][ T7372] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 85.137523][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 85.141713][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 85.145395][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.163438][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 85.166724][ T9] pvrusb2: ********** [ 85.168918][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 85.173230][ T9] pvrusb2: Important functionality might not be entirely working. [ 85.176457][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 85.181387][ T9] pvrusb2: ********** [ 85.311861][ T7390] capability: warning: `syz.1.351' uses deprecated v2 capabilities in a way that may be insecure [ 85.366506][ T2493] pvrusb2: Invalid write control endpoint [ 85.369167][ T9] usb 7-1: USB disconnect, device number 4 [ 85.387955][ T7343] pvrusb2: Invalid write control endpoint [ 85.420418][ T2493] pvrusb2: Invalid write control endpoint [ 85.422319][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 85.425196][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 85.431276][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 85.434385][ T2493] pvrusb2: Device being rendered inoperable [ 85.439240][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 85.442190][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 85.446576][ T2493] pvrusb2: Attached sub-driver cx25840 [ 85.448642][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 85.451761][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 85.986331][ T7419] overlay: Bad value for 'workdir' [ 86.149198][ T7423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7423 comm=syz.4.356 [ 86.206472][ T7431] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.287108][ T5952] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.287464][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.549845][ T10] cfg80211: failed to load regulatory.db [ 87.163465][ T7463] __nla_validate_parse: 9 callbacks suppressed [ 87.163478][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.169403][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.172727][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.175630][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.210676][ T7469] openvswitch: netlink: Message has 4 unknown bytes. [ 87.212979][ T7469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.300375][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 87.303827][ T7480] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 87.303827][ T7480] program syz.1.374 not setting count and/or reply_len properly [ 87.310031][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 87.310043][ T40] audit: type=1400 audit(1774409472.611:507): avc: denied { read } for pid=7477 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.370557][ T40] audit: type=1400 audit(1774409472.671:508): avc: denied { shutdown } for pid=7489 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.379824][ T40] audit: type=1400 audit(1774409472.671:509): avc: denied { setopt } for pid=7489 comm="syz.2.378" lport=38645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.387287][ T40] audit: type=1400 audit(1774409472.681:510): avc: denied { bind } for pid=7487 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.452167][ T40] audit: type=1400 audit(1774409472.751:511): avc: denied { write } for pid=7487 comm="syz.4.376" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.594497][ T7498] binder: 7496:7498 ioctl c0306201 200000000640 returned -22 [ 87.677766][ T40] audit: type=1400 audit(1774409472.971:512): avc: denied { setopt } for pid=7511 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.691291][ T40] audit: type=1400 audit(1774409472.991:513): avc: denied { read } for pid=7511 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.742775][ T40] audit: type=1400 audit(1774409473.041:514): avc: denied { ioctl } for pid=7511 comm="syz.4.382" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.815101][ T40] audit: type=1400 audit(1774409473.111:515): avc: denied { remount } for pid=7521 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.143356][ T7529] No control pipe specified [ 88.189243][ T7529] mkiss: ax0: crc mode is auto. [ 88.266617][ T40] audit: type=1400 audit(1774409473.561:516): avc: denied { create } for pid=7531 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.358744][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 88.383483][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 88.427160][ T7550] netlink: 180 bytes leftover after parsing attributes in process `syz.2.394'. [ 88.428371][ T7555] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 88.430352][ T7550] netlink: 180 bytes leftover after parsing attributes in process `syz.2.394'. [ 88.436756][ T7550] netlink: 180 bytes leftover after parsing attributes in process `syz.2.394'. [ 88.521362][ T6023] IPVS: starting estimator thread 0... [ 88.556315][ T7566] xt_nat: multiple ranges no longer supported [ 88.572526][ T7570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7570 comm=syz.2.401 [ 88.605870][ T7574] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 88.619321][ T7574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.629355][ T7563] IPVS: using max 42 ests per chain, 100800 per kthread [ 88.669077][ T7574] bond1: (slave veth3): Enslaving as an active interface with a down link [ 88.678367][ T7574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7574 comm=syz.1.403 [ 88.692906][ T7574] bond1: (slave dummy0): making interface the new active one [ 88.697235][ T7574] dummy0: entered promiscuous mode [ 88.699803][ T7574] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 88.705385][ T7574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7574 comm=syz.1.403 [ 88.706049][ T7579] tc_dump_action: action bad kind [ 88.994786][ T7604] pim6reg: entered allmulticast mode [ 89.079125][ T7611] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 89.182102][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.185267][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.537638][ T7652] kvm: emulating exchange as write [ 89.876669][ T7666] efs: device does not support 512 byte blocks [ 89.880010][ T7666] device does not support 512 byte blocks [ 89.880010][ T7666] [ 90.202614][ T7675] nvme_fabrics: missing parameter 'transport=%s' [ 90.204903][ T7675] nvme_fabrics: missing parameter 'nqn=%s' [ 90.333480][ T7681] bond2: entered promiscuous mode [ 90.335378][ T7681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.349539][ T7681] bond3: entered promiscuous mode [ 90.351539][ T7681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.363367][ T7681] bond4: entered promiscuous mode [ 90.365284][ T7681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.378734][ T7681] bond5: entered promiscuous mode [ 90.380670][ T7681] 8021q: adding VLAN 0 to HW filter on device bond5 [ 90.393118][ T7681] bond6: entered promiscuous mode [ 90.395073][ T7681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 90.406661][ T7681] bond7: entered promiscuous mode [ 90.408724][ T7681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 90.420110][ T7681] bond8: entered promiscuous mode [ 90.422098][ T7681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 90.434686][ T7681] bond9: entered promiscuous mode [ 90.436643][ T7681] 8021q: adding VLAN 0 to HW filter on device bond9 [ 90.450664][ T7681] bond10: entered promiscuous mode [ 90.452696][ T7681] 8021q: adding VLAN 0 to HW filter on device bond10 [ 90.464184][ T7681] bond11: entered promiscuous mode [ 90.466253][ T7681] 8021q: adding VLAN 0 to HW filter on device bond11 [ 90.477420][ T7681] bond12: entered promiscuous mode [ 90.480073][ T7681] 8021q: adding VLAN 0 to HW filter on device bond12 [ 90.492044][ T7681] bond13: entered promiscuous mode [ 90.493847][ T7681] 8021q: adding VLAN 0 to HW filter on device bond13 [ 90.505561][ T7681] bond14: entered promiscuous mode [ 90.507472][ T7681] 8021q: adding VLAN 0 to HW filter on device bond14 [ 90.518435][ T7681] bond15: entered promiscuous mode [ 90.520347][ T7681] 8021q: adding VLAN 0 to HW filter on device bond15 [ 90.532398][ T7681] bond16: entered promiscuous mode [ 90.534276][ T7681] 8021q: adding VLAN 0 to HW filter on device bond16 [ 90.545112][ T7681] bond17: entered promiscuous mode [ 90.546992][ T7681] 8021q: adding VLAN 0 to HW filter on device bond17 [ 90.557933][ T7681] bond18: entered promiscuous mode [ 90.559770][ T7681] 8021q: adding VLAN 0 to HW filter on device bond18 [ 90.571387][ T7681] bond19: entered promiscuous mode [ 90.573592][ T7681] 8021q: adding VLAN 0 to HW filter on device bond19 [ 90.584747][ T7681] bond20: entered promiscuous mode [ 90.586646][ T7681] 8021q: adding VLAN 0 to HW filter on device bond20 [ 90.598311][ T7681] bond21: entered promiscuous mode [ 90.600253][ T7681] 8021q: adding VLAN 0 to HW filter on device bond21 [ 90.612022][ T7681] bond22: entered promiscuous mode [ 90.614044][ T7681] 8021q: adding VLAN 0 to HW filter on device bond22 [ 90.625989][ T7681] bond23: entered promiscuous mode [ 90.628011][ T7681] 8021q: adding VLAN 0 to HW filter on device bond23 [ 90.640032][ T7681] bond24: entered promiscuous mode [ 90.642084][ T7681] 8021q: adding VLAN 0 to HW filter on device bond24 [ 90.653878][ T7681] bond25: entered promiscuous mode [ 90.656336][ T7681] 8021q: adding VLAN 0 to HW filter on device bond25 [ 90.668846][ T7681] bond26: entered promiscuous mode [ 90.670939][ T7681] 8021q: adding VLAN 0 to HW filter on device bond26 [ 90.683184][ T7681] bond27: entered promiscuous mode [ 90.685678][ T7681] 8021q: adding VLAN 0 to HW filter on device bond27 [ 90.696744][ T7681] bond28: entered promiscuous mode [ 90.698715][ T7681] 8021q: adding VLAN 0 to HW filter on device bond28 [ 90.735750][ T7681] bond29: entered promiscuous mode [ 90.737761][ T7681] 8021q: adding VLAN 0 to HW filter on device bond29 [ 90.749263][ T7681] bond30: entered promiscuous mode [ 90.751285][ T7681] 8021q: adding VLAN 0 to HW filter on device bond30 [ 90.762965][ T7681] bond31: entered promiscuous mode [ 90.765220][ T7681] 8021q: adding VLAN 0 to HW filter on device bond31 [ 90.776954][ T7681] bond32: entered promiscuous mode [ 90.779059][ T7681] 8021q: adding VLAN 0 to HW filter on device bond32 [ 90.790696][ T7681] bond33: entered promiscuous mode [ 90.792614][ T7681] 8021q: adding VLAN 0 to HW filter on device bond33 [ 90.803578][ T7681] bond34: entered promiscuous mode [ 90.805576][ T7681] 8021q: adding VLAN 0 to HW filter on device bond34 [ 90.957614][ T6023] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 91.078081][ T7724] loop3: detected capacity change from 0 to 524287999 [ 91.792996][ T7732] overlayfs: failed to resolve './file2': -2 [ 91.841800][ T7734] IPVS: length: 18 != 8 [ 91.906249][ T7737] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 92.004472][ T7744] dummy0: entered allmulticast mode [ 92.072335][ T7751] tmpfs: Bad value for 'mpol' [ 92.221128][ T7773] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 92.241406][ T7773] bond1: entered promiscuous mode [ 92.243788][ T7773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.257599][ T7773] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.262645][ T7773] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 92.267010][ T7773] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 92.375845][ T7778] __nla_validate_parse: 67 callbacks suppressed [ 92.375862][ T7778] netlink: 830 bytes leftover after parsing attributes in process `syz.2.460'. [ 92.728851][ C3] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 92.733312][ C3] sr 2:0:0:0: [sr0] tag#23 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 92.773802][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'. [ 92.782421][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 92.782443][ T40] audit: type=1400 audit(1774409478.081:541): avc: denied { create } for pid=7795 comm="syz.2.469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.794847][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 92.805440][ T40] audit: type=1400 audit(1774409478.101:542): avc: denied { watch watch_reads } for pid=7797 comm="syz.1.468" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 92.815049][ T40] audit: type=1400 audit(1774409478.111:543): avc: denied { map } for pid=7797 comm="syz.1.468" path="socket:[18632]" dev="sockfs" ino=18632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.817253][ T7798] IPv4: Oversized IP packet from 172.20.20.24 [ 92.826640][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 92.829260][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 92.893427][ T40] audit: type=1400 audit(1774409478.191:544): avc: denied { ioctl } for pid=7801 comm="syz.1.471" path="socket:[18638]" dev="sockfs" ino=18638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.979270][ T7812] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 93.010546][ T40] audit: type=1400 audit(1774409478.311:545): avc: denied { create } for pid=7815 comm="syz.4.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.034021][ T7818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8633 sclass=netlink_route_socket pid=7818 comm=syz.1.478 [ 93.083116][ T7820] random: crng reseeded on system resumption [ 93.088050][ T40] audit: type=1400 audit(1774409478.381:546): avc: denied { write } for pid=7819 comm="syz.4.479" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.091954][ T7823] program syz.2.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.096987][ T40] audit: type=1400 audit(1774409478.381:547): avc: denied { open } for pid=7819 comm="syz.4.479" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.113803][ T40] audit: type=1400 audit(1774409478.411:548): avc: denied { ioctl } for pid=7819 comm="syz.4.479" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.137567][ T7824] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.141090][ T7824] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 93.302610][ T40] audit: type=1400 audit(1774409478.601:549): avc: denied { setopt } for pid=7835 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.482365][ T40] audit: type=1400 audit(1774409478.781:550): avc: denied { mount } for pid=7844 comm="syz.4.490" name="/" dev="autofs" ino=20560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 93.580606][ T7860] netlink: 104 bytes leftover after parsing attributes in process `syz.2.497'. [ 93.604086][ T7860] gretap1: entered promiscuous mode [ 93.606544][ T7860] batman_adv: batadv0: Adding interface: gretap1 [ 93.608824][ T7860] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 93.611097][ T7863] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 93.615264][ T7860] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 93.632049][ T7864] netlink: 'syz.1.496': attribute type 27 has an invalid length. [ 93.655499][ T7863] bond1: entered promiscuous mode [ 93.658609][ T7863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.694356][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.697910][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.724900][ T7871] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 93.754818][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.761448][ T7864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.818609][ T7864] bridge1: left promiscuous mode [ 93.820301][ T7864] bridge1: left allmulticast mode [ 93.828660][ T7864] bond2: left promiscuous mode [ 93.830921][ T7864] bond3: left promiscuous mode [ 93.833024][ T7864] bond4: left promiscuous mode [ 93.835145][ T7864] bond5: left promiscuous mode [ 93.842328][ T7864] bond6: left promiscuous mode [ 93.845128][ T7864] bond7: left promiscuous mode [ 93.847664][ T7864] bond8: left promiscuous mode [ 93.850047][ T7864] bond9: left promiscuous mode [ 93.852578][ T7864] bond10: left promiscuous mode [ 93.855378][ T7864] bond11: left promiscuous mode [ 93.861152][ T7864] bond12: left promiscuous mode [ 93.864185][ T7864] bond13: left promiscuous mode [ 93.866506][ T7864] bond14: left promiscuous mode [ 93.870896][ T7864] bond15: left promiscuous mode [ 93.874171][ T7864] bond16: left promiscuous mode [ 93.877600][ T7864] bond17: left promiscuous mode [ 93.880703][ T7864] bond18: left promiscuous mode [ 93.883531][ T7864] bond19: left promiscuous mode [ 93.885651][ T7864] bond20: left promiscuous mode [ 93.889935][ T7864] bond21: left promiscuous mode [ 93.893089][ T7864] bond22: left promiscuous mode [ 93.895953][ T7864] bond23: left promiscuous mode [ 93.900186][ T7864] bond24: left promiscuous mode [ 93.903310][ T7864] bond25: left promiscuous mode [ 93.906437][ T7864] bond26: left promiscuous mode [ 93.909631][ T7864] bond27: left promiscuous mode [ 93.912274][ T7864] bond28: left promiscuous mode [ 93.915200][ T7864] bond29: left promiscuous mode [ 93.918357][ T7864] bond30: left promiscuous mode [ 93.920515][ T7864] bond31: left promiscuous mode [ 93.923052][ T7864] bond32: left promiscuous mode [ 93.926007][ T7864] bond33: left promiscuous mode [ 93.928444][ T7864] bond34: left promiscuous mode [ 93.935823][ T7863] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 93.942051][ T7863] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 93.946205][ T7863] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 93.958800][ T7764] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.962189][ T7764] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.965312][ T7764] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.968750][ T7764] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.971980][ T7764] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.979459][ T7764] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.982438][ T7764] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.985277][ T7764] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.195376][ T7899] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.249275][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 94.253142][ T7902] netlink: 84 bytes leftover after parsing attributes in process `syz.1.508'. [ 94.417881][ T7908] binder: 7907:7908 ioctl 1 200000001480 returned -22 [ 94.424403][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 94.599213][ T7927] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 94.626707][ T7931] xt_cluster: node mask cannot exceed total number of nodes [ 94.891973][ T7947] loop9: detected capacity change from 0 to 7 [ 94.920057][ T7952] Cannot find add_set index 0 as target [ 94.922908][ T7947] Dev loop9: unable to read RDB block 7 [ 94.924744][ T7947] loop9: unable to read partition table [ 94.926737][ T7947] loop9: partition table beyond EOD, truncated [ 94.927506][ T63] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 94.938014][ T7947] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 95.032400][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 95.036726][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 95.039693][ T7972] ata1.00: invalid multi_count 128 ignored [ 95.047972][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 95.166950][ T1145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.171605][ T1145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.174873][ T1145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.178421][ T1145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.324850][ T7991] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 95.513120][ T7997] loop6: detected capacity change from 0 to 524288000 [ 95.641464][ T8005] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 95.678014][ T8011] libceph: resolve '0' (ret=-3): failed [ 95.693903][ T8011] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.369936][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.372968][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.376646][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.382252][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.382360][ T5948] Bluetooth: hci3: adv larger than maximum supported [ 96.384981][ T5948] Bluetooth: hci3: Malformed LE Event: 0x0d [ 96.386323][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.386657][ T8036] (syz.2.550,8036,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 96.637723][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 96.704234][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.706549][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.710088][ T8037] bridge_slave_0: entered allmulticast mode [ 96.712793][ T8037] bridge_slave_0: entered promiscuous mode [ 96.716574][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.719363][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.722490][ T8037] bridge_slave_1: entered allmulticast mode [ 96.726739][ T8037] bridge_slave_1: entered promiscuous mode [ 96.766972][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.771414][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.784329][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.791993][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.814842][ T8037] team0: Port device team_slave_0 added [ 96.819634][ T8037] team0: Port device team_slave_1 added [ 96.840182][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.842414][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.847609][ T5952] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 96.850334][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.853843][ T5952] Bluetooth: hci3: Injecting HCI hardware error event [ 96.869258][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.873590][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.881408][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.883631][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.891788][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.923012][ T8037] hsr_slave_0: entered promiscuous mode [ 96.925282][ T8037] hsr_slave_1: entered promiscuous mode [ 96.957933][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.961413][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.022142][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.025616][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.070546][ T8037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.075052][ T8037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.081951][ T8037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.088239][ T8037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.156383][ T8082] xt_TCPMSS: Only works on TCP SYN packets [ 97.167272][ T5952] Bluetooth: hci3: command 0x206a tx timeout [ 97.167323][ T63] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 97.172644][ T63] Bluetooth: hci3: hardware error 0x00 [ 97.179252][ T13] bridge_slave_1: left allmulticast mode [ 97.182755][ T13] bridge_slave_1: left promiscuous mode [ 97.187746][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.192246][ T13] bridge_slave_0: left allmulticast mode [ 97.194121][ T13] bridge_slave_0: left promiscuous mode [ 97.196090][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.402170][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.406458][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.412281][ T13] bond0 (unregistering): Released all slaves [ 97.417980][ T13] bond1 (unregistering): Released all slaves [ 97.440572][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.450395][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.455889][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.458255][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.465255][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.467575][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.586965][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.708710][ T13] hsr_slave_0: left promiscuous mode [ 97.713462][ T13] hsr_slave_1: left promiscuous mode [ 97.715824][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.719086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.729740][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.732350][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.752666][ T13] veth1_macvtap: left promiscuous mode [ 97.755048][ T13] veth0_macvtap: left promiscuous mode [ 97.757212][ T13] veth1_vlan: left promiscuous mode [ 97.759274][ T13] veth0_vlan: left promiscuous mode [ 97.845517][ T8128] __nla_validate_parse: 8 callbacks suppressed [ 97.845527][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 97.925484][ T13] team0 (unregistering): Port device team_slave_1 removed [ 97.935700][ T13] team0 (unregistering): Port device team_slave_0 removed [ 98.016833][ T13] lo (unregistering): left allmulticast mode [ 98.079891][ T8037] veth0_vlan: entered promiscuous mode [ 98.086168][ T8037] veth1_vlan: entered promiscuous mode [ 98.103317][ T8037] veth0_macvtap: entered promiscuous mode [ 98.108548][ T8037] veth1_macvtap: entered promiscuous mode [ 98.121839][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.129718][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.135650][ T106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.138597][ T106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.141771][ T106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.145878][ T106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190083][ T7761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.194630][ T7761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.223200][ T7764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.225844][ T7764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.248794][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 98.248806][ T40] audit: type=1400 audit(1774409483.551:574): avc: denied { mounton } for pid=8037 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 98.389519][ T40] audit: type=1400 audit(1774409483.681:575): avc: denied { write } for pid=8154 comm="syz.5.573" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.396809][ T40] audit: type=1400 audit(1774409483.681:576): avc: denied { open } for pid=8154 comm="syz.5.573" path="/1/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.428842][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.5.574'. [ 98.450589][ T5942] Bluetooth: hci4: command tx timeout [ 98.519434][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 98.519616][ T8177] netlink: 'syz.1.576': attribute type 4 has an invalid length. [ 98.719959][ T40] audit: type=1400 audit(1774409484.021:577): avc: denied { bind } for pid=8186 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.734694][ T40] audit: type=1400 audit(1774409484.021:578): avc: denied { create } for pid=8187 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 98.741158][ T40] audit: type=1400 audit(1774409484.021:579): avc: denied { execute } for pid=8186 comm="syz.5.578" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.760579][ T40] audit: type=1400 audit(1774409484.061:580): avc: denied { mount } for pid=8196 comm="syz.1.581" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.786097][ T40] audit: type=1400 audit(1774409484.081:581): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.809016][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 98.833182][ T40] audit: type=1400 audit(1774409484.131:582): avc: denied { setopt } for pid=8202 comm="syz.1.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.833232][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'. [ 99.058200][ T8226] netlink: 'syz.2.590': attribute type 11 has an invalid length. [ 99.114590][ T40] audit: type=1400 audit(1774409484.411:583): avc: denied { bind } for pid=8231 comm="syz.5.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.249083][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 99.409848][ T8248] netlink: 76 bytes leftover after parsing attributes in process `syz.2.599'. [ 99.410230][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8248 comm=syz.2.599 [ 99.861814][ T8262] 9pnet_fd: Insufficient options for proto=fd [ 99.892616][ T8264] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.961659][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.606'. [ 99.973965][ T8268] bond35: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 99.981657][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.606'. [ 99.984968][ T8268] bond35: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 100.047210][ T63] Bluetooth: hci2: command 0x1003 tx timeout [ 100.050037][ T5952] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 100.103595][ T8280] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 100.167314][ T8282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.609'. [ 100.311948][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 100.527316][ T5952] Bluetooth: hci4: command tx timeout [ 101.222438][ T8336] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 101.385545][ T8351] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 101.405161][ T8351] xt_socket: unknown flags 0xc [ 101.408742][ T8353] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 101.492896][ T8357] openvswitch: netlink: Missing key (keys=40, expected=80) [ 101.581709][ T8364] overlayfs: failed to clone upperpath [ 102.146958][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.2.639 [ 102.146985][ T8374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8374 comm=syz.2.639 [ 102.156084][ T8374] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 102.179725][ T8373] bond2: (slave bridge3): making interface the new active one [ 102.183316][ T8373] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 102.331772][ T8387] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 102.435128][ T8395] netlink: 'syz.2.646': attribute type 9 has an invalid length. [ 102.441545][ T8391] netlink: 'syz.2.646': attribute type 33 has an invalid length. [ 102.503444][ T8404] overlayfs: failed to resolve './file0/file1': -2 [ 102.570113][ T8415] lo: entered promiscuous mode [ 102.571798][ T8415] lo: entered allmulticast mode [ 102.574976][ T8415] tunl0: entered promiscuous mode [ 102.576630][ T8415] tunl0: entered allmulticast mode [ 102.579940][ T8415] gre0: entered promiscuous mode [ 102.582021][ T8415] gre0: entered allmulticast mode [ 102.588595][ T8415] gretap0: entered promiscuous mode [ 102.590629][ T8415] gretap0: entered allmulticast mode [ 102.594429][ T8415] erspan0: entered promiscuous mode [ 102.596193][ T8415] erspan0: entered allmulticast mode [ 102.600536][ T8415] ip_vti0: entered promiscuous mode [ 102.602437][ T8415] ip_vti0: entered allmulticast mode [ 102.605190][ T8415] ip6_vti0: entered promiscuous mode [ 102.607100][ T8415] ip6_vti0: entered allmulticast mode [ 102.608181][ T5952] Bluetooth: hci4: command tx timeout [ 102.610362][ T8415] sit0: entered promiscuous mode [ 102.612860][ T8415] sit0: entered allmulticast mode [ 102.618737][ T8415] ip6tnl0: entered promiscuous mode [ 102.620998][ T8415] ip6tnl0: entered allmulticast mode [ 102.625801][ T8415] ip6gre0: entered promiscuous mode [ 102.628229][ T8415] ip6gre0: entered allmulticast mode [ 102.635376][ T8415] syz_tun: entered promiscuous mode [ 102.637294][ T8415] syz_tun: entered allmulticast mode [ 102.642539][ T8415] ip6gretap0: entered promiscuous mode [ 102.644297][ T8415] ip6gretap0: entered allmulticast mode [ 102.647517][ T8415] bridge0: entered promiscuous mode [ 102.649512][ T8415] bridge0: entered allmulticast mode [ 102.651453][ T8415] vcan0: entered promiscuous mode [ 102.652994][ T8415] vcan0: entered allmulticast mode [ 102.655259][ T8415] bond0: entered promiscuous mode [ 102.656849][ T8415] bond_slave_0: entered promiscuous mode [ 102.658803][ T8415] bond_slave_1: entered promiscuous mode [ 102.660611][ T8415] bond0: entered allmulticast mode [ 102.662196][ T8415] bond_slave_0: entered allmulticast mode [ 102.663944][ T8415] bond_slave_1: entered allmulticast mode [ 102.667556][ T8415] team0: entered promiscuous mode [ 102.669561][ T8415] team_slave_0: entered promiscuous mode [ 102.671341][ T8415] team_slave_1: entered promiscuous mode [ 102.673217][ T8415] team0: entered allmulticast mode [ 102.674796][ T8415] team_slave_0: entered allmulticast mode [ 102.676629][ T8415] team_slave_1: entered allmulticast mode [ 102.680840][ T8415] dummy0: entered promiscuous mode [ 102.685271][ T8415] nlmon0: entered promiscuous mode [ 102.686964][ T8415] nlmon0: entered allmulticast mode [ 102.691321][ T8415] caif0: entered promiscuous mode [ 102.692947][ T8415] caif0: entered allmulticast mode [ 102.694596][ T8415] batadv0: entered promiscuous mode [ 102.696236][ T8415] batadv0: entered allmulticast mode [ 102.699860][ T8415] vxcan0: entered promiscuous mode [ 102.701454][ T8415] vxcan0: entered allmulticast mode [ 102.703575][ T8415] vxcan1: entered promiscuous mode [ 102.705166][ T8415] vxcan1: entered allmulticast mode [ 102.707393][ T8415] veth0: entered promiscuous mode [ 102.709212][ T8415] veth0: entered allmulticast mode [ 102.712286][ T8415] veth1: entered promiscuous mode [ 102.714060][ T8415] veth1: entered allmulticast mode [ 102.720059][ T8415] wg0: entered promiscuous mode [ 102.721704][ T8415] wg0: entered allmulticast mode [ 102.724969][ T8415] wg1: entered promiscuous mode [ 102.726504][ T8415] wg1: entered allmulticast mode [ 102.730596][ T8415] wg2: entered promiscuous mode [ 102.732309][ T8415] wg2: entered allmulticast mode [ 102.734973][ T8415] veth0_to_bridge: entered promiscuous mode [ 102.736955][ T8415] veth0_to_bridge: entered allmulticast mode [ 102.741999][ T8415] veth1_to_bridge: entered promiscuous mode [ 102.743846][ T8415] veth1_to_bridge: entered allmulticast mode [ 102.748911][ T8415] veth0_to_bond: entered promiscuous mode [ 102.750787][ T8415] veth0_to_bond: entered allmulticast mode [ 102.754684][ T8415] veth1_to_bond: entered promiscuous mode [ 102.756539][ T8415] veth1_to_bond: entered allmulticast mode [ 102.761264][ T8415] veth0_to_team: entered promiscuous mode [ 102.763717][ T8415] veth0_to_team: entered allmulticast mode [ 102.769275][ T8415] veth1_to_team: entered promiscuous mode [ 102.771201][ T8415] veth1_to_team: entered allmulticast mode [ 102.775606][ T8415] veth0_to_batadv: entered promiscuous mode [ 102.779278][ T8415] veth0_to_batadv: entered allmulticast mode [ 102.782979][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.785277][ T8415] batadv_slave_0: entered promiscuous mode [ 102.787966][ T8415] batadv_slave_0: entered allmulticast mode [ 102.791365][ T8415] veth1_to_batadv: entered promiscuous mode [ 102.793256][ T8415] veth1_to_batadv: entered allmulticast mode [ 102.796468][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.799337][ T8415] batadv_slave_1: entered promiscuous mode [ 102.801120][ T8415] batadv_slave_1: entered allmulticast mode [ 102.804712][ T8415] xfrm0: entered promiscuous mode [ 102.806262][ T8415] xfrm0: entered allmulticast mode [ 102.810099][ T8415] veth0_to_hsr: entered promiscuous mode [ 102.811954][ T8415] veth0_to_hsr: entered allmulticast mode [ 102.815047][ T8415] hsr_slave_0: entered allmulticast mode [ 102.818082][ T8415] veth1_to_hsr: entered promiscuous mode [ 102.819995][ T8415] veth1_to_hsr: entered allmulticast mode [ 102.823126][ T8415] hsr_slave_1: entered allmulticast mode [ 102.826188][ T8415] hsr0: entered promiscuous mode [ 102.829670][ T8415] hsr0: entered allmulticast mode [ 102.832559][ T8415] veth1_virt_wifi: entered promiscuous mode [ 102.834436][ T8415] veth1_virt_wifi: entered allmulticast mode [ 102.837856][ T8415] veth0_virt_wifi: entered promiscuous mode [ 102.839798][ T8415] veth0_virt_wifi: entered allmulticast mode [ 102.842896][ T8415] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 102.845105][ T8415] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 102.848829][ T8415] veth1_vlan: entered allmulticast mode [ 102.851814][ T8415] veth0_vlan: entered allmulticast mode [ 102.858841][ T8415] vlan0: entered promiscuous mode [ 102.860564][ T8415] vlan0: entered allmulticast mode [ 102.862234][ T8415] vlan1: entered promiscuous mode [ 102.864210][ T8415] vlan1: entered allmulticast mode [ 102.866147][ T8415] macvlan0: entered promiscuous mode [ 102.869584][ T8415] macvlan0: entered allmulticast mode [ 102.872943][ T8415] macvlan1: entered promiscuous mode [ 102.874735][ T8415] macvlan1: entered allmulticast mode [ 102.877706][ T8415] ipvlan0: entered promiscuous mode [ 102.879634][ T8415] ipvlan0: entered allmulticast mode [ 102.881915][ T8415] ipvlan1: entered promiscuous mode [ 102.883538][ T8415] ipvlan1: entered allmulticast mode [ 102.886578][ T8415] veth1_macvtap: entered allmulticast mode [ 102.892994][ T8415] veth0_macvtap: entered allmulticast mode [ 102.899547][ T8415] macvtap0: entered promiscuous mode [ 102.901945][ T8415] macvtap0: entered allmulticast mode [ 102.907127][ T8415] macsec0: entered promiscuous mode [ 102.909425][ T8415] macsec0: entered allmulticast mode [ 102.915714][ T8415] geneve0: entered promiscuous mode [ 102.918074][ T8415] geneve0: entered allmulticast mode [ 102.923589][ T8415] geneve1: entered promiscuous mode [ 102.925876][ T8415] geneve1: entered allmulticast mode [ 102.931346][ T8415] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 102.934476][ T8415] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 102.941599][ T8415] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 102.946169][ T8415] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 102.951328][ T8415] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 102.954133][ T8415] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 102.960126][ T8415] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 102.962640][ T8415] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 102.971193][ T8415] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 102.974182][ T8415] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 102.981371][ T8415] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 102.985044][ T8415] veth2: entered promiscuous mode [ 102.987154][ T8415] veth2: entered allmulticast mode [ 102.989299][ T8415] veth3: entered promiscuous mode [ 102.990891][ T8415] veth3: entered allmulticast mode [ 102.993482][ T8415] bridge1: entered promiscuous mode [ 102.995549][ T8415] bridge1: entered allmulticast mode [ 102.998680][ T8415] ip6tnl1: entered promiscuous mode [ 103.000746][ T8415] ip6tnl1: entered allmulticast mode [ 103.004123][ T8415] ip6erspan0: entered promiscuous mode [ 103.006042][ T8415] ip6erspan0: entered allmulticast mode [ 103.008944][ T8415] bond1: entered allmulticast mode [ 103.012293][ T8415] vxlan0: entered promiscuous mode [ 103.014152][ T8415] vxlan0: entered allmulticast mode [ 103.017651][ T8415] geneve2: entered promiscuous mode [ 103.019684][ T8415] geneve2: entered allmulticast mode [ 103.021537][ T8415] team1: entered promiscuous mode [ 103.023464][ T8415] team1: entered allmulticast mode [ 103.025893][ T8419] __nla_validate_parse: 8 callbacks suppressed [ 103.025903][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 103.030753][ T8419] bridge: RTM_NEWNEIGH with invalid ether address [ 103.032862][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 103.035711][ T8421] bridge: RTM_NEWNEIGH with invalid ether address [ 103.074234][ T8424] bond36 (unregistering): Released all slaves [ 103.084810][ T106] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.088904][ T106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.099861][ T1145] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.104110][ T1145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.107882][ T1145] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.111022][ T1145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.111619][ T8436] sg_write: data in/out 568614724/4048 bytes for SCSI command 0xf2-- guessing data in; [ 103.111619][ T8436] program syz.4.658 not setting count and/or reply_len properly [ 103.114675][ T1145] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.123950][ T1145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.409194][ T6023] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.557139][ T6023] usb 6-1: Using ep0 maxpacket: 16 [ 103.560927][ T6023] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 103.565436][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.570230][ T6023] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.574178][ T6023] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 103.579688][ T6023] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 103.583491][ T6023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.592638][ T6023] usb 6-1: config 0 descriptor?? [ 104.039107][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 104.039118][ T40] audit: type=1400 audit(1774409489.341:608): avc: denied { write } for pid=8461 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.046515][ T8462] kAFS: unable to lookup cell 'syz1' [ 104.069409][ T40] audit: type=1400 audit(1774409489.371:609): avc: denied { mounton } for pid=8461 comm="syz.4.667" path="/136/file0" dev="ocfs2_dlmfs" ino=22197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.069861][ T8462] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.152467][ T8468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8468 comm=syz.4.669 [ 104.156627][ T8468] cgroup: noprefix used incorrectly [ 104.198165][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.201351][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.256892][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.261106][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.273029][ T6023] usbhid 6-1:0.0: can't add hid device: -71 [ 104.274987][ T6023] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 104.292448][ T6023] usb 6-1: USB disconnect, device number 3 [ 104.303941][ T8480] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 104.326079][ T8480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.332353][ T40] audit: type=1400 audit(1774409489.631:610): avc: denied { getopt } for pid=8477 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.339597][ T8480] bond2: (slave gretap1): making interface the new active one [ 104.343047][ T8480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 104.350523][ T8480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8480 comm=syz.4.671 [ 104.465094][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.470108][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.474420][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.489264][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.494128][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.498521][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.502371][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.506229][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.511271][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.515211][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.2.677 [ 104.551087][ T8511] pimreg: tun_chr_ioctl cmd 1074025673 [ 104.552937][ T8512] pimreg: tun_chr_ioctl cmd 1074025676 [ 104.554758][ T8512] pimreg: owner set to 0 [ 104.583351][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 104.687165][ T5952] Bluetooth: hci4: command tx timeout [ 104.752002][ T40] audit: type=1400 audit(1774409490.051:611): avc: denied { read } for pid=8543 comm="syz.1.691" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.762161][ T40] audit: type=1400 audit(1774409490.061:612): avc: denied { open } for pid=8543 comm="syz.1.691" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.815945][ T40] audit: type=1400 audit(1774409490.111:613): avc: denied { execute } for pid=8543 comm="syz.1.691" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.117110][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 105.178854][ T40] audit: type=1326 audit(1774409490.481:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.694" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0ee39c799 code=0x0 [ 105.267153][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 105.270360][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 105.273797][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.276982][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.280302][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.283523][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.287925][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.290833][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.496868][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 105.498712][ T9] usbtmc 9-1:16.0: can't read capabilities [ 105.638117][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 105.727276][ T40] audit: type=1400 audit(1774409491.021:615): avc: denied { name_connect } for pid=8554 comm="syz.4.693" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 105.783922][ T8575] GUP no longer grows the stack in syz.2.699 (8575): 200000006000-200000008000 (200000004000) [ 105.786510][ T34] usb 9-1: USB disconnect, device number 3 [ 105.789273][ T8575] CPU: 1 UID: 0 PID: 8575 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(full) [ 105.789296][ T8575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.789307][ T8575] Call Trace: [ 105.789313][ T8575] [ 105.789320][ T8575] dump_stack_lvl+0x100/0x190 [ 105.789364][ T8575] gup_vma_lookup.cold+0x83/0x96 [ 105.789390][ T8575] fixup_user_fault+0x253/0x510 [ 105.789413][ T8575] fault_in_user_writeable+0x70/0xe0 [ 105.789442][ T8575] futex_lock_pi+0x682/0x7b0 [ 105.789466][ T8575] ? __pfx_futex_lock_pi+0x10/0x10 [ 105.789489][ T8575] ? __pfx___futex_wait+0x10/0x10 [ 105.789509][ T8575] ? lockdep_hardirqs_on+0x78/0x100 [ 105.789564][ T8575] ? __pfx_futex_wake_mark+0x10/0x10 [ 105.789600][ T8575] do_futex+0x18a/0x350 [ 105.789643][ T8575] ? __pfx_do_futex+0x10/0x10 [ 105.789662][ T8575] ? __vm_munmap+0x1d2/0x390 [ 105.789692][ T8575] __x64_sys_futex+0x34f/0x4d0 [ 105.789713][ T8575] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.789740][ T8575] do_syscall_64+0x106/0xf80 [ 105.789761][ T8575] ? clear_bhb_loop+0x40/0x90 [ 105.789782][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.789799][ T8575] RIP: 0033:0x7fea75b9c799 [ 105.789814][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.789829][ T8575] RSP: 002b:00007fea769e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.789845][ T8575] RAX: ffffffffffffffda RBX: 00007fea75e15fa0 RCX: 00007fea75b9c799 [ 105.789855][ T8575] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 105.789865][ T8575] RBP: 00007fea75c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 105.789874][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.789884][ T8575] R13: 00007fea75e16038 R14: 00007fea75e15fa0 R15: 00007ffd404d41e8 [ 105.789907][ T8575] [ 105.945256][ T8587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'. [ 106.018919][ T8591] bond36: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 106.023210][ T8591] bond36 (unregistering): Released all slaves [ 106.026994][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 106.209056][ T8610] FAT-fs (sr0): bogus number of reserved sectors [ 106.211236][ T8610] FAT-fs (sr0): Can't find a valid FAT filesystem [ 106.239352][ T40] audit: type=1400 audit(1774409491.541:616): avc: denied { create } for pid=8611 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 106.349480][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 106.353734][ T8622] kAFS: unable to lookup cell 'syz2' [ 106.356919][ T40] audit: type=1400 audit(1774409491.651:617): avc: denied { audit_write } for pid=8620 comm="syz.2.715" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.383460][ T8625] (syz.1.716,8625,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 106.445378][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 106.650279][ T5952] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 106.653771][ T8635] cgroup: release_agent respecified [ 107.210509][ T8657] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 107.210910][ T8658] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 107.216388][ T8657] openvswitch: netlink: IPv4 tunnel dst address is zero [ 107.521966][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 107.524989][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 108.842189][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 108.858714][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 108.900061][ T8729] netlink: 'syz.2.748': attribute type 10 has an invalid length. [ 108.908108][ T8729] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 108.910958][ T8729] team0: Failed to send options change via netlink (err -105) [ 108.913329][ T8729] team0: Port device netdevsim0 added [ 108.916641][ T1188] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.163018][ T8766] netlink: 'syz.2.757': attribute type 10 has an invalid length. [ 109.172469][ T8766] team0: Cannot enslave team device to itself [ 109.193538][ T8768] tipc: Started in network mode [ 109.195671][ T8768] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 109.200450][ T8768] tipc: Enabling of bearer rejected, failed to enable media [ 109.621949][ T8799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.761'. [ 109.626133][ T8800] x_tables: duplicate underflow at hook 3 [ 109.761325][ T8813] Cannot find del_set index 4 as target [ 109.886052][ T8825] xt_l2tp: missing protocol rule (udp|l2tpip) [ 109.891876][ T8825] netlink: 124 bytes leftover after parsing attributes in process `syz.4.766'. [ 109.896982][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 109.896992][ T40] audit: type=1400 audit(1774409495.191:626): avc: denied { ioctl } for pid=8824 comm="syz.4.766" path="socket:[27165]" dev="sockfs" ino=27165 ioctlcmd=0x8b20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.897479][ T5952] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 110.137916][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 110.908184][ T8901] 9pnet_virtio: no channels available for device 127.0.0.1 [ 112.288564][ T6023] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 115.556266][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.639062][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.698451][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.767329][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.883186][ T13] bridge_slave_1: left allmulticast mode [ 115.885036][ T13] bridge_slave_1: left promiscuous mode [ 115.887071][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.892247][ T13] bridge_slave_0: left allmulticast mode [ 115.894059][ T13] bridge_slave_0: left promiscuous mode [ 115.896211][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.061226][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.065767][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.069784][ T13] bond0 (unregistering): Released all slaves [ 116.337097][ T13] hsr_slave_0: left promiscuous mode [ 116.347149][ T13] hsr_slave_1: left promiscuous mode [ 116.349774][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.352245][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.355307][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.358289][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.366678][ T13] veth1_macvtap: left promiscuous mode [ 116.368946][ T13] veth0_macvtap: left promiscuous mode [ 116.370822][ T13] veth1_vlan: left promiscuous mode [ 116.372532][ T13] veth0_vlan: left promiscuous mode [ 116.496849][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.503498][ T13] team0 (unregistering): Port device team_slave_0 removed [ 122.354801][ T8990] geneve2: entered promiscuous mode [ 122.357373][ T7764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.360493][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.363215][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.364586][ T8994] selinux_netlink_send: 57 callbacks suppressed [ 122.364597][ T8994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8994 comm=syz.4.787 [ 122.366773][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.396981][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.402707][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.406608][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.420402][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.425183][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.443234][ T9006] trusted_key: encrypted_key: insufficient parameters specified [ 122.443495][ T9010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9010 comm=syz.2.790 [ 122.613761][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 122.618148][ T9031] netlink: 'syz.1.795': attribute type 7 has an invalid length. [ 122.626514][ T9031] netlink: 'syz.1.795': attribute type 7 has an invalid length. [ 122.636194][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.648292][ T40] audit: type=1400 audit(1774409507.941:627): avc: denied { setopt } for pid=9029 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.659392][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.662288][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.667127][ T106] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.685363][ T40] audit: type=1400 audit(1774409507.981:628): avc: denied { connect } for pid=9038 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.694865][ T9041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9041 comm=syz.4.796 [ 122.699815][ T40] audit: type=1400 audit(1774409507.991:629): avc: denied { write } for pid=9038 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.746227][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.757566][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.760017][ T8998] bridge_slave_0: entered allmulticast mode [ 122.762773][ T8998] bridge_slave_0: entered promiscuous mode [ 122.764216][ T9055] syz.4.800: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 122.766139][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.773397][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.776169][ T8998] bridge_slave_1: entered allmulticast mode [ 122.788798][ T8998] bridge_slave_1: entered promiscuous mode [ 122.826509][ T9059] tipc: New replicast peer: 255.255.255.255 [ 122.829859][ T9059] tipc: Enabled bearer , priority 10 [ 122.834383][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.842798][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.865269][ T8998] team0: Port device team_slave_0 added [ 122.868914][ T8998] team0: Port device team_slave_1 added [ 122.885482][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.888143][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.896283][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.904456][ T40] audit: type=1400 audit(1774409508.191:630): avc: denied { listen } for pid=9067 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.908987][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.912991][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.920411][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.921232][ T40] audit: type=1400 audit(1774409508.201:631): avc: denied { accept } for pid=9067 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.967351][ T8998] hsr_slave_0: entered promiscuous mode [ 122.969696][ T8998] hsr_slave_1: entered promiscuous mode [ 123.001447][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 123.004350][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 123.061340][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 123.068119][ T9075] gtp0: entered promiscuous mode [ 123.073071][ T40] audit: type=1400 audit(1774409508.371:632): avc: denied { watch_reads } for pid=9074 comm="syz.2.805" path="/249" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.088873][ T9075] netlink: 52 bytes leftover after parsing attributes in process `syz.2.805'. [ 123.132006][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 123.136484][ T8998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.143499][ T8998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.148775][ T8998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.182545][ T8998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.200080][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.202212][ T8998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.205629][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.208220][ T8998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.243047][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.245457][ T9100] syzkaller1: entered promiscuous mode [ 123.245561][ T40] audit: type=1400 audit(1774409508.541:633): avc: denied { watch_mount } for pid=9097 comm="syz.2.811" path="/252" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.248220][ T9100] syzkaller1: entered allmulticast mode [ 123.258511][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.263694][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.281107][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.286293][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.289011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.295292][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.298282][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.330506][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.811'. [ 123.377504][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.381214][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.384880][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.403028][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.406288][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.459068][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 123.462000][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 123.473453][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.519845][ T9123] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 123.543304][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 123.554533][ T40] audit: type=1400 audit(1774409508.851:634): avc: denied { setopt } for pid=9130 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.570684][ T40] audit: type=1400 audit(1774409508.861:635): avc: denied { ioctl } for pid=9130 comm="syz.1.820" path="socket:[29095]" dev="sockfs" ino=29095 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.624485][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.627097][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.629458][ T9107] bridge_slave_0: entered allmulticast mode [ 123.632155][ T9107] bridge_slave_0: entered promiscuous mode [ 123.635344][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.638265][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.640578][ T9107] bridge_slave_1: entered allmulticast mode [ 123.643275][ T9107] bridge_slave_1: entered promiscuous mode [ 123.679076][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.690529][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.710804][ T8998] veth0_vlan: entered promiscuous mode [ 123.724196][ T9107] team0: Port device team_slave_0 added [ 123.726710][ T8998] veth1_vlan: entered promiscuous mode [ 123.727063][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 123.730923][ T9107] team0: Port device team_slave_1 added [ 123.731529][ T9150] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.765444][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.768755][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.779050][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.785790][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.788307][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.797915][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.840940][ T40] audit: type=1400 audit(1774409509.141:636): avc: denied { mount } for pid=9153 comm="syz.2.823" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.844998][ T8998] veth0_macvtap: entered promiscuous mode [ 123.854258][ T8998] veth1_macvtap: entered promiscuous mode [ 123.867907][ T9107] hsr_slave_0: entered promiscuous mode [ 123.870364][ T9107] hsr_slave_1: entered promiscuous mode [ 123.872646][ T9107] debugfs: 'hsr0' already exists in 'hsr' [ 123.874542][ T9107] Cannot create hsr debugfs directory [ 123.923885][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.930479][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.958221][ T2303] tipc: Node number set to 4269801491 [ 123.961740][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.964471][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.972813][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.975552][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.988107][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 124.044924][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.049943][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.083082][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.086128][ T9107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.086148][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.096541][ T9107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.101254][ T9107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.105987][ T9107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.152495][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.168888][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.174092][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.176662][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.185120][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.187719][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.234009][ T9172] Bluetooth: MGMT ver 1.23 [ 124.238301][ T9172] Bluetooth: hci0: unsupported parameter 255 [ 124.240326][ T9172] Bluetooth: hci0: unsupported parameter 255 [ 124.323382][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.449757][ T5952] Bluetooth: hci2: command tx timeout [ 124.460570][ T9107] veth0_vlan: entered promiscuous mode [ 124.466046][ T9107] veth1_vlan: entered promiscuous mode [ 124.471972][ T9195] can0: slcan on ttynull. [ 124.502888][ T9107] veth0_macvtap: entered promiscuous mode [ 124.508812][ T9107] veth1_macvtap: entered promiscuous mode [ 124.517411][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.525175][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.528810][ T9200] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 124.536953][ T1149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.541030][ T1149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.547856][ T9194] can0 (unregistered): slcan off ttynull. [ 124.548997][ T1149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.553687][ T1149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.614528][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.619167][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.631573][ T9208] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 124.637867][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.641115][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.714947][ T9214] 9pnet_fd: p9_fd_create_unix (9214): problem connecting socket: ./file0: -111 [ 124.792299][ T9223] FAULT_INJECTION: forcing a failure. [ 124.792299][ T9223] name failslab, interval 1, probability 0, space 0, times 0 [ 124.796277][ T9223] CPU: 0 UID: 0 PID: 9223 Comm: syz.6.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.796298][ T9223] Tainted: [L]=SOFTLOCKUP [ 124.796301][ T9223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.796308][ T9223] Call Trace: [ 124.796313][ T9223] [ 124.796317][ T9223] dump_stack_lvl+0x100/0x190 [ 124.796348][ T9223] should_fail_ex.cold+0x5/0xa [ 124.796363][ T9223] should_failslab+0xc2/0x120 [ 124.796375][ T9223] __kvmalloc_node_noprof+0xfa/0xa00 [ 124.796393][ T9223] ? iommufd_test+0x53d/0x6610 [ 124.796415][ T9223] iommufd_test+0x53d/0x6610 [ 124.796430][ T9223] ? __lock_acquire+0x4a5/0x2630 [ 124.796442][ T9223] ? __pfx_iommufd_test+0x10/0x10 [ 124.796454][ T9223] ? tomoyo_path_number_perm+0x188/0x580 [ 124.796473][ T9223] ? find_held_lock+0x2b/0x80 [ 124.796487][ T9223] ? __might_fault+0xc5/0x140 [ 124.796502][ T9223] ? __might_fault+0xc5/0x140 [ 124.796522][ T9223] iommufd_fops_ioctl+0x358/0x520 [ 124.796538][ T9223] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 124.796557][ T9223] ? __fget_files+0x215/0x3d0 [ 124.796569][ T9223] ? hook_file_ioctl_common+0x146/0x410 [ 124.796583][ T9223] ? selinux_file_ioctl+0x139/0x290 [ 124.796599][ T9223] ? selinux_file_ioctl+0xb4/0x290 [ 124.796615][ T9223] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 124.796630][ T9223] __x64_sys_ioctl+0x18e/0x210 [ 124.796649][ T9223] do_syscall_64+0x106/0xf80 [ 124.796671][ T9223] ? clear_bhb_loop+0x40/0x90 [ 124.796684][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.796696][ T9223] RIP: 0033:0x7f6257b9c799 [ 124.796705][ T9223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.796716][ T9223] RSP: 002b:00007f6258a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.796728][ T9223] RAX: ffffffffffffffda RBX: 00007f6257e15fa0 RCX: 00007f6257b9c799 [ 124.796734][ T9223] RDX: 0000200000000ac0 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 124.796741][ T9223] RBP: 00007f6258a14090 R08: 0000000000000000 R09: 0000000000000000 [ 124.796747][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.796753][ T9223] R13: 00007f6257e16038 R14: 00007f6257e15fa0 R15: 00007ffc9291ce38 [ 124.796767][ T9223] [ 124.958035][ T9236] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 125.014437][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.280767][ T9272] FAULT_INJECTION: forcing a failure. [ 125.280767][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.286052][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.1.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.286071][ T9272] Tainted: [L]=SOFTLOCKUP [ 125.286075][ T9272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.286082][ T9272] Call Trace: [ 125.286086][ T9272] [ 125.286090][ T9272] dump_stack_lvl+0x100/0x190 [ 125.286123][ T9272] should_fail_ex.cold+0x5/0xa [ 125.286138][ T9272] _copy_from_user+0x2e/0xd0 [ 125.286151][ T9272] iopt_pages_rw_access+0x3b6/0x960 [ 125.286173][ T9272] ? down_read+0x13b/0x460 [ 125.286190][ T9272] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 125.286207][ T9272] ? interval_tree_iter_first+0x1a5/0x250 [ 125.286223][ T9272] ? iopt_area_contig_init+0x137/0x2d0 [ 125.286235][ T9272] iommufd_access_rw+0x256/0x500 [ 125.286253][ T9272] ? __pfx_iommufd_access_rw+0x10/0x10 [ 125.286269][ T9272] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 125.286285][ T9272] ? iommufd_test+0x53d/0x6610 [ 125.286301][ T9272] iommufd_test+0x5fe/0x6610 [ 125.286315][ T9272] ? __lock_acquire+0x4a5/0x2630 [ 125.286327][ T9272] ? __pfx_iommufd_test+0x10/0x10 [ 125.286340][ T9272] ? tomoyo_path_number_perm+0x188/0x580 [ 125.286359][ T9272] ? find_held_lock+0x2b/0x80 [ 125.286373][ T9272] ? __might_fault+0xc5/0x140 [ 125.286388][ T9272] ? __might_fault+0xc5/0x140 [ 125.286408][ T9272] iommufd_fops_ioctl+0x358/0x520 [ 125.286423][ T9272] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.286439][ T9272] ? __fget_files+0x215/0x3d0 [ 125.286451][ T9272] ? hook_file_ioctl_common+0x146/0x410 [ 125.286466][ T9272] ? selinux_file_ioctl+0x139/0x290 [ 125.286485][ T9272] ? selinux_file_ioctl+0xb4/0x290 [ 125.286502][ T9272] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.286516][ T9272] __x64_sys_ioctl+0x18e/0x210 [ 125.286535][ T9272] do_syscall_64+0x106/0xf80 [ 125.286550][ T9272] ? clear_bhb_loop+0x40/0x90 [ 125.286565][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.286576][ T9272] RIP: 0033:0x7ff0ee39c799 [ 125.286586][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.286596][ T9272] RSP: 002b:00007ff0ef2ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.286607][ T9272] RAX: ffffffffffffffda RBX: 00007ff0ee615fa0 RCX: 00007ff0ee39c799 [ 125.286614][ T9272] RDX: 0000200000000ac0 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 125.286621][ T9272] RBP: 00007ff0ef2ec090 R08: 0000000000000000 R09: 0000000000000000 [ 125.286627][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.286633][ T9272] R13: 00007ff0ee616038 R14: 00007ff0ee615fa0 R15: 00007ffdcfdf4a18 [ 125.286647][ T9272] [ 125.407459][ T9276] kernel read not supported for file /policy (pid: 9276 comm: syz.1.856) [ 125.487466][ T5952] Bluetooth: hci0: command tx timeout [ 125.508325][ T9283] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 125.513304][ T9280] bond36: (slave ip6gretap0): Device is not bonding slave [ 125.515674][ T9280] bond36: option active_slave: invalid value (ip6gretap0) [ 125.521596][ T9280] bond36 (unregistering): Released all slaves [ 125.543617][ T9283] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 125.630039][ T9291] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 125.835037][ T9314] FAULT_INJECTION: forcing a failure. [ 125.835037][ T9314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.841509][ T9314] CPU: 2 UID: 0 PID: 9314 Comm: syz.6.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.841528][ T9314] Tainted: [L]=SOFTLOCKUP [ 125.841532][ T9314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.841539][ T9314] Call Trace: [ 125.841543][ T9314] [ 125.841547][ T9314] dump_stack_lvl+0x100/0x190 [ 125.841571][ T9314] should_fail_ex.cold+0x5/0xa [ 125.841586][ T9314] _copy_to_user+0x32/0xd0 [ 125.841599][ T9314] iommufd_test+0x646/0x6610 [ 125.841614][ T9314] ? __lock_acquire+0x4a5/0x2630 [ 125.841626][ T9314] ? __pfx_iommufd_test+0x10/0x10 [ 125.841638][ T9314] ? tomoyo_path_number_perm+0x188/0x580 [ 125.841657][ T9314] ? find_held_lock+0x2b/0x80 [ 125.841671][ T9314] ? __might_fault+0xc5/0x140 [ 125.841687][ T9314] ? __might_fault+0xc5/0x140 [ 125.841707][ T9314] iommufd_fops_ioctl+0x358/0x520 [ 125.841723][ T9314] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.841738][ T9314] ? __fget_files+0x215/0x3d0 [ 125.841749][ T9314] ? hook_file_ioctl_common+0x146/0x410 [ 125.841764][ T9314] ? selinux_file_ioctl+0x139/0x290 [ 125.841779][ T9314] ? selinux_file_ioctl+0xb4/0x290 [ 125.841795][ T9314] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 125.841811][ T9314] __x64_sys_ioctl+0x18e/0x210 [ 125.841830][ T9314] do_syscall_64+0x106/0xf80 [ 125.841845][ T9314] ? clear_bhb_loop+0x40/0x90 [ 125.841858][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.841870][ T9314] RIP: 0033:0x7f6257b9c799 [ 125.841879][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.841890][ T9314] RSP: 002b:00007f6258a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.841901][ T9314] RAX: ffffffffffffffda RBX: 00007f6257e15fa0 RCX: 00007f6257b9c799 [ 125.841908][ T9314] RDX: 0000200000000ac0 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 125.841914][ T9314] RBP: 00007f6258a14090 R08: 0000000000000000 R09: 0000000000000000 [ 125.841920][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.841927][ T9314] R13: 00007f6257e16038 R14: 00007f6257e15fa0 R15: 00007ffc9291ce38 [ 125.841940][ T9314] [ 125.950320][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.956001][ T9324] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 125.957115][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.959129][ T9324] overlayfs: failed to resolve './file2': -2 [ 126.008856][ T9326] bond3 (unregistering): Released all slaves [ 126.019491][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.026502][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.123466][ T9337] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.245004][ T9348] FAULT_INJECTION: forcing a failure. [ 126.245004][ T9348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.251673][ T9348] CPU: 3 UID: 0 PID: 9348 Comm: syz.6.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.251692][ T9348] Tainted: [L]=SOFTLOCKUP [ 126.251696][ T9348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.251702][ T9348] Call Trace: [ 126.251707][ T9348] [ 126.251711][ T9348] dump_stack_lvl+0x100/0x190 [ 126.251735][ T9348] should_fail_ex.cold+0x5/0xa [ 126.251750][ T9348] _copy_to_user+0x32/0xd0 [ 126.251762][ T9348] simple_read_from_buffer+0xcb/0x170 [ 126.251776][ T9348] proc_fail_nth_read+0x1af/0x230 [ 126.251793][ T9348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.251810][ T9348] ? rw_verify_area+0xce/0x6d0 [ 126.251826][ T9348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.251842][ T9348] vfs_read+0x1e4/0xb30 [ 126.251861][ T9348] ? __pfx_vfs_read+0x10/0x10 [ 126.251878][ T9348] ? __fget_files+0x215/0x3d0 [ 126.251898][ T9348] ? __fget_files+0x21f/0x3d0 [ 126.251920][ T9348] ksys_read+0x12a/0x250 [ 126.251934][ T9348] ? __pfx_ksys_read+0x10/0x10 [ 126.251958][ T9348] do_syscall_64+0x106/0xf80 [ 126.251982][ T9348] ? clear_bhb_loop+0x40/0x90 [ 126.252005][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.252045][ T9348] RIP: 0033:0x7f6257b5cfce [ 126.252057][ T9348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.252067][ T9348] RSP: 002b:00007f6258a13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.252079][ T9348] RAX: ffffffffffffffda RBX: 00007f6258a146c0 RCX: 00007f6257b5cfce [ 126.252086][ T9348] RDX: 000000000000000f RSI: 00007f6258a140a0 RDI: 0000000000000006 [ 126.252092][ T9348] RBP: 00007f6258a14090 R08: 0000000000000000 R09: 0000000000000000 [ 126.252098][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.252104][ T9348] R13: 00007f6257e16038 R14: 00007f6257e15fa0 R15: 00007ffc9291ce38 [ 126.252118][ T9348] [ 126.529883][ T5952] Bluetooth: hci2: command tx timeout [ 126.610495][ T9385] erspan0: entered promiscuous mode [ 126.629141][ T9384] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 126.651709][ T9384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9384 comm=syz.2.887 [ 126.884713][ T9397] openvswitch: netlink: IPv4 tunnel dst address is zero [ 126.901263][ T9397] program syz.6.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.276503][ T9412] openvswitch: netlink: Missing key (keys=40, expected=100) [ 127.403356][ T9416] netlink: 'syz.6.900': attribute type 19 has an invalid length. [ 127.459442][ T9418] netlink: 'syz.6.901': attribute type 6 has an invalid length. [ 127.461944][ T9418] netlink: 'syz.6.901': attribute type 7 has an invalid length. [ 127.509640][ T9420] pimreg: entered allmulticast mode [ 127.512921][ T9420] pimreg: left allmulticast mode [ 127.567117][ T5952] Bluetooth: hci0: command tx timeout [ 127.674844][ T9427] vim2m vim2m.0: vidioc_s_fmt queue busy [ 127.744215][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 127.744226][ T40] audit: type=1400 audit(1774409513.041:653): avc: denied { ioctl } for pid=9437 comm="syz.7.908" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.755919][ T40] audit: type=1400 audit(1774409513.051:654): avc: denied { unmount } for pid=8998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.763164][ T9438] openvswitch: netlink: Duplicate or invalid key (type 0). [ 127.765512][ T9438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.848630][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.851336][ T9447] batadv_slave_0: entered promiscuous mode [ 128.185593][ T40] audit: type=1804 audit(1774409513.481:655): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.919" name="/newroot/22/file1" dev="tmpfs" ino=134 res=1 errno=0 [ 128.607961][ T63] Bluetooth: hci2: command tx timeout [ 128.647163][ T5984] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 128.797147][ T5984] usb 12-1: Using ep0 maxpacket: 8 [ 128.800164][ T9523] __nla_validate_parse: 19 callbacks suppressed [ 128.800174][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 128.804086][ T5984] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 128.804826][ T9523] netlink: 6 bytes leftover after parsing attributes in process `syz.1.928'. [ 128.808204][ T5984] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.819042][ T5984] pvrusb2: Hardware description: Terratec Grabster AV400 [ 128.821345][ T5984] pvrusb2: ********** [ 128.822637][ T5984] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 128.825828][ T5984] pvrusb2: Important functionality might not be entirely working. [ 128.829819][ T5984] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 128.833394][ T5984] pvrusb2: ********** [ 128.870627][ T9526] netlink: 'syz.6.927': attribute type 38 has an invalid length. [ 128.886936][ T9523] kvm: MWAIT instruction emulated as NOP! [ 129.018129][ T2493] pvrusb2: Invalid write control endpoint [ 129.019635][ T5984] usb 12-1: USB disconnect, device number 2 [ 129.052072][ T2493] pvrusb2: Invalid write control endpoint [ 129.053849][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.056727][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.059847][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.062974][ T2493] pvrusb2: Device being rendered inoperable [ 129.065212][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 129.069036][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 129.077285][ T2493] pvrusb2: Attached sub-driver cx25840 [ 129.078980][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.082009][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 129.109545][ T40] audit: type=1400 audit(1774409514.411:656): avc: denied { load_policy } for pid=9539 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.111236][ T9541] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 129.119370][ T9541] SELinux: failed to load policy [ 129.200855][ T40] audit: type=1400 audit(1774409514.501:657): avc: denied { bind } for pid=9554 comm="syz.6.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 129.275018][ T9559] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.278270][ T9559] block device autoloading is deprecated and will be removed. [ 129.283142][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.938'. [ 129.287068][ T40] audit: type=1400 audit(1774409514.581:658): avc: denied { ioctl } for pid=9554 comm="syz.6.938" path="/43/file0/file0" dev="fuse" ino=64 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 129.407191][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.430740][ T9574] xt_cgroup: path and classid specified [ 129.547206][ T34] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 129.568276][ T59] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 129.571170][ T59] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.574638][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 129.578976][ T9577] ptrace attach of "/syz-executor exec"[9581] was attempted by "/syz-executor exec"[9577] [ 129.583481][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.586637][ T59] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.594075][ T59] usb 6-1: Product: syz [ 129.595490][ T59] usb 6-1: Manufacturer: syz [ 129.607134][ T59] usb 6-1: SerialNumber: syz [ 129.611108][ T59] usb 6-1: config 0 descriptor?? [ 129.614167][ T59] hub 6-1:0.0: bad descriptor, ignoring hub [ 129.617393][ T59] hub 6-1:0.0: probe with driver hub failed with error -5 [ 129.624286][ T59] usb 6-1: selecting invalid altsetting 0 [ 129.647266][ T5952] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.647376][ T5942] Bluetooth: hci0: command tx timeout [ 129.683751][ T9584] overlayfs: missing 'lowerdir' [ 129.688845][ T9584] xt_hashlimit: max too large, truncated to 1048576 [ 129.691449][ T40] audit: type=1400 audit(1774409514.991:659): avc: denied { kexec_image_load } for pid=9582 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 129.723899][ T34] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 129.726330][ T34] usb 11-1: can't read configurations, error -71 [ 129.818972][ T40] audit: type=1326 audit(1774409515.121:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.1.935" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7ff0ee39c799 code=0x0 [ 129.975498][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'. [ 129.997294][ T2303] usb 6-1: USB disconnect, device number 4 [ 130.697137][ T5952] Bluetooth: hci2: command tx timeout [ 131.377801][ T9633] netlink: 'syz.6.962': attribute type 11 has an invalid length. [ 131.549123][ T9635] devpts: Bad value for 'max' [ 131.647562][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 131.649843][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.678289][ T9638] trusted_key: encrypted_key: insufficient parameters specified [ 131.737743][ T63] Bluetooth: hci0: command tx timeout [ 131.857067][ T40] audit: type=1400 audit(1774409517.151:661): avc: denied { read } for pid=9650 comm="syz.6.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.877993][ T40] audit: type=1400 audit(1774409517.151:662): avc: denied { map } for pid=9650 comm="syz.6.969" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.109658][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.974'. [ 132.303523][ T9678] xt_nfacct: accounting object `syz0' does not exist [ 132.359419][ T63] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28 [ 132.408443][ T9687] netlink: 'syz.6.982': attribute type 10 has an invalid length. [ 132.451849][ T9687] team0: Device wg1 is of different type [ 132.571363][ T9711] netlink: 'syz.2.989': attribute type 3 has an invalid length. [ 132.573930][ T9710] netlink: 'syz.2.989': attribute type 3 has an invalid length. [ 132.907189][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.057369][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 133.072755][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.075844][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.087247][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.090510][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.094531][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.097506][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.265206][ T9737] overlayfs: invalid origin (0000) [ 133.304532][ T39] usb 6-1: GET_CAPABILITIES returned 0 [ 133.306362][ T39] usbtmc 6-1:16.0: can't read capabilities [ 133.341164][ T9747] overlayfs: missing 'lowerdir' [ 133.548863][ T39] usb 6-1: USB disconnect, device number 5 [ 133.590425][ T9765] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 133.603152][ T9765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.608602][ T9765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9765 comm=syz.2.1004 [ 133.673233][ T9770] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 133.817369][ T63] Bluetooth: hci0: command tx timeout [ 133.841540][ T1188] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.845306][ T1188] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.977529][ T1188] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.981288][ T1188] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.008961][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.013680][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.016877][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.020036][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.022780][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.148669][ T1188] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.153690][ T1188] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.197359][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 134.253608][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.256577][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.259823][ T9792] bridge_slave_0: entered allmulticast mode [ 134.263227][ T9792] bridge_slave_0: entered promiscuous mode [ 134.266982][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.270378][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.273234][ T9792] bridge_slave_1: entered allmulticast mode [ 134.276404][ T9792] bridge_slave_1: entered promiscuous mode [ 134.288334][ T9812] 9p: Could not find request transport: virtao [ 134.292912][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.298187][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.314171][ T9792] team0: Port device team_slave_0 added [ 134.317477][ T9792] team0: Port device team_slave_1 added [ 134.332628][ T1188] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.336120][ T1188] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.357199][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.359412][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.367667][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.371935][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.374399][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.382647][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.405184][ T9792] hsr_slave_0: entered promiscuous mode [ 134.407624][ T9792] hsr_slave_1: entered promiscuous mode [ 134.409819][ T9792] debugfs: 'hsr0' already exists in 'hsr' [ 134.411701][ T9792] Cannot create hsr debugfs directory [ 134.485273][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 134.485285][ T40] audit: type=1400 audit(1774409519.781:665): avc: denied { create } for pid=9829 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.503259][ T40] audit: type=1400 audit(1774409519.801:666): avc: denied { connect } for pid=9829 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.543503][ T1188] bridge_slave_1: left allmulticast mode [ 134.545351][ T1188] bridge_slave_1: left promiscuous mode [ 134.548048][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.553402][ T1188] bridge_slave_0: left allmulticast mode [ 134.555194][ T1188] bridge_slave_0: left promiscuous mode [ 134.558681][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.562910][ T40] audit: type=1400 audit(1774409519.861:667): avc: denied { write } for pid=9829 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.754092][ T1188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.758817][ T1188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.762574][ T1188] bond0 (unregistering): Released all slaves [ 134.888271][ T9792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 134.920651][ T9792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 134.926476][ T9842] openvswitch: netlink: IP tunnel dst address not specified [ 134.929445][ T9792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 134.957958][ T9792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 134.980216][ T40] audit: type=1400 audit(1774409520.271:668): avc: denied { map } for pid=9846 comm="syz.7.1025" path="socket:[35338]" dev="sockfs" ino=35338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.003138][ T40] audit: type=1400 audit(1774409520.271:669): avc: denied { read } for pid=9846 comm="syz.7.1025" path="socket:[35338]" dev="sockfs" ino=35338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.037265][ T40] audit: type=1400 audit(1774409520.311:670): avc: denied { read } for pid=9854 comm="syz.7.1029" dev="nsfs" ino=4026533642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.044991][ T40] audit: type=1400 audit(1774409520.311:671): avc: denied { open } for pid=9854 comm="syz.7.1029" path="ipc:[4026533642]" dev="nsfs" ino=4026533642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.076563][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.102368][ T1188] hsr_slave_0: left promiscuous mode [ 135.104572][ T1188] hsr_slave_1: left promiscuous mode [ 135.106584][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.110153][ T1188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.112512][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.119277][ T1188] veth1_macvtap: left promiscuous mode [ 135.121392][ T1188] veth0_macvtap: left promiscuous mode [ 135.123159][ T1188] veth1_vlan: left promiscuous mode [ 135.125681][ T1188] veth0_vlan: left promiscuous mode [ 135.245578][ T1188] team0 (unregistering): Port device team_slave_1 removed [ 135.254480][ T1188] team0 (unregistering): Port device team_slave_0 removed [ 135.335942][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.338536][ T40] audit: type=1400 audit(1774409520.641:672): avc: denied { read } for pid=9895 comm="syz.1.1033" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.340872][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.347848][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.358773][ T40] audit: type=1400 audit(1774409520.641:673): avc: denied { open } for pid=9895 comm="syz.1.1033" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.367862][ T40] audit: type=1400 audit(1774409520.641:674): avc: denied { ioctl } for pid=9895 comm="syz.1.1033" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.368315][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.376352][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 135.377906][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.555790][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.587427][ T9922] Malformed UNC in devname [ 135.587427][ T9922] [ 135.589658][ T9922] CIFS: VFS: Malformed UNC in devname [ 135.752504][ T9792] veth0_vlan: entered promiscuous mode [ 135.765109][ T9792] veth1_vlan: entered promiscuous mode [ 135.840665][ T9792] veth0_macvtap: entered promiscuous mode [ 135.844661][ T9792] veth1_macvtap: entered promiscuous mode [ 135.854071][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.869411][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.877983][ T1149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.883273][ T1149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.886160][ T1149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.897196][ T1149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.039868][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.043322][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.048292][ T5952] Bluetooth: hci2: command tx timeout [ 136.080429][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.083512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.142338][ T9960] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.282597][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 136.298718][ T9966] hsr_slave_1 (unregistering): left promiscuous mode [ 136.334242][ T9975] netlink: 'syz.1.1042': attribute type 39 has an invalid length. [ 136.478083][ T9979] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 136.751175][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 136.869860][T10001] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 137.731475][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.127375][ T5952] Bluetooth: hci2: command tx timeout [ 139.288534][ T9970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.379280][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 139.383261][T10024] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 139.385620][T10024] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1059'. [ 139.389383][T10024] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1059'. [ 139.424844][T10028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.607075][ T6121] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 139.700400][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 139.777129][ T6121] usb 12-1: Using ep0 maxpacket: 8 [ 139.787700][ T6121] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 139.791533][ T6121] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.811757][ T6121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 139.814557][ T6121] pvrusb2: ********** [ 139.816235][ T6121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 139.820845][ T6121] pvrusb2: Important functionality might not be entirely working. [ 139.823882][ T6121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 139.828491][ T6121] pvrusb2: ********** qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x16c000) [ 139.862943][T10045] PM: Enabling pm_trace changes system date and time during resume. [ 139.862943][T10045] PM: Correct system time has to be restored manually after resume. [ 139.875752][T10045] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 139.883769][T10045] netlink: 'syz.1.1067': attribute type 4 has an invalid length. [ 139.907924][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 139.910042][ T1115] ata1: failed to read log page 10h (errno=-5) [ 139.911977][ T1115] ata1.00: NCQ disabled due to excessive errors [ 139.913868][ T1115] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 139.916202][ T1115] ata1.00: irq_stat 0x41000000 [ 139.919060][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 139.920979][ T1115] ata1.00: cmd 60/60:58:06:37:01/0b:00:00:00:00/40 tag 11 ncq dma 1490944 in [ 139.920979][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 139.926091][ T1115] ata1.00: status: { DRDY } [ 139.928130][ T1115] ata1.00: failed command: READ FPDMA QUEUED [ 139.929951][ T1115] ata1.00: cmd 60/b0:60:66:42:01/03:00:00:00:00/40 tag 12 ncq dma 483328 in [ 139.929951][ T1115] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 139.935062][ T1115] ata1.00: status: { DRDY } [ 139.936483][ T1115] ata1.00: error: { ABRT } [ 139.938892][ T1115] ata1.00: configured for UDMA/100 [ 139.940732][ T1115] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.943664][ T1115] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 139.946050][ T1115] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 139.949497][ T1115] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 37 06 00 0b 60 00 [ 139.952044][ T1115] I/O error, dev sda, sector 79622 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 139.955229][ T1115] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.958586][ T1115] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 139.961064][ T1115] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 139.963586][ T1115] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 01 42 66 00 03 b0 00 [ 139.966076][ T1115] I/O error, dev sda, sector 82534 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2 [ 139.970236][ T1115] ata1: EH complete [ 139.981032][T10051] fuse: Bad value for 'fd' [ 139.983629][T10051] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1070'. [ 140.016776][ T2493] pvrusb2: Invalid write control endpoint [ 140.022162][ T6121] usb 12-1: USB disconnect, device number 3 [ 140.029771][T10019] pvrusb2: Invalid write control endpoint [ 140.043777][ T2493] pvrusb2: Invalid write control endpoint [ 140.045583][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.049363][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.055622][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.059305][ T2493] pvrusb2: Device being rendered inoperable [ 140.062140][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 140.066853][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.075317][ T2493] pvrusb2: Attached sub-driver cx25840 [ 140.082019][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 140.085686][T10056] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.089174][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 140.132276][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 140.132287][ T40] audit: type=1326 audit(1774409525.431:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.1.1073" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0ee39c799 code=0x7ffe0000 [ 140.217247][ T5952] Bluetooth: hci2: command tx timeout [ 140.544581][T10073] netlink: 'syz.2.1076': attribute type 30 has an invalid length. [ 140.585088][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1077'. [ 140.588174][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1077'. [ 140.615424][T10073] bond5: option arp_missed_max: invalid value (0) [ 140.648197][T10073] bond5: option arp_missed_max: allowed values 1 - 255 [ 140.656162][ T40] audit: type=1400 audit(1774409525.941:680): avc: denied { wake_alarm } for pid=10074 comm="syz.8.1077" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.659033][T10073] bond5 (unregistering): Released all slaves [ 140.997263][ T10] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 141.149768][ T10] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.152819][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.155433][ T10] usb 13-1: Product: syz [ 141.156929][ T10] usb 13-1: Manufacturer: syz [ 141.159807][ T10] usb 13-1: SerialNumber: syz [ 141.165739][ T10] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.184240][ T5984] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.378282][T10093] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 141.393459][ T10] usb 13-1: USB disconnect, device number 2 [ 141.488910][ T40] audit: type=1400 audit(1774409526.791:681): avc: denied { read } for pid=10094 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.897754][T10120] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 141.901257][T10120] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 141.937286][ T40] audit: type=1400 audit(1774409527.221:682): avc: denied { remount } for pid=10119 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.128252][T10131] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1092'. [ 142.210380][ T5984] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 142.212749][ T5984] ath9k_htc: Failed to initialize the device [ 142.219585][ T10] usb 13-1: ath9k_htc: USB layer deinitialized [ 142.241584][T10140] batman_adv: batadv0: Adding interface: dummy0 [ 142.243523][T10140] batman_adv: batadv0: Interface activated: dummy0 [ 142.264630][T10140] batadv0: mtu less than device minimum [ 142.266931][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.271008][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.274694][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.278573][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.281995][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.285529][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.289177][ T5952] Bluetooth: hci2: command tx timeout [ 142.289213][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.294620][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.298253][T10140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (4) [ 142.339329][T10147] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 142.356189][T10147] sctp: [Deprecated]: syz.2.1095 (pid 10147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.356189][T10147] Use struct sctp_sack_info instead [ 142.459614][T10162] Cannot find add_set index 0 as target [ 142.841581][ T40] audit: type=1400 audit(1774409528.141:683): avc: denied { module_load } for pid=10167 comm="syz.8.1101" path="/sys/power/pm_debug_messages" dev="sysfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 142.997126][ T24] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 143.092723][T10179] bond36 (unregistering): Released all slaves [ 143.147151][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 143.150332][ T24] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 143.153184][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.163999][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 143.166529][ T24] pvrusb2: ********** [ 143.168016][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 143.171247][ T24] pvrusb2: Important functionality might not be entirely working. [ 143.173656][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 143.177403][ T24] pvrusb2: ********** [ 143.232580][T10187] netlink: 'syz.8.1108': attribute type 39 has an invalid length. [ 143.248601][ T40] audit: type=1400 audit(1774409528.551:684): avc: denied { watch watch_reads } for pid=10190 comm="syz.1.1109" path="pipe:[35822]" dev="pipefs" ino=35822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.320229][ T40] audit: type=1400 audit(1774409528.621:685): avc: denied { watch } for pid=10193 comm="syz.2.1110" path="/347/file0" dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.364525][ T2493] pvrusb2: Invalid write control endpoint [ 143.365237][ T24] usb 12-1: USB disconnect, device number 4 [ 143.378829][T10165] pvrusb2: Invalid write control endpoint [ 143.402885][ T2493] pvrusb2: Invalid write control endpoint [ 143.405301][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 143.412009][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 143.415450][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 143.420658][ T2493] pvrusb2: Device being rendered inoperable [ 143.423147][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 143.425984][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 143.430147][ T2493] pvrusb2: Attached sub-driver cx25840 [ 143.432463][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.436494][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.459962][T10205] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 143.545547][T10215] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1116'. [ 143.591283][T10217] ªªªªªª: renamed from wg2 [ 143.684517][T10223] geneve1: entered allmulticast mode [ 144.227227][ T6004] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 144.393158][ T6004] usb 12-1: Using ep0 maxpacket: 8 [ 144.396426][ T6004] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.401824][ T6004] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.405460][ T6004] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.408838][ T6004] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.413003][ T6004] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.416452][ T6004] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.629384][ T6004] usb 12-1: GET_CAPABILITIES returned 0 [ 144.631196][ T6004] usbtmc 12-1:16.0: can't read capabilities [ 144.768720][ T40] audit: type=1400 audit(1774409530.071:686): avc: denied { relabelfrom } for pid=10250 comm="syz.8.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.774877][ T40] audit: type=1400 audit(1774409530.071:687): avc: denied { relabelto } for pid=10250 comm="syz.8.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.836926][ T6004] usb 12-1: USB disconnect, device number 5 [ 144.862001][T10253] netlink: 'syz.8.1129': attribute type 11 has an invalid length. [ 144.865238][T10253] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.1129'. [ 144.877231][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 144.924947][ T40] audit: type=1400 audit(1774409530.221:688): avc: denied { append } for pid=10261 comm="syz.8.1131" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.946793][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1131'. [ 145.027188][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 145.030783][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 145.034497][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.045643][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 145.048618][ T24] pvrusb2: ********** [ 145.050280][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 145.054238][ T24] pvrusb2: Important functionality might not be entirely working. [ 145.057916][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 145.062786][ T24] pvrusb2: ********** [ 145.168230][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 145.171372][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 145.245463][ T2493] pvrusb2: Invalid write control endpoint [ 145.248043][ T24] usb 6-1: USB disconnect, device number 6 [ 145.257872][T10249] pvrusb2: Invalid write control endpoint [ 145.282891][ T2493] pvrusb2: Invalid write control endpoint [ 145.285195][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 145.289145][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.292172][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.296131][ T2493] pvrusb2: Device being rendered inoperable [ 145.299503][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 145.302315][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 145.310859][ T2493] pvrusb2: Attached sub-driver cx25840 [ 145.313113][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.317845][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.443479][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 145.449124][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 145.451204][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 145.497353][T10274] No such timeout policy "syz1" [ 145.520732][T10289] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 145.537899][T10289] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 145.968745][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 145.970687][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 146.534626][T10266] ceph: No mds server is up or the cluster is laggy [ 146.560041][T10330] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 146.562924][T10331] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 146.573654][T10331] bond36: entered promiscuous mode [ 146.575621][T10331] 8021q: adding VLAN 0 to HW filter on device bond36 [ 147.412345][T10336] net_ratelimit: 11 callbacks suppressed [ 147.412364][T10336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.482825][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1155'. [ 147.575462][T10357] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 147.586955][T10357] bond37: entered promiscuous mode [ 147.589144][T10357] 8021q: adding VLAN 0 to HW filter on device bond37 [ 147.611332][T10357] 8021q: adding VLAN 0 to HW filter on device bond37 [ 147.614511][T10357] bond37: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.619558][T10357] bond37: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 147.625912][T10357] bond37: (slave vxcan3): making interface the new active one [ 147.629250][T10357] vxcan3: entered promiscuous mode [ 147.633225][T10357] vxcan3: left promiscuous mode [ 147.658339][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 147.683587][ T9] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 147.712609][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 147.715879][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 147.719413][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 147.743217][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 147.743232][ T40] audit: type=1400 audit(1774409533.041:691): avc: denied { shutdown } for pid=10376 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.837131][ T9] usb 13-1: Using ep0 maxpacket: 8 [ 147.841908][ T9] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.856385][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.869078][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.874677][ T9] pvrusb2: ********** [ 147.876104][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.880944][ T9] pvrusb2: Important functionality might not be entirely working. [ 147.883490][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.889326][ T9] pvrusb2: ********** [ 147.893652][T10409] vivid-002: disconnect [ 147.896325][T10408] vivid-002: reconnect [ 148.069981][ T2493] pvrusb2: Invalid write control endpoint [ 148.070740][ T9] usb 13-1: USB disconnect, device number 3 [ 148.088891][ T2493] pvrusb2: Invalid write control endpoint [ 148.090727][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.093650][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.096236][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.099455][ T2493] pvrusb2: Device being rendered inoperable [ 148.102331][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 148.104589][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 148.108540][ T2493] pvrusb2: Attached sub-driver cx25840 [ 148.110502][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.113666][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.123670][T10342] pvrusb2: Attempted to execute control transfer when device not ok [ 148.187124][ T6005] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 148.348519][ T6005] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.352355][ T6005] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.355654][ T6005] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.358895][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.365850][T10415] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.375700][ T6005] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.445297][T10434] netlink: 'syz.7.1172': attribute type 3 has an invalid length. [ 148.549028][T10436] netlink: 'syz.7.1173': attribute type 2 has an invalid length. [ 148.552198][T10436] netlink: 'syz.7.1173': attribute type 1 has an invalid length. [ 148.648268][ T6005] usb 6-1: USB disconnect, device number 7 [ 148.730485][T10446] SELinux: syz.7.1177 (10446) set checkreqprot to 1. This is no longer supported. [ 148.737112][ T40] audit: type=1400 audit(1774409534.031:692): avc: denied { setcheckreqprot } for pid=10445 comm="syz.7.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 148.782037][T10450] netlink: 'syz.7.1179': attribute type 11 has an invalid length. [ 148.835817][T10458] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 148.866779][ T40] audit: type=1400 audit(1774409534.161:693): avc: denied { write } for pid=10464 comm="syz.7.1182" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 148.905478][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1183'. [ 149.197119][ T6005] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 149.216178][T10473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1186'. [ 149.222969][ T40] audit: type=1400 audit(1774409534.521:694): avc: denied { getopt } for pid=10472 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.357206][ T6005] usb 12-1: Using ep0 maxpacket: 16 [ 149.361850][ T6005] usb 12-1: config 6 has an invalid interface number: 227 but max is 0 [ 149.364446][ T6005] usb 12-1: config 6 has an invalid interface number: 105 but max is 0 [ 149.367084][ T6005] usb 12-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 149.370040][ T6005] usb 12-1: config 6 has no interface number 0 [ 149.372281][ T6005] usb 12-1: config 6 has no interface number 1 [ 149.374211][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 149.377991][ T6005] usb 12-1: config 6 interface 227 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 149.381379][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x6 has invalid maxpacket 72, setting to 64 [ 149.384757][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 149.386702][T10482] 9p: Invalid uid '0x00000000ffffffff' [ 149.388522][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 149.393243][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 149.393261][ T6005] usb 12-1: config 6 interface 227 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 149.393276][ T6005] usb 12-1: config 6 interface 227 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 149.404530][ T6005] usb 12-1: too many endpoints for config 6 interface 105 altsetting 77: 97, using maximum allowed: 30 [ 149.408136][ T6005] usb 12-1: config 6 interface 105 altsetting 77 endpoint 0xE has invalid maxpacket 1560, setting to 64 [ 149.411544][ T6005] usb 12-1: config 6 interface 105 altsetting 77 bulk endpoint 0xA has invalid maxpacket 16 [ 149.414695][ T6005] usb 12-1: config 6 interface 105 altsetting 77 has an invalid descriptor for endpoint zero, skipping [ 149.418271][ T6005] usb 12-1: config 6 interface 105 altsetting 77 has a duplicate endpoint with address 0x7, skipping [ 149.418285][ T6005] usb 12-1: config 6 interface 105 altsetting 77 has a duplicate endpoint with address 0xB, skipping [ 149.418297][ T6005] usb 12-1: config 6 interface 105 altsetting 77 endpoint 0xC has invalid maxpacket 479, setting to 64 [ 149.418311][ T6005] usb 12-1: config 6 interface 105 altsetting 77 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 149.418325][ T6005] usb 12-1: config 6 interface 105 altsetting 77 has 7 endpoint descriptors, different from the interface descriptor's value: 97 [ 149.418344][ T6005] usb 12-1: config 6 interface 227 has no altsetting 0 [ 149.418357][ T6005] usb 12-1: config 6 interface 105 has no altsetting 0 [ 149.420615][ T6005] usb 12-1: Dual-Role OTG device on HNP port [ 149.442648][ T6005] usb 12-1: New USB device found, idVendor=1b75, idProduct=9170, bcdDevice=59.98 [ 149.442664][ T6005] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.448209][ T6005] usb 12-1: Product: syz [ 149.448220][ T6005] usb 12-1: Manufacturer: syz [ 149.448228][ T6005] usb 12-1: SerialNumber: syz [ 149.493512][ T5952] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 149.563400][T10493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1193'. [ 149.581842][T10493] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 149.625132][T10499] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 149.634632][T10499] romfs: unable to set blocksize [ 149.634632][T10499] [ 149.637436][T10507] tls_set_device_offload_rx: netdev not found [ 149.677138][T10510] binder: 10508:10510 ioctl 4018620d 0 returned -22 [ 149.679414][ T40] audit: type=1400 audit(1774409534.971:695): avc: denied { set_context_mgr } for pid=10508 comm="syz.8.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.689663][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 149.693262][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 149.695428][T10512] sit2: entered allmulticast mode [ 149.819547][ T40] audit: type=1400 audit(1774409535.121:696): avc: denied { bind } for pid=10523 comm="syz.8.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.825678][ T40] audit: type=1400 audit(1774409535.121:697): avc: denied { name_bind } for pid=10523 comm="syz.8.1203" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 149.837135][ T40] audit: type=1400 audit(1774409535.121:698): avc: denied { node_bind } for pid=10523 comm="syz.8.1203" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 149.967241][ T6003] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 149.968940][T10538] sp0: Synchronizing with TNC [ 149.980440][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 149.983771][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 149.986902][T10538] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 149.996979][T10538] UDF-fs: Scanning with blocksize 512 failed [ 149.999938][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 150.003410][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 150.006422][T10538] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 150.010817][T10538] UDF-fs: Scanning with blocksize 1024 failed [ 150.013368][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 150.016444][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 150.019758][T10538] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 150.022452][T10538] UDF-fs: Scanning with blocksize 2048 failed [ 150.024871][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 150.028160][T10538] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 150.031486][T10538] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 150.033897][T10538] UDF-fs: Scanning with blocksize 4096 failed [ 150.035839][T10538] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 150.051041][T10543] NILFS (nullb0): couldn't find nilfs on the device [ 150.118804][T10549] overlayfs: missing 'lowerdir' [ 150.138210][ T6003] usb 6-1: Using ep0 maxpacket: 8 [ 150.142579][ T6003] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 150.145573][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.146008][T10551] netlink: 'syz.8.1212': attribute type 1 has an invalid length. [ 150.146017][T10552] netlink: 'syz.8.1212': attribute type 1 has an invalid length. [ 150.160374][ T6003] pvrusb2: Hardware description: Terratec Grabster AV400 [ 150.162613][ T6003] pvrusb2: ********** [ 150.163888][ T6003] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 150.167379][ T6003] pvrusb2: Important functionality might not be entirely working. [ 150.169810][ T6003] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 150.171893][T10552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.173335][ T6003] pvrusb2: ********** [ 150.191245][T10551] bond1: (slave geneve2): making interface the new active one [ 150.194369][T10551] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 150.211223][T10551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10551 comm=syz.8.1212 [ 150.216939][T10560] all: renamed from bridge_slave_0 (while UP) [ 150.233275][T10565] team0: Device ªªªªª is loopback device. Loopback devices can't be added as a team port [ 150.237671][T10565] A link change request failed with some changes committed already. Interface ªªªªª may have been left with an inconsistent configuration, please check. [ 150.284105][ T40] audit: type=1400 audit(1774409535.579:699): avc: denied { bind } for pid=10573 comm="syz.8.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.297081][ T40] audit: type=1400 audit(1774409535.579:700): avc: denied { connect } for pid=10573 comm="syz.8.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.340890][T10583] trusted_key: encrypted_key: master key parameter '' is invalid [ 150.345597][T10583] sctp: [Deprecated]: syz.8.1221 (pid 10583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.345597][T10583] Use struct sctp_sack_info instead [ 150.353006][T10583] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 150.355575][T10583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.358239][ T2493] pvrusb2: Invalid write control endpoint [ 150.360726][T10583] vhci_hcd vhci_hcd.0: Device attached [ 150.363154][T10584] vhci_hcd: cannot find the pending unlink 4 [ 150.363684][ T6003] usb 6-1: USB disconnect, device number 8 [ 150.366028][T10583] overlayfs: unescaped trailing colons in lowerdir mount option. [ 150.376621][T10584] vhci_hcd: connection closed [ 150.379054][ T7759] vhci_hcd vhci_hcd.8: stop threads [ 150.382508][ T7759] vhci_hcd vhci_hcd.8: release socket [ 150.384844][ T7759] vhci_hcd vhci_hcd.8: disconnect device [ 150.391740][ T2493] pvrusb2: Invalid write control endpoint [ 150.394284][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 150.398393][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 150.401182][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 150.404443][ T2493] pvrusb2: Device being rendered inoperable [ 150.406403][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 150.408834][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 150.411740][ T2493] pvrusb2: Attached sub-driver cx25840 [ 150.413570][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 150.416830][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 150.456974][ T6005] carl9170 12-1:6.105: probe with driver carl9170 failed with error -22 [ 150.468207][ T6005] usb 12-1: USB disconnect, device number 6 [ 150.993108][T10632] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 151.036475][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.194073][T10648] misc userio: No port type given on /dev/userio [ 151.291246][T10650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=10650 comm=syz.7.1239 [ 151.632896][T10680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10680 comm=syz.2.1248 [ 151.644449][T10680] dvmrp0: entered allmulticast mode [ 151.757061][T10695] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 151.757061][T10695] The task syz.1.1247 (10695) triggered the difference, watch for misbehavior. [ 152.139762][ T1459] IPVS: starting estimator thread 0... [ 152.199382][T10728] netlink: 'syz.8.1260': attribute type 11 has an invalid length. [ 152.247150][T10726] IPVS: using max 42 ests per chain, 100800 per kthread [ 153.240486][T10778] __nla_validate_parse: 5 callbacks suppressed [ 153.240498][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1273'. [ 153.247444][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1273'. [ 153.280039][ T106] bond0: (slave bond_slave_0): interface is now down [ 153.283154][ T106] bond0: (slave bond_slave_1): interface is now down [ 153.296379][ T106] bond0: now running without any active interface! [ 153.306642][ T1188] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 153.314804][ T1188] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 153.326198][ T1188] bond0: active interface up! [ 153.517840][T10790] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 153.623668][T10800] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 153.680386][T10797] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.689870][T10802] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1281'. [ 154.051700][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 154.081103][T10826] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 154.232183][T10845] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 154.236426][T10845] macvlan0: entered allmulticast mode [ 154.243813][T10845] veth1_vlan: entered allmulticast mode [ 154.249965][T10845] team0: Port device macvlan0 added [ 154.288416][ T5952] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 154.292434][ T5952] Bluetooth: hci2: Injecting HCI hardware error event [ 154.297528][ T63] Bluetooth: hci2: hardware error 0x00 [ 154.343070][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 154.343082][ T40] audit: type=1400 audit(1774409539.639:711): avc: denied { getopt } for pid=10856 comm="syz.7.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.397047][ T6003] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 154.398108][ T40] audit: type=1400 audit(1774409539.699:712): avc: denied { listen } for pid=10856 comm="syz.7.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 154.577157][ T6003] usb 13-1: Using ep0 maxpacket: 8 [ 154.580116][ T6003] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.583459][ T6003] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.590167][ T6003] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.593661][ T6003] pvrusb2: ********** [ 154.594986][ T6003] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.600256][ T6003] pvrusb2: Important functionality might not be entirely working. [ 154.602800][ T6003] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.606495][ T6003] pvrusb2: ********** [ 154.648422][T10871] tmpfs: Unknown parameter 'cpu.stat' [ 154.790933][ T2493] pvrusb2: Invalid write control endpoint [ 154.804894][ T6003] usb 13-1: USB disconnect, device number 4 [ 154.815934][ T2493] pvrusb2: Invalid write control endpoint [ 154.826999][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.829957][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.832374][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.835508][ T2493] pvrusb2: Device being rendered inoperable [ 154.838085][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 154.840903][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.846431][ T2493] pvrusb2: Attached sub-driver cx25840 [ 154.850473][T10892] pvrusb2: Attempted to execute control transfer when device not ok [ 154.852573][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.857852][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.015109][ T40] audit: type=1400 audit(1774409540.309:713): avc: denied { append } for pid=10900 comm="syz.7.1309" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 155.110291][ T40] audit: type=1400 audit(1774409540.409:714): avc: denied { append } for pid=10910 comm="syz.7.1311" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.194533][ T40] audit: type=1400 audit(1774409540.489:715): avc: denied { audit_read } for pid=10917 comm="syz.7.1313" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.339578][ T40] audit: type=1400 audit(1774409540.639:716): avc: denied { read write } for pid=10929 comm="syz.1.1316" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 155.367721][ T40] audit: type=1400 audit(1774409540.639:717): avc: denied { open } for pid=10929 comm="syz.1.1316" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 155.391428][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1315'. [ 155.720815][T10974] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1325'. [ 155.724510][T10974] netlink: 'syz.2.1325': attribute type 5 has an invalid length. [ 155.736455][T10977] set match dimension is over the limit! [ 155.913490][ T40] audit: type=1400 audit(1774409541.209:718): avc: denied { execstack } for pid=10993 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 155.913598][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 156.005385][T11007] gfs2: error -5 reading superblock [ 156.077051][ T40] audit: type=1400 audit(1774409541.369:719): avc: denied { setopt } for pid=11013 comm="syz.7.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.125841][ T40] audit: type=1400 audit(1774409541.419:720): avc: denied { relabelfrom } for pid=11015 comm="syz.7.1341" name="NETLINK" dev="sockfs" ino=40939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.125968][T11016] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 156.356753][ T1188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.362627][ T1188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.367891][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 156.432245][ T1188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.435659][ T1188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.473303][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.479016][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.482506][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.485437][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.489242][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.532233][ T1188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.536190][ T1188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.619568][ T1188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.627113][ T1188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.651309][T11053] netlink: 'syz.7.1351': attribute type 4 has an invalid length. [ 156.685058][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 156.693938][T11063] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1354'. [ 156.708709][T11063] netlink: 'syz.7.1354': attribute type 11 has an invalid length. [ 156.712289][T11063] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1354'. [ 156.721587][T11027] chnl_net:caif_netlink_parms(): no params data found [ 156.851522][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.853911][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.856253][T11027] bridge_slave_0: entered allmulticast mode [ 156.870186][T11027] bridge_slave_0: entered promiscuous mode [ 156.877545][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.883692][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.886513][T11027] bridge_slave_1: entered allmulticast mode [ 156.891324][T11027] bridge_slave_1: entered promiscuous mode [ 156.899130][ T1188] bridge_slave_1: left allmulticast mode [ 156.901864][ T1188] bridge_slave_1: left promiscuous mode [ 156.907418][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.921494][ T1188] bridge_slave_0: left allmulticast mode [ 156.926089][ T1188] bridge_slave_0: left promiscuous mode [ 156.931648][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.043151][T11082] 9p: Could not find request transport: v^Uirtio [ 157.298408][T11088] xt_CT: No such helper "pptp" [ 157.893947][ T1188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.899548][ T1188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.903362][ T1188] bond0 (unregistering): Released all slaves [ 157.910341][ T1188] bond1 (unregistering): (slave veth3): Releasing active interface [ 157.914141][ T1188] bond1 (unregistering): (slave dummy0): Releasing active interface [ 157.918177][ T1188] bond1 (unregistering): Released all slaves [ 157.924934][ T1188] bond2 (unregistering): Released all slaves [ 157.933427][ T1188] bond3 (unregistering): Released all slaves [ 157.940919][ T1188] bond4 (unregistering): Released all slaves [ 157.949844][ T1188] bond5 (unregistering): Released all slaves [ 157.956708][ T1188] bond6 (unregistering): Released all slaves [ 157.965110][ T1188] bond7 (unregistering): Released all slaves [ 157.973541][ T1188] bond8 (unregistering): Released all slaves [ 157.982571][ T1188] bond9 (unregistering): Released all slaves [ 157.994080][ T1188] bond10 (unregistering): Released all slaves [ 158.001258][ T1188] bond11 (unregistering): Released all slaves [ 158.010129][ T1188] bond12 (unregistering): Released all slaves [ 158.017342][ T1188] bond13 (unregistering): Released all slaves [ 158.029547][ T1188] bond14 (unregistering): Released all slaves [ 158.041607][ T1188] bond15 (unregistering): Released all slaves [ 158.051764][ T1188] bond16 (unregistering): Released all slaves [ 158.061278][ T1188] bond17 (unregistering): Released all slaves [ 158.068285][ T1188] bond18 (unregistering): Released all slaves [ 158.075680][ T1188] bond19 (unregistering): Released all slaves [ 158.088599][ T1188] bond20 (unregistering): Released all slaves [ 158.095577][ T1188] bond21 (unregistering): Released all slaves [ 158.102520][ T1188] bond22 (unregistering): Released all slaves [ 158.110061][ T1188] bond23 (unregistering): Released all slaves [ 158.117127][ T1188] bond24 (unregistering): Released all slaves [ 158.123961][ T1188] bond25 (unregistering): Released all slaves [ 158.136893][ T1188] bond26 (unregistering): Released all slaves [ 158.149158][ T1188] bond27 (unregistering): Released all slaves [ 158.159767][ T1188] bond28 (unregistering): Released all slaves [ 158.170935][ T1188] bond29 (unregistering): Released all slaves [ 158.181020][ T1188] bond30 (unregistering): Released all slaves [ 158.191216][ T1188] bond31 (unregistering): Released all slaves [ 158.198966][ T1188] bond32 (unregistering): Released all slaves [ 158.206174][ T1188] bond33 (unregistering): Released all slaves [ 158.213912][ T1188] bond34 (unregistering): Released all slaves [ 158.221820][ T1188] bond35 (unregistering): Released all slaves [ 158.229260][ T1188] bond36 (unregistering): Released all slaves [ 158.236338][ T1188] bond37 (unregistering): Released all slaves [ 158.276696][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.283075][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.306005][T11027] team0: Port device team_slave_0 added [ 158.313603][T11027] team0: Port device team_slave_1 added [ 158.363510][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.365774][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.374890][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.386079][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.389174][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.390646][T11101] sp0: Synchronizing with TNC [ 158.397888][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.454904][T11027] hsr_slave_0: entered promiscuous mode [ 158.468995][T11027] hsr_slave_1: entered promiscuous mode [ 158.493531][ T1188] tipc: Disabling bearer [ 158.506317][ T1188] tipc: Left network mode [ 158.537085][ T63] Bluetooth: hci1: command tx timeout [ 158.582889][T11112] tmpfs: Bad value for 'nr_blocks' [ 158.826731][T11027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 158.833050][T11027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 158.837344][T11027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 158.842518][T11027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 158.894126][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.908282][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.921116][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.923417][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.934947][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.938467][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.962853][ T1188] hsr_slave_0: left promiscuous mode [ 158.964973][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.977344][ T1188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.988372][ T1188] pim6reg (unregistering): left allmulticast mode [ 159.111638][ T1188] team0 (unregistering): Port device team_slave_1 removed [ 159.122566][ T1188] team0 (unregistering): Port device team_slave_0 removed [ 159.227437][ T6004] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 159.355617][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.377076][ T6004] usb 12-1: Using ep0 maxpacket: 32 [ 159.394594][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 159.399656][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.402958][ T6004] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 159.406784][ T6004] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 159.412432][ T6004] usb 12-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 159.416523][ T6004] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.424586][ T6004] usb 12-1: Product: syz [ 159.426859][ T6004] usb 12-1: Manufacturer: syz [ 159.429143][ T6004] usb 12-1: SerialNumber: syz [ 159.433040][ T6004] usb 12-1: config 0 descriptor?? [ 159.446845][ T6004] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input10 [ 159.464799][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.468935][ C3] xpad 12-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 159.476338][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.484810][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.490670][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.510217][T10902] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.520332][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.530088][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.545292][ T5326] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.576662][T11027] veth0_vlan: entered promiscuous mode [ 159.585704][T11027] veth1_vlan: entered promiscuous mode [ 159.603078][T11027] veth0_macvtap: entered promiscuous mode [ 159.608865][T11027] veth1_macvtap: entered promiscuous mode [ 159.618175][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.624828][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.633885][ T1149] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.642745][ T1149] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.657884][ T1149] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.660814][ T1149] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.682920][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.685433][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.698671][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.701065][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.703522][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.705866][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.709188][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.710485][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 159.710495][ T40] audit: type=1400 audit(1774409545.009:735): avc: denied { connect } for pid=11189 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.711536][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.711551][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.711564][ T6005] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 159.725438][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.730565][T11191] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1374'. [ 159.734192][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.742388][T11191] xpad 12-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.750367][ T6005] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 159.764148][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.770577][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.775658][ T6005] usb 12-1: USB disconnect, device number 7 [ 159.779292][ T40] audit: type=1400 audit(1774409545.079:736): avc: denied { mounton } for pid=11027 comm="syz-executor" path="/syzkaller.5zjh0l/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Connection to localhost closed by remote host.